Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9m-GYeiMrODpzGBqSiRv3sNcBw.roa
File: E9m-GYeiMrODpzGBqSiRv3sNcBw.roa (raw, json)
Hash identifier: t8CHbC0+xuazg9uBN+whzOo6eqbqiY1We+VmC9m0aJw=
Subject key identifier: 13:D9:BE:19:87:A2:32:B3:83:A7:31:81:A9:28:91:BF:7B:0D:70:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182365C1FA45A8E97B00051C83542E26976
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9m-GYeiMrODpzGBqSiRv3sNcBw.roa
Signing time: Mon 25 Jul 2022 17:16:23 +0000
ROA not before: Mon 25 Jul 2022 17:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:36:5c:1f:a4:5a:8e:97:b0:00:51:c8:35:42:e2:69:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 17:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13d9be1987a232b383a73181a92891bf7b0d701c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:18:1e:81:a6:cc:71:a9:3d:65:99:ec:dd:
cc:df:7b:de:be:01:b7:9a:ff:1f:dd:7d:64:1a:86:
1e:2c:a3:3b:f6:25:a3:bc:7e:50:22:38:a6:59:29:
29:df:5d:d6:3c:2e:33:87:b3:04:d0:e1:29:60:b6:
e2:1c:12:11:36:24:ae:22:b3:a4:30:7f:d4:d4:65:
d3:39:c6:8a:56:71:43:74:2e:0f:0a:b9:ed:d1:65:
3c:35:77:06:0f:f3:50:5d:2f:eb:c5:34:a1:22:4e:
84:85:94:d4:c3:09:97:1c:cc:b4:91:78:42:83:eb:
f7:94:36:29:f8:08:b8:a2:06:5d:bc:2a:e0:66:24:
42:72:cb:a4:87:91:64:58:55:03:a1:90:18:e0:60:
24:b0:c7:c0:7e:27:42:dd:01:0a:d8:f5:22:3b:40:
7c:e2:9e:66:25:e8:1e:ea:31:40:2d:97:b2:03:f6:
a4:b7:e2:81:f0:7b:c0:9d:c3:b4:71:aa:f6:ff:07:
4d:e4:11:4b:6c:92:ff:e4:9a:fe:42:f5:41:f4:a7:
04:17:f8:13:86:d5:70:1d:ea:fd:ed:55:a0:11:41:
b8:c7:7a:76:85:c3:c3:aa:e3:6d:d5:4d:82:40:12:
66:db:b4:ec:3a:68:d4:96:c3:5f:91:39:ec:a6:d6:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:BE:19:87:A2:32:B3:83:A7:31:81:A9:28:91:BF:7B:0D:70:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9m-GYeiMrODpzGBqSiRv3sNcBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:34:b4:a0:de:4b:bf:d8:fd:90:c8:26:e2:ca:fa:4d:c8:80:
7c:e9:40:b8:fa:90:2e:ad:e4:a8:b1:ac:8c:e3:ea:f5:68:50:
b1:14:c2:99:5e:de:a7:0c:2e:6c:0f:4a:d8:4f:2d:61:a5:4e:
b7:11:31:ed:ca:35:ec:8e:83:17:a7:76:ff:8e:64:cf:4a:5a:
d8:f7:01:c0:d7:7a:3e:3d:ff:d9:17:af:26:4f:7b:c9:de:62:
66:42:99:00:39:18:8e:d6:38:b6:9b:5d:de:8e:3c:9f:ac:e6:
2e:ef:3a:1b:74:43:3f:2c:63:7b:08:75:07:37:05:10:42:b9:
36:bd:41:86:3e:16:94:3e:20:89:12:2d:41:e4:01:66:b6:71:
06:c0:c0:62:90:6d:1c:da:32:32:e3:fe:79:92:3f:4f:b2:17:
02:21:b6:5f:a1:ee:30:78:64:82:8f:13:30:bb:19:c5:7b:be:
a4:9b:e3:49:ae:c9:cd:05:4e:36:98:b1:62:d7:82:41:6b:46:
23:39:bb:e3:25:d8:05:ff:9a:59:4c:57:7f:1c:82:ed:4a:89:
d0:b9:5a:50:1b:b9:c1:10:d6:f2:3e:10:2e:af:8a:4a:d6:72:
e7:96:62:41:55:38:d2:3a:1e:de:3d:0c:fd:ac:c3:06:ef:ba:
1b:4e:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:44:51 2025 by rpki-client