Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9mUGHzMEtv-oeb7jjd77TPy5RQ.roa
File: E9mUGHzMEtv-oeb7jjd77TPy5RQ.roa (raw, json)
Hash identifier: NnNrAHeNbzE1k87fnX2G4ht5HVKTIlIItG/oCUoS5Ys=
Subject key identifier: 13:D9:94:18:7C:CC:12:DB:FE:A1:E6:FB:8E:37:7B:ED:33:F2:E5:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D27C581B43F06F90F2B165A63DA7BD3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9mUGHzMEtv-oeb7jjd77TPy5RQ.roa
Signing time: Mon 19 Jun 2023 07:09:04 +0000
ROA not before: Mon 19 Jun 2023 07:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:7c:58:1b:43:f0:6f:90:f2:b1:65:a6:3d:a7:bd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 07:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13d994187ccc12dbfea1e6fb8e377bed33f2e514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:29:66:a2:a2:ac:7c:3e:ad:ce:87:70:48:84:
ea:87:16:0c:b8:a9:ce:7a:ab:67:90:5e:4c:97:ce:
df:95:8f:55:d9:18:19:9d:d3:ed:b6:7b:d5:8b:f7:
1a:4f:3c:bb:91:54:63:83:63:92:73:8c:d2:f5:f4:
d6:9b:69:05:47:1d:9b:f0:f3:e8:0a:db:c9:d7:91:
7f:76:9b:39:07:d9:46:53:98:db:61:e8:f2:0d:36:
70:df:03:f4:21:3d:72:4b:34:c8:a2:55:38:02:08:
e8:3f:95:23:ba:e1:af:57:a6:b4:7d:7c:f8:31:aa:
54:3e:0d:ec:c8:5c:82:d8:01:3a:46:60:37:7c:65:
a7:af:34:d2:03:9a:a2:ff:bf:c4:6c:6b:52:b9:11:
c9:d2:0b:8c:98:ec:af:5f:40:51:63:a4:be:31:d9:
22:42:d9:a0:34:7d:53:54:4b:f7:03:dd:8b:42:4d:
86:c2:2a:de:48:78:33:3d:84:f3:0e:44:ab:84:8f:
37:46:a3:e7:b2:77:0d:2e:ae:23:4c:c7:bd:3f:2a:
8c:e0:1b:a8:82:70:de:11:e3:28:20:66:5d:fe:4e:
2a:4e:09:3f:5b:cf:a5:51:01:36:e9:a7:4c:43:73:
b6:9b:61:d3:e3:a3:70:63:18:cb:2b:80:33:5e:20:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:94:18:7C:CC:12:DB:FE:A1:E6:FB:8E:37:7B:ED:33:F2:E5:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9mUGHzMEtv-oeb7jjd77TPy5RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:bf:ed:d4:26:56:92:6a:4e:02:4e:c1:ee:f6:28:0f:b0:07:
9f:3c:de:7c:f1:02:76:e9:c6:6f:32:da:75:7b:1e:9e:70:66:
6d:e5:5c:79:47:5b:0e:5c:69:81:ce:4a:aa:31:6f:3c:3e:80:
40:d5:3e:e6:a7:77:03:32:3f:c3:10:ad:c7:0f:b1:30:28:2d:
7e:fc:7a:36:00:38:5f:a3:0a:5c:7d:01:7d:2d:7e:3c:01:b5:
80:67:41:77:f3:0b:40:97:3e:ed:b9:ee:33:ed:99:8a:3e:08:
cf:2b:77:6e:95:b1:b3:e2:76:88:0b:d4:54:e8:73:27:2e:5d:
bc:65:07:94:f8:95:5b:cd:a2:a1:ca:1b:a8:29:04:12:0d:81:
6b:1e:24:b7:a3:dc:f4:fc:9b:d7:e0:8e:44:a4:2d:a2:4e:30:
80:fc:44:97:3e:2e:f8:4e:9c:3c:74:b5:19:6b:fa:be:1b:87:
29:67:57:58:05:e0:c0:9c:e1:2b:d6:36:dd:6e:15:3c:fe:c8:
31:ca:c0:0c:74:0e:09:86:97:3f:c2:7c:5e:ac:60:75:82:a8:
f1:27:9e:69:d6:f8:f7:15:7e:1a:5b:21:15:1f:75:1c:64:a6:
c7:95:eb:c5:dd:68:86:78:e7:b0:c0:80:4b:4c:83:9f:6d:14:
56:6e:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:36:25 2025 by rpki-client