Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECJHzKU4gu5SK3D7zZabZqW4juQ.roa
File: ECJHzKU4gu5SK3D7zZabZqW4juQ.roa (raw, json)
Hash identifier: jBXnYeHdPW+DpQMclo+Gbe3I3ujSXdTnEYpKu0JQi0M=
Subject key identifier: 10:22:47:CC:A5:38:82:EE:52:2B:70:FB:CD:96:9B:66:A5:B8:8E:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182DBCB98B887FEB30E6EAE67454F504C02
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECJHzKU4gu5SK3D7zZabZqW4juQ.roa
Signing time: Fri 26 Aug 2022 20:15:29 +0000
ROA not before: Fri 26 Aug 2022 20:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:db:cb:98:b8:87:fe:b3:0e:6e:ae:67:45:4f:50:4c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 20:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=102247cca53882ee522b70fbcd969b66a5b88ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:64:60:3d:2f:71:c7:12:c5:b8:df:7b:12:
0b:59:3f:70:09:6f:85:db:4d:80:b7:f5:bd:e3:c4:
78:b8:e1:e0:7d:57:d3:20:ea:d3:9d:59:fa:78:52:
9f:be:96:8e:51:66:2b:ad:49:49:85:d3:16:44:43:
95:b0:6b:51:79:a7:d5:f2:73:52:a3:af:03:ef:b9:
35:8b:39:ff:c6:1c:53:e3:65:3a:e5:9e:1d:b0:bf:
82:ad:02:b9:d2:1c:36:b1:18:28:3b:6c:4c:46:a7:
5a:0c:58:aa:2c:ed:00:9d:90:2f:cb:9f:a3:6f:8d:
07:1c:48:88:18:6b:67:30:4d:33:eb:84:c1:8e:4b:
c6:d1:b8:85:41:44:25:41:f1:8b:d2:3f:9e:1a:d4:
51:43:9c:1a:c9:23:a4:10:6c:93:27:44:fd:0d:35:
28:fa:6f:47:dc:e6:c5:de:b4:fd:e9:68:fc:d0:ab:
0d:fe:96:c3:18:38:5f:a1:de:b5:35:99:93:16:3b:
6c:75:e2:12:e6:34:4a:63:8b:d0:d6:e5:5a:2f:ad:
b3:27:b8:2b:76:18:ea:a3:a5:3a:da:9b:cd:22:1e:
38:f1:08:40:60:e0:10:d9:cd:24:7c:39:90:1b:4c:
c1:cf:68:22:6d:e5:da:d5:7c:ee:5d:c6:40:c3:09:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:22:47:CC:A5:38:82:EE:52:2B:70:FB:CD:96:9B:66:A5:B8:8E:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECJHzKU4gu5SK3D7zZabZqW4juQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:dd:63:9d:5c:1c:1d:28:ef:a5:b5:ea:3f:6d:06:99:26:53:
6b:58:87:87:4e:a1:96:93:21:a3:9f:1f:ba:c0:54:57:c7:c9:
26:ba:bc:64:cc:6d:67:82:56:98:45:fa:a7:14:7d:64:9c:8a:
d4:d0:13:0c:b7:55:98:8d:36:8d:ab:c4:57:cf:84:ab:6f:b8:
e0:fa:94:4b:ad:bf:83:02:eb:a6:65:ac:8d:a5:9e:7f:41:3a:
21:f0:39:4d:4b:64:fe:b0:8e:fe:d8:f0:96:9a:a0:f9:0c:18:
ee:d5:49:3c:c2:3b:a3:3b:a6:f9:64:49:5d:71:ae:ff:63:10:
33:65:1b:69:f8:17:41:1a:6a:0a:82:45:54:4c:10:1a:ed:9d:
b9:20:ce:54:35:a6:d8:84:d6:6d:eb:10:80:b6:5e:ad:91:b3:
a1:28:ae:a1:d5:47:d0:ff:20:45:a8:9c:58:28:51:8c:1f:76:
e3:4c:77:d4:11:af:1b:e1:d5:d6:3a:16:e4:45:9e:88:f1:28:
78:71:a5:7c:9a:fc:ac:32:84:76:2e:ff:39:ee:70:6f:3c:0f:
c7:0e:e1:d9:7d:e5:b9:af:42:51:f7:2e:1e:8c:0a:d0:04:76:
6c:df:45:65:4c:47:fc:29:2b:86:6f:bf:72:a3:5b:39:f4:fa:
b9:35:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:06:35 2025 by rpki-client