Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECVEAL7OGdWGIfK3NhZRKou2GEo.roa
File: ECVEAL7OGdWGIfK3NhZRKou2GEo.roa (raw, json)
Hash identifier: XjhMWxneY9WUIzorSxgTUqhwxGVDyaRjkVK2cJbORLw=
Subject key identifier: 10:25:44:00:BE:CE:19:D5:86:21:F2:B7:36:16:51:2A:8B:B6:18:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A5EC88C18BD64C82C44A3D2C81AAD18E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECVEAL7OGdWGIfK3NhZRKou2GEo.roa
Signing time: Wed 05 Oct 2022 02:14:45 +0000
ROA not before: Wed 05 Oct 2022 02:14:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a5:ec:88:c1:8b:d6:4c:82:c4:4a:3d:2c:81:aa:d1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 5 02:14:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10254400bece19d58621f2b73616512a8bb6184a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:f8:ea:2d:f7:3a:fa:64:86:91:e4:3a:70:
d7:2d:63:23:fe:23:26:95:b8:6c:60:7a:a2:c6:92:
af:90:35:85:46:17:e3:10:d5:1e:36:9e:3c:6a:8c:
bf:d3:49:c6:26:6e:b2:46:42:3f:35:8a:f1:0f:06:
58:b0:90:36:61:f3:01:de:56:02:0d:04:16:96:3b:
6f:4d:05:24:e8:34:76:13:2f:e3:48:af:8d:2a:a5:
b6:b4:c0:c4:d5:de:d4:88:54:bc:84:25:84:15:9a:
46:bc:8b:3a:d6:59:c5:11:03:6f:fc:35:2e:3a:d1:
c2:ec:66:a1:55:3e:27:66:16:47:fe:3f:14:75:72:
e8:83:34:e5:cc:53:cc:54:b5:03:a2:c8:2a:3c:70:
41:2b:28:c9:54:0f:5d:c4:94:19:4c:2e:78:7b:92:
aa:20:68:26:0f:30:82:98:9f:1d:76:09:41:46:39:
66:0d:ce:cb:3b:d2:e7:fc:8f:07:1c:a8:18:e4:6a:
35:fe:d3:25:af:33:56:55:d5:d2:4e:93:9a:63:23:
46:94:19:ce:8c:02:a2:81:c8:dc:ac:de:34:9f:34:
e1:a8:69:43:9e:9f:1f:96:a6:c4:a1:23:01:2d:42:
68:c1:63:9d:dc:b4:e4:86:53:84:d2:38:f7:af:a2:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:44:00:BE:CE:19:D5:86:21:F2:B7:36:16:51:2A:8B:B6:18:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECVEAL7OGdWGIfK3NhZRKou2GEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:55:92:67:18:af:3a:77:80:60:bd:9e:0b:63:76:9b:8d:a9:
95:e1:ad:79:34:22:39:20:84:2e:05:7d:2c:7c:26:f6:63:8d:
ec:c6:74:5f:93:49:90:2d:ad:97:4d:10:1c:2f:65:be:41:ff:
86:20:4c:91:d4:0f:76:b1:61:b6:95:61:c9:d8:c2:dc:7d:87:
36:93:60:ff:e8:bf:f6:db:88:ff:19:48:1b:34:cb:79:07:d3:
b8:c4:2f:03:a9:03:e0:c3:80:22:19:ff:70:fa:79:45:67:14:
16:06:a3:22:c8:ac:fd:7d:09:25:71:89:93:37:89:fb:28:df:
bb:9c:66:f1:85:04:77:2b:52:08:ed:5c:cb:c5:ba:e7:2a:2a:
ea:2d:ab:c6:57:53:06:81:32:77:0f:ee:1c:29:3c:43:d0:a4:
39:a6:59:68:86:46:9d:ae:fa:97:7a:45:c7:e8:37:ce:f3:db:
cf:76:ec:ce:d0:bd:6a:01:a1:54:25:67:cb:d1:dd:e5:75:c4:
f7:fc:d6:50:06:2a:a2:3b:b3:a2:01:7b:f3:2c:95:a0:cb:c3:
a6:21:7e:bf:fb:ed:34:35:49:3a:92:31:ff:4c:a0:be:c9:9a:
1f:48:23:76:24:e7:56:49:d6:32:19:28:76:38:f8:96:8a:6a:
4c:30:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:44 2025 by rpki-client