Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EDVAM0B8z8cd-KpZYfqUNoKBkSY.roa
File: EDVAM0B8z8cd-KpZYfqUNoKBkSY.roa (raw, json)
Hash identifier: aA7x7NNfCA3M8Y3nTQKLaCih65g2fPVUJrxV8ab5MBQ=
Subject key identifier: 10:35:40:33:40:7C:CF:C7:1D:F8:AA:59:61:FA:94:36:82:81:91:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186900149575BEAE9CB9FE5B9872592C14F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EDVAM0B8z8cd-KpZYfqUNoKBkSY.roa
Signing time: Sun 26 Feb 2023 23:14:08 +0000
ROA not before: Sun 26 Feb 2023 23:14:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:90:01:49:57:5b:ea:e9:cb:9f:e5:b9:87:25:92:c1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 23:14:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10354033407ccfc71df8aa5961fa943682819126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:79:01:81:d1:f8:e1:79:24:56:3d:e2:1c:
ca:f7:4f:aa:42:fe:40:fc:7e:1e:9b:22:8f:70:0b:
0b:82:ea:08:02:ac:9d:2b:08:ea:24:98:ee:a7:a4:
b1:79:23:d6:e9:7c:40:f7:e3:61:f9:da:07:78:c3:
2b:65:d1:50:53:a4:cb:5a:05:6a:61:75:37:8e:f2:
6b:29:73:5a:87:26:ee:95:9a:95:0f:61:69:f0:51:
74:bf:c1:c8:d9:ab:a2:e9:ae:de:9d:f1:83:c4:19:
f3:0c:0e:c6:79:94:64:bb:36:b0:6c:c1:a8:70:2b:
b6:2c:2c:fd:8c:ab:13:75:c0:eb:49:41:68:84:e1:
92:c6:cd:41:f6:0d:f9:aa:16:09:78:91:3b:98:82:
3f:b3:1c:cb:39:3e:56:96:3d:e5:da:fa:c3:05:4b:
55:b4:55:e7:59:52:9c:48:4f:74:63:63:4e:4c:fc:
88:7c:e0:b5:6e:fe:59:2a:cc:5e:3f:2f:e1:a2:a5:
f9:02:2d:99:6a:e9:18:91:a5:5f:0e:5f:70:5c:9d:
63:cf:f6:6b:e3:f2:3d:7c:ff:cb:8a:73:76:ad:11:
ac:22:41:00:15:a7:00:7a:bd:3c:b2:1d:86:f9:35:
4c:1d:b3:f9:b5:71:af:37:89:4e:d2:72:7e:e2:41:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:35:40:33:40:7C:CF:C7:1D:F8:AA:59:61:FA:94:36:82:81:91:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EDVAM0B8z8cd-KpZYfqUNoKBkSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:24:56:a3:1f:7e:ff:d9:c2:90:0d:06:ad:11:da:ba:14:4c:
dd:47:9c:95:5e:bf:92:bf:91:71:7a:73:d9:d6:af:37:3b:92:
a7:6d:8a:0d:d8:5e:e9:59:a4:9f:dd:5c:58:9d:ed:e4:4a:fb:
80:1c:a7:0f:4e:df:87:ec:9c:25:66:ac:35:6b:bd:5f:6d:7a:
ba:f6:78:0c:7f:ce:04:75:6e:e2:43:88:e5:ff:38:7e:09:60:
8c:06:47:4d:00:ff:9c:3a:65:db:80:d7:72:7f:ee:7b:f0:99:
14:21:7b:04:c5:8d:c9:bb:69:07:8d:4c:59:1c:bb:d2:5f:f2:
b2:af:77:e4:25:71:0d:e1:14:dd:c2:d8:6f:96:9a:b0:e3:cd:
91:20:3d:02:3e:fa:70:87:f6:1b:14:94:f5:c6:20:74:f3:62:
9c:50:9a:91:d7:88:64:55:f3:ef:8e:e4:97:70:98:3c:64:42:
73:f2:ab:93:e9:d7:6a:95:b9:7d:89:76:6e:d7:88:3b:2d:12:
db:08:87:f7:71:19:4d:d6:07:cc:1f:f0:e2:6d:45:59:a5:66:
af:9d:67:3a:37:7f:12:67:fa:fd:0b:c3:15:bd:7a:40:57:49:
e7:f4:4b:57:18:40:f9:86:26:d8:82:47:a3:07:3c:14:25:b6:
c7:65:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:17 2025 by rpki-client