Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EDbkBHVqMa2y9YQzemnoiii6smo.roa
File: EDbkBHVqMa2y9YQzemnoiii6smo.roa (raw, json)
Hash identifier: MQrdSFrBiPoNM3SGq01/Wvm6HpyG8wdhuygQfYYCDLw=
Subject key identifier: 10:36:E4:04:75:6A:31:AD:B2:F5:84:33:7A:69:E8:8A:28:BA:B2:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AA23EA8E0F23F15CA774D0764DD1B2A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EDbkBHVqMa2y9YQzemnoiii6smo.roa
Signing time: Mon 31 Jul 2023 04:10:27 +0000
ROA not before: Mon 31 Jul 2023 04:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:23:ea:8e:0f:23:f1:5c:a7:74:d0:76:4d:d1:b2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 04:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1036e404756a31adb2f584337a69e88a28bab26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a3:17:6e:46:7a:8d:b7:9c:25:1a:b2:99:3f:
0c:05:c1:b1:c4:99:2e:8d:a9:44:54:2c:29:f1:dc:
d0:1d:ef:ab:ce:01:dd:a6:1d:4c:fa:e1:97:18:bc:
73:e7:5c:94:ef:4d:ad:30:78:78:8f:6b:4a:63:89:
df:c2:17:7f:73:9c:97:e9:0b:6f:57:fb:64:00:70:
f6:3b:96:38:89:a3:c8:2d:98:cf:24:a5:f7:26:34:
0f:2a:14:a5:6c:1f:88:00:a4:54:68:c2:6a:a3:31:
3d:6e:df:b4:0a:39:77:ef:5e:24:15:af:3b:f3:8b:
a3:03:f7:59:3c:96:83:9a:51:25:12:1a:33:fa:47:
4b:0d:60:9d:b2:45:c6:23:2d:3b:73:26:e7:5d:ff:
8a:55:99:62:4f:d2:41:f2:81:c3:53:1e:4c:8e:6e:
8b:6b:f7:31:78:1d:3e:85:e4:66:a2:d7:85:53:99:
b7:82:cb:d8:5a:c6:8a:2a:48:3a:04:70:5d:8e:a1:
a9:a3:33:fc:7e:93:80:b5:97:19:86:76:c5:c2:d5:
58:c9:b3:bc:e3:f7:f6:2a:1f:a5:85:6a:d0:14:e0:
c9:15:4c:62:15:f7:b0:4c:79:16:e4:20:44:c9:bd:
b0:62:14:7e:4b:72:91:6f:e2:6e:44:74:c0:f1:ef:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:36:E4:04:75:6A:31:AD:B2:F5:84:33:7A:69:E8:8A:28:BA:B2:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EDbkBHVqMa2y9YQzemnoiii6smo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:3b:fc:c0:02:ae:62:62:9f:e5:4e:9c:c9:7f:1f:e1:70:81:
f8:e3:00:ad:6c:f6:65:8c:20:88:4b:8f:48:29:fb:17:0a:82:
42:d0:13:d8:cd:f3:4a:98:2d:b4:14:b6:30:46:50:d7:b7:16:
5e:16:98:1d:1d:48:1b:bf:91:38:7a:e5:1e:2c:2e:2d:59:23:
ba:b9:44:54:83:50:9d:e2:15:c5:ec:5f:42:ae:44:4d:df:ac:
e4:68:82:b6:fc:3e:e5:d4:cb:9e:16:46:69:29:2a:40:fe:72:
b0:80:cf:1f:97:f4:53:6f:46:e4:95:8e:b2:31:2a:b7:24:49:
05:6b:79:01:b7:02:3c:ae:9d:8d:61:5b:29:e2:7b:25:5d:ff:
8d:14:42:9b:d2:11:a3:e8:c6:b1:b1:4b:80:f7:81:df:a1:02:
ad:df:cd:4a:58:34:3e:8a:3f:c3:8b:7b:0f:07:1b:4f:40:71:
4f:d2:43:a2:97:34:51:e0:e3:d1:53:8f:64:90:8a:5e:30:8f:
91:c5:09:42:2a:5f:5f:9a:c2:56:0f:a0:a4:a7:bb:23:be:47:
49:c3:b0:35:1a:a9:90:08:dc:02:6a:b4:0e:b6:cb:39:9d:be:
20:f7:c9:97:8a:17:50:57:23:ee:52:bc:91:e1:6b:6e:2f:f0:
21:99:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:05:08 2025 by rpki-client