Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EEgxX88lxyZrI1lWIdnHrHPBlGg.roa
File: EEgxX88lxyZrI1lWIdnHrHPBlGg.roa (raw, json)
Hash identifier: DQy2Mzft5unUaIUAJhdkmiIdZL71hD3d5WJHLXlWhPg=
Subject key identifier: 10:48:31:5F:CF:25:C7:26:6B:23:59:56:21:D9:C7:AC:73:C1:94:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79749B3F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EEgxX88lxyZrI1lWIdnHrHPBlGg.roa
Signing time: Fri 08 Apr 2022 07:10:16 +0000
ROA not before: Fri 08 Apr 2022 07:10:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037685055 (0x79749b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 07:10:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1048315fcf25c7266b23595621d9c7ac73c19468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:ed:a4:38:ec:a7:98:19:71:7e:18:ae:92:
75:56:8c:7a:1f:91:14:3f:67:a5:9b:db:2c:6e:58:
f1:0c:34:5d:f3:f5:ab:eb:96:a8:a9:c9:54:c6:76:
00:58:2f:50:8a:88:01:7c:93:72:ad:01:b2:00:ba:
ca:b1:96:1b:d9:70:6a:fe:d6:f8:16:7c:5b:33:df:
bd:65:11:37:75:5f:9b:13:31:99:2d:6c:a7:f7:68:
90:b5:9e:6e:1c:8c:cb:3b:11:65:dc:3b:93:c9:fb:
d7:bb:66:cb:6c:4e:f9:08:5f:2c:c0:92:1f:c7:0f:
d3:19:14:01:2a:ca:41:0d:91:9a:7d:64:d4:36:9f:
e3:a6:e5:4c:cb:1e:d5:79:b4:57:73:05:57:3e:18:
5f:e8:ee:51:46:01:e2:80:02:9a:43:ef:36:23:07:
9c:a2:4b:ea:dc:d7:7a:1e:39:ab:67:8b:d6:4c:58:
90:cc:91:2a:f5:60:8b:38:3c:b7:5f:6a:77:3c:86:
94:7d:c6:bd:83:b1:a2:67:ee:5e:5c:ee:73:37:f3:
33:92:a8:1d:d6:de:cc:50:c9:79:dc:32:bb:17:c1:
c4:49:29:f9:e4:96:73:7f:08:13:fa:55:d1:f1:2f:
9c:de:7c:15:68:f5:63:c5:49:a5:1c:81:f2:5a:e2:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:31:5F:CF:25:C7:26:6B:23:59:56:21:D9:C7:AC:73:C1:94:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EEgxX88lxyZrI1lWIdnHrHPBlGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:0c:d0:eb:0a:09:99:e9:f3:0c:e8:8d:54:84:72:dc:18:92:
8a:41:ea:f0:d4:66:60:b1:66:b6:28:1b:76:ba:54:3d:2b:a9:
54:9c:a9:5a:82:84:a8:5e:36:32:33:fe:46:a2:79:ac:64:66:
02:fe:10:55:d5:ea:29:a8:6b:9f:3d:08:28:d0:f7:82:a3:29:
cd:22:07:07:e3:56:17:2f:06:b4:3f:4a:7a:ac:61:e2:bd:25:
3c:cf:9b:83:9b:8b:e6:cd:14:4e:21:4b:b9:97:95:c8:b4:a8:
3a:28:34:04:7f:d1:1a:f4:d7:87:d6:f2:46:5d:05:04:f3:7f:
85:41:f0:be:e0:11:5c:a3:ff:02:c2:d6:11:c4:6a:bb:49:6c:
a5:a4:47:3f:5c:25:fd:2c:37:b0:37:31:be:7e:36:03:02:c2:
e0:c9:87:38:32:0f:96:71:c5:13:db:af:db:51:b7:f1:ac:32:
e3:26:cf:ca:dd:c1:fb:80:b8:00:e5:0a:96:73:2a:fc:e9:e8:
2a:70:cb:0b:82:c4:b4:12:4d:0f:a8:6c:39:82:8d:4c:43:5f:
2f:2d:7f:94:47:9d:ef:ac:e9:6e:3d:2b:2e:ef:d3:dd:e1:41:
61:cc:4a:bb:13:ce:2a:3b:be:0e:6e:e6:09:2d:a5:a4:6a:59:
b5:02:21:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:10:35 2025 by rpki-client