Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EFKPkYOdqjxDPHw-RGsZvU841pA.roa
File: EFKPkYOdqjxDPHw-RGsZvU841pA.roa (raw, json)
Hash identifier: zp5YwUthrNVqg/H8rjMDzqFD1GifCPCSXtrIP2M+GxY=
Subject key identifier: 10:52:8F:91:83:9D:AA:3C:43:3C:7C:3E:44:6B:19:BD:4F:38:D6:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899C6A1DCBD9D6C975AE2F8164672308F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EFKPkYOdqjxDPHw-RGsZvU841pA.roa
Signing time: Fri 28 Jul 2023 12:12:27 +0000
ROA not before: Fri 28 Jul 2023 12:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:6a:1d:cb:d9:d6:c9:75:ae:2f:81:64:67:23:08:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 12:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10528f91839daa3c433c7c3e446b19bd4f38d690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7a:82:68:d3:7c:a8:fe:c2:39:c2:13:ab:1d:
ed:5f:b6:e4:35:e2:10:e8:1e:b5:ba:6d:93:9c:ac:
55:74:0a:8c:6c:eb:e6:2e:dc:dc:42:64:e8:67:78:
87:1f:2f:74:f2:ce:d1:ab:d1:8b:4f:4e:37:86:c7:
28:af:38:22:ab:c4:d1:ca:bb:8c:12:29:f5:77:48:
2c:7d:66:6e:8f:52:68:c5:61:f5:50:f1:79:1d:6d:
32:4c:8e:15:d4:8f:f4:7c:a4:90:d5:06:bb:bf:31:
e7:b3:a4:65:fe:bc:60:99:e7:b6:85:9f:e3:7f:58:
28:ad:1f:ac:b8:d0:94:95:19:24:54:36:56:a5:90:
e1:2e:a6:4c:73:eb:8a:60:43:2e:af:e6:64:b7:f8:
59:1d:fe:f0:6f:07:df:6d:11:64:32:3c:20:44:bc:
12:7f:ab:00:96:ba:fb:ed:f6:1d:be:f5:86:7d:14:
70:10:a6:1f:79:be:32:09:38:48:ed:6c:6c:20:f0:
52:b2:26:d8:c8:1b:67:d8:4a:0b:af:3b:91:0d:c8:
2f:c1:03:9f:a0:4b:6f:eb:bd:8a:00:d2:ad:c0:6e:
c3:08:3c:16:d9:6b:5c:18:67:05:84:63:aa:3f:c4:
21:a2:01:bc:53:e1:78:ff:0e:5d:58:de:52:51:d1:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:52:8F:91:83:9D:AA:3C:43:3C:7C:3E:44:6B:19:BD:4F:38:D6:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EFKPkYOdqjxDPHw-RGsZvU841pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:57:49:b3:62:8a:b3:f6:16:45:6d:28:15:f4:2d:81:6e:fe:
d7:5a:97:02:9c:20:fb:fa:7a:38:3b:f8:a3:d2:e5:22:99:c8:
4e:18:65:a3:fc:f8:6c:c9:64:71:ba:55:dd:32:86:d5:06:22:
0d:55:21:0a:5a:3b:c3:c8:66:e3:c3:69:03:ff:38:40:a0:2a:
a1:da:ee:7c:9f:7e:b2:73:37:7a:4a:ab:5c:10:94:56:cd:53:
4a:ff:9a:b0:f8:68:b7:54:0d:21:b3:26:c2:70:9d:d4:7f:b3:
78:83:fc:aa:89:79:b8:51:17:30:20:1d:d3:c6:47:0d:40:2d:
dd:20:e0:34:c0:da:a3:94:c2:ff:a3:9e:34:12:08:d4:ce:20:
1b:19:07:cb:df:df:81:10:89:2a:36:e4:36:b6:7d:d4:a8:e6:
d1:26:03:b5:ae:5a:8e:54:13:5d:00:e4:22:c8:4d:65:07:4d:
cb:0f:24:5a:98:cd:31:d2:24:51:6b:75:d2:73:47:2f:b1:ce:
45:ed:d8:9e:53:52:99:28:1d:87:ca:af:cd:da:78:b7:9e:38:
0a:5d:7c:d8:a9:00:5c:02:c0:1c:9d:90:4b:89:6d:9b:0d:1e:
28:48:3f:61:ab:95:5d:fa:be:dc:d3:73:5c:ba:93:7d:d2:d3:
ef:a4:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:19:26 2025 by rpki-client