Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EFV4cEV5PVCrE_cYB5m3LTiinq4.roa
File: EFV4cEV5PVCrE_cYB5m3LTiinq4.roa (raw, json)
Hash identifier: 4DiI/mpo+ljYW/pUVA6GSwf2Nr5PDy3h76QUj3MXvCw=
Subject key identifier: 10:55:78:70:45:79:3D:50:AB:13:F7:18:07:99:B7:2D:38:A2:9E:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 83546CBB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EFV4cEV5PVCrE_cYB5m3LTiinq4.roa
Signing time: Thu 12 May 2022 09:17:02 +0000
ROA not before: Thu 12 May 2022 09:17:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203348155 (0x83546cbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 09:17:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1055787045793d50ab13f7180799b72d38a29eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:be:a0:15:bd:5f:42:9e:3d:aa:34:42:34:
cb:fb:7c:fb:b4:9f:67:b3:44:fa:36:b3:c5:92:7d:
a7:4b:a0:66:57:3a:bd:aa:ab:10:5c:e4:11:ac:54:
79:1f:8b:ea:1c:82:8c:ad:17:a7:4e:ad:f5:df:b0:
86:bf:ae:2d:ce:f6:b1:f8:cc:92:ab:e7:ec:c4:52:
ff:ce:d4:a5:76:be:2e:c8:87:50:d9:e7:28:5c:b3:
a9:ed:c4:d3:1f:f2:f6:3d:b1:b8:06:5d:c0:57:93:
92:ba:2f:72:87:7e:dd:16:79:9c:64:7d:19:8b:25:
77:8b:07:08:f5:0b:fa:c6:6f:11:ec:74:ce:e2:cf:
fd:88:f9:85:f3:b6:3b:14:df:43:3d:90:f9:6c:cd:
5d:0b:e0:d7:0e:84:86:10:d0:7c:43:93:a0:1e:f6:
6e:a7:e9:53:21:fb:96:a8:58:c0:c2:68:68:84:24:
e4:b7:8c:c4:f6:e9:c8:02:8f:7c:60:6e:0c:6d:98:
e9:ef:c6:0d:8d:fd:7e:cc:0c:ab:af:d7:61:0a:98:
42:2a:aa:00:b0:46:b9:cb:61:db:f7:35:05:87:c3:
b3:ba:24:4e:f0:b5:c3:c1:27:9d:0f:80:9f:5b:bc:
46:4a:f6:d1:11:24:8b:61:f4:ee:47:fa:bf:fc:ad:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:55:78:70:45:79:3D:50:AB:13:F7:18:07:99:B7:2D:38:A2:9E:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EFV4cEV5PVCrE_cYB5m3LTiinq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:67:3c:81:a3:6a:f1:77:ef:b9:d1:e2:5d:00:b0:6b:da:18:
0c:df:f8:cf:06:c1:dc:f6:02:1f:76:ab:c3:37:0d:42:ad:f2:
41:5c:67:30:ce:5f:e1:d8:05:13:ca:2d:65:5b:f4:5c:6e:e2:
7f:02:ab:d5:35:bb:bd:ee:71:cf:ab:be:2a:02:c4:01:10:8e:
8a:44:c2:8d:e6:93:9b:3c:2a:24:86:ec:94:31:5c:ea:47:c1:
8a:18:0f:d5:2a:b9:88:3d:9c:e5:e8:99:c7:9e:c6:b3:4d:80:
ba:e9:db:8f:5e:ad:98:7d:88:ea:d0:ba:10:8e:0b:6d:b8:dd:
ae:c2:1e:d3:2f:f8:5e:df:eb:d1:88:74:0b:a4:8d:59:b4:df:
2c:eb:d8:5f:0c:5d:a1:0f:cb:0e:f9:d8:31:8d:ad:54:be:fc:
c7:8e:59:d4:2b:f1:40:b4:82:99:0b:2c:60:2a:72:9f:6a:8d:
f7:76:9f:2f:fb:9d:79:54:34:6e:5e:5d:a0:d3:1c:e9:62:39:
69:8e:80:c3:b8:14:e3:9c:ee:4f:5c:76:1c:57:e7:f9:e2:07:
f6:f9:19:a6:6c:5d:84:27:c3:6e:b2:2e:67:51:95:d8:da:e1:
f2:72:93:ac:15:d6:aa:01:0f:12:34:0c:a9:d2:7f:36:6e:5d:
62:7f:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:31 2025 by rpki-client