Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EHHpPlITPCSNNbHo5U0C3cmps98.roa
File: EHHpPlITPCSNNbHo5U0C3cmps98.roa (raw, json)
Hash identifier: tEcZsZox8wsfCv5zCn6kArm4kEjDQWXWb55AUdPZmMU=
Subject key identifier: 10:71:E9:3E:52:13:3C:24:8D:35:B1:E8:E5:4D:02:DD:C9:A9:B3:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018554FE7B99731966EB55266EE1FD3977A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EHHpPlITPCSNNbHo5U0C3cmps98.roa
Signing time: Tue 27 Dec 2022 19:10:42 +0000
ROA not before: Tue 27 Dec 2022 19:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:fe:7b:99:73:19:66:eb:55:26:6e:e1:fd:39:77:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 19:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1071e93e52133c248d35b1e8e54d02ddc9a9b3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:86:ec:55:3e:25:d9:43:65:d0:87:72:b1:d4:
5e:f1:29:83:50:49:7f:bd:f7:26:9a:ab:5c:bd:33:
79:bc:1c:fc:c2:df:53:d8:45:61:32:a4:e4:5a:5e:
a6:9f:49:67:18:1c:5e:b1:60:7c:a0:63:c1:31:eb:
e4:84:1e:b2:02:70:89:b9:f6:67:36:d7:8a:f5:70:
48:74:6c:c7:27:a7:90:8b:c0:09:61:8a:26:c9:82:
75:f8:31:50:49:c4:d1:50:93:63:2d:30:cb:f9:38:
1b:d2:61:4e:05:33:72:07:61:c2:ee:f7:90:5d:25:
af:3b:d6:c3:f7:74:29:e3:72:f4:4e:2a:c5:5c:ed:
68:77:8e:f4:42:4c:43:96:75:28:af:b9:6d:77:8e:
a8:d7:65:27:29:1d:8b:3e:26:4b:d6:ac:ff:b7:a4:
7e:a2:b0:8d:e6:25:9b:1d:f8:93:16:1b:d2:aa:83:
f8:50:3e:96:00:4d:aa:b6:7a:12:7e:19:c3:24:d6:
92:b2:12:0a:57:0f:2c:03:c9:9f:95:cb:fd:30:87:
c0:97:30:34:bc:c6:7a:53:95:2d:f8:fa:91:85:a4:
74:32:35:c3:fe:8a:e5:9f:8a:5d:10:9a:76:36:03:
b5:6f:b6:c4:38:87:49:07:95:62:07:42:b1:cc:74:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:71:E9:3E:52:13:3C:24:8D:35:B1:E8:E5:4D:02:DD:C9:A9:B3:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EHHpPlITPCSNNbHo5U0C3cmps98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:c4:d5:35:59:6c:1d:09:47:fd:86:4d:41:9f:f0:9e:ef:03:
8c:39:eb:04:c9:88:8c:83:3e:50:87:33:a0:e1:97:96:a4:dd:
c0:d5:64:fd:53:62:5c:64:98:b4:6a:d3:ce:86:bf:5c:99:6c:
4d:ff:4f:6e:fe:c1:0f:d5:4f:0e:9e:f5:38:42:81:cb:6e:17:
e6:26:4b:10:9a:52:fd:53:04:27:56:d7:96:44:59:b6:74:3a:
68:cd:9a:06:b0:95:97:75:ff:96:2e:42:54:f7:af:dc:3b:ea:
2c:ea:22:6c:66:2a:ef:01:89:34:68:79:79:f3:7a:37:9d:0f:
fe:69:0b:b4:09:c6:e5:d5:2c:b6:6a:ee:9b:c8:3d:9d:2c:64:
f3:6a:11:fd:6e:5d:ca:76:12:c0:b8:20:41:fb:af:63:45:12:
13:39:89:a3:8e:b6:7b:7b:66:bd:33:c2:97:ed:ce:1a:7c:29:
c1:46:eb:9d:d9:5e:b6:7d:21:33:63:45:53:c9:26:02:9c:10:
70:b0:fe:36:df:dd:72:41:f9:ae:52:70:11:96:bd:9c:e7:e7:
4a:0f:bf:f1:8a:3b:58:b3:16:c8:98:97:b7:ad:50:ac:36:55:
d6:f5:17:b6:19:f7:be:0d:68:ff:eb:b4:10:2d:d0:41:a8:b2:
a7:ed:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:56 2025 by rpki-client