Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EHSAoAejy36pn5-b_-z8Kw6E3Bg.roa
File: EHSAoAejy36pn5-b_-z8Kw6E3Bg.roa (raw, json)
Hash identifier: +Mog/orKgUU7OjawUcPh7ueRhXCJbMTkTesPyoEg/EU=
Subject key identifier: 10:74:80:A0:07:A3:CB:7E:A9:9F:9F:9B:FF:EC:FC:2B:0E:84:DC:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 824D6483
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EHSAoAejy36pn5-b_-z8Kw6E3Bg.roa
Signing time: Sun 08 May 2022 20:12:21 +0000
ROA not before: Sun 08 May 2022 20:12:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186110083 (0x824d6483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 20:12:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=107480a007a3cb7ea99f9f9bffecfc2b0e84dc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:a4:32:81:c8:60:e8:c9:f7:f9:88:ec:e6:
e4:92:db:82:4c:42:88:75:00:b0:ce:bb:71:f6:d8:
80:f2:3c:84:1b:f9:0c:60:a8:f0:ae:0f:68:39:ca:
9d:9f:a3:6e:23:f9:ca:62:41:21:19:ed:bd:eb:07:
d9:cd:e3:f1:b8:e7:36:0e:08:ee:ed:c9:97:c0:62:
0b:01:cb:87:2e:1e:37:0f:c8:71:b3:75:da:a8:8f:
68:c9:62:58:c0:5d:28:ee:0d:37:c4:5d:be:da:27:
9d:63:70:6a:2c:7c:85:26:f8:4c:39:63:e5:26:5a:
14:29:da:0c:c9:86:a2:93:ca:fc:46:81:fc:e0:58:
b0:60:55:88:67:90:a2:59:97:a4:6f:bd:73:20:c0:
2a:07:54:a7:44:56:9e:eb:11:80:bc:26:2a:d6:a7:
a3:98:b6:d8:23:cf:fd:0d:c2:39:6a:e5:ac:08:e6:
05:a3:8f:e4:b8:77:52:1a:63:be:58:3e:5d:5b:6c:
05:ed:71:d5:f7:f5:c7:ed:53:36:dd:dc:68:06:c5:
4f:9c:08:3c:e8:98:d1:27:19:e2:50:39:52:0a:10:
b3:bc:e2:dd:9f:e1:20:87:b3:3c:8f:0c:ba:0a:c2:
bf:b1:17:27:cd:f2:b5:bc:dd:59:7e:0d:fa:e0:6a:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:80:A0:07:A3:CB:7E:A9:9F:9F:9B:FF:EC:FC:2B:0E:84:DC:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EHSAoAejy36pn5-b_-z8Kw6E3Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:b3:7e:c7:80:5e:9e:22:2f:26:37:fe:c8:60:84:d0:95:49:
63:31:c6:05:b5:4a:c8:69:23:2d:bc:3c:84:0b:2b:95:37:d0:
fb:02:8e:f1:ce:da:3f:e4:c0:6a:65:71:40:7e:c7:75:7f:f2:
b5:6b:b0:62:c7:dd:0b:c1:b0:a4:b4:56:2f:8c:5f:49:c1:c7:
83:a0:12:63:25:b8:04:80:a4:76:ac:54:52:c9:40:95:f5:a3:
14:27:a9:b4:a8:0f:83:f4:c8:29:97:31:ae:53:d1:20:8e:4e:
a7:fc:81:de:97:34:d8:fc:ed:5c:e8:bc:77:22:36:ea:5d:90:
22:b1:05:6f:d1:43:d7:8c:c6:31:71:b5:fe:ee:fe:1c:52:8c:
9f:02:c4:d7:66:03:07:e5:29:a2:70:3f:b2:b5:38:b7:e7:f0:
51:68:5b:66:5f:bf:44:fd:8b:83:61:ec:6c:90:c9:61:7a:ea:
c8:d5:21:80:4a:2f:d7:0b:21:5e:17:48:6b:d2:03:85:0b:e2:
25:7e:27:57:75:82:e0:a1:6d:84:82:81:dc:a3:30:99:10:1f:
bd:a7:bf:c3:5e:99:9b:d6:db:49:db:35:42:59:b0:b3:62:d1:
22:0a:45:f4:0b:36:bb:a3:d0:e4:e2:6d:88:24:14:aa:6f:38:
fc:fb:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:26:10 2025 by rpki-client