Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EJIlaADpLPUvChKeeUhYWDfQ0YI.roa
File: EJIlaADpLPUvChKeeUhYWDfQ0YI.roa (raw, json)
Hash identifier: JN3KCg75o42tViLcK16yATTc9Y/Z4JBEcCbOjhpM6zE=
Subject key identifier: 10:92:25:68:00:E9:2C:F5:2F:0A:12:9E:79:48:58:58:37:D0:D1:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018883F37BB3C29321A807416B605432D3BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EJIlaADpLPUvChKeeUhYWDfQ0YI.roa
Signing time: Sun 04 Jun 2023 01:09:12 +0000
ROA not before: Sun 04 Jun 2023 01:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:83:f3:7b:b3:c2:93:21:a8:07:41:6b:60:54:32:d3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 01:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1092256800e92cf52f0a129e7948585837d0d182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:b2:c7:d8:4a:bd:eb:a1:45:64:20:80:87:
d6:5f:8a:d2:b8:56:35:05:8e:19:bd:8a:b3:d6:20:
60:4b:ca:87:9b:ca:d9:cb:3a:c6:82:69:8d:34:de:
f0:ea:90:9d:8a:c1:1a:02:d3:41:f4:b4:29:8c:74:
54:06:c7:da:3f:92:89:71:40:4b:82:0a:9e:99:ad:
72:8d:6c:0a:a6:ee:e8:6a:ec:a8:15:10:ba:03:99:
91:4b:ef:5b:da:d8:5e:07:c8:23:af:0b:59:2c:fd:
db:10:76:e0:04:43:18:03:92:62:83:e6:91:9b:77:
d1:b2:a7:be:fa:1b:51:78:f4:0b:a8:cf:bd:57:37:
ce:d0:b1:ea:3b:2c:5f:ee:a2:5d:1e:f0:89:cd:d5:
25:16:07:ce:6a:7d:d3:a1:15:a0:02:84:b3:10:11:
70:60:dd:bd:90:fb:d5:83:c5:c8:ba:02:6a:a6:68:
3d:ea:4d:41:ac:16:a9:29:52:e7:f7:ba:12:67:74:
3d:b6:91:c6:6c:ad:be:a7:5e:34:37:10:76:1e:39:
d7:3e:49:dd:4c:75:2b:02:5c:83:03:24:db:de:17:
ed:5f:2b:ee:57:1c:05:f3:9d:16:6a:3f:7d:1f:8b:
52:8c:81:a0:42:20:90:c8:06:31:46:31:9b:d4:c3:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:25:68:00:E9:2C:F5:2F:0A:12:9E:79:48:58:58:37:D0:D1:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EJIlaADpLPUvChKeeUhYWDfQ0YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:c0:e3:d5:7a:d4:98:28:95:1b:0f:11:7d:8d:c9:6e:3c:33:
52:dd:57:fe:1b:44:1c:dd:3c:f0:7e:fc:21:cb:26:2b:cd:11:
95:79:73:76:9f:9a:35:f9:af:78:f9:30:df:36:88:88:f4:34:
a2:c8:6a:44:67:72:cb:b3:86:44:66:1f:31:d9:a3:5e:82:81:
a5:c0:6e:40:4b:b5:5e:1c:87:59:1f:d6:0e:1c:2e:4a:b9:05:
d9:8e:ea:c0:7c:37:6f:44:b1:29:2a:03:f6:c6:b7:1e:9a:0c:
4c:5b:6f:36:ef:a3:55:3f:bc:48:77:98:15:57:54:04:de:7e:
a8:de:17:e5:2b:5a:c0:5a:f7:84:c9:9e:46:8c:6b:12:d6:58:
9b:c6:2b:b4:b5:df:49:d8:fa:87:0d:7b:2c:14:9b:9b:fc:d5:
a2:69:cd:7f:8d:95:9d:2a:03:a3:51:e2:46:3f:0c:91:5c:9f:
f0:27:f3:48:4d:37:ea:60:52:c8:e4:6d:e3:07:27:a4:30:d8:
dc:8e:6a:20:fd:da:f4:e0:76:18:14:96:e0:d3:cf:8a:25:5e:
3b:39:ee:71:c3:19:45:b9:a3:b6:f3:9b:67:7e:75:c2:da:2c:
21:97:46:87:34:59:8f:3c:39:f8:c2:bb:f1:61:44:40:b1:b2:
f8:97:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:26 2025 by rpki-client