Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EMz9CIy9ksA2gfRLwQhDSxymz8k.roa
File: EMz9CIy9ksA2gfRLwQhDSxymz8k.roa (raw, json)
Hash identifier: Mrd6DV0nKcwDxlROyZ4TWvYu+C51cIi7SVrbz3vYHhc=
Subject key identifier: 10:CC:FD:08:8C:BD:92:C0:36:81:F4:4B:C1:08:43:4B:1C:A6:CF:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018477C621E53552D3F4DC8A450C5EBD5284
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EMz9CIy9ksA2gfRLwQhDSxymz8k.roa
Signing time: Mon 14 Nov 2022 20:13:04 +0000
ROA not before: Mon 14 Nov 2022 20:13:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:77:c6:21:e5:35:52:d3:f4:dc:8a:45:0c:5e:bd:52:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 14 20:13:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10ccfd088cbd92c03681f44bc108434b1ca6cfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:04:86:7a:74:ee:23:2f:90:ce:1b:0e:0b:
4b:80:3c:46:7a:9f:5d:44:a1:9f:ef:84:59:c4:00:
79:93:04:93:24:ac:cc:84:0f:fc:89:0f:22:9d:95:
03:05:91:47:4e:7f:ca:a2:d7:8c:fb:12:c3:1a:22:
33:36:81:3d:44:14:52:bf:10:92:99:b3:53:ba:24:
4c:24:ed:b5:cd:bd:5f:3c:29:cc:d3:bd:4e:6e:6d:
9e:14:85:18:fa:f4:b7:c8:5a:85:44:08:2a:db:a1:
6b:7e:2f:ed:a3:c6:b9:35:71:ae:4d:4e:27:55:28:
f6:df:68:7f:61:eb:36:0a:f3:9e:fa:9c:1c:cb:84:
2e:8a:35:3b:5d:f6:ef:19:e6:e8:81:6f:9f:75:0f:
d2:6c:23:4c:57:20:41:d8:e4:2d:5e:15:53:4f:5d:
58:ce:24:d4:f0:b8:e9:ea:32:c9:d7:23:f8:cc:20:
4b:08:da:25:e9:19:28:05:44:07:fc:73:c6:6d:a8:
e6:3e:cc:c7:d8:84:33:e7:25:50:d1:85:5d:23:5a:
43:00:b2:66:06:a8:eb:41:ed:3a:a1:ee:fc:bd:2a:
cd:4d:ab:6c:fa:33:eb:d4:7f:e3:3f:05:ee:6f:c0:
51:c6:45:f3:46:74:d1:55:ad:ce:5e:3f:e8:85:d7:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:FD:08:8C:BD:92:C0:36:81:F4:4B:C1:08:43:4B:1C:A6:CF:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EMz9CIy9ksA2gfRLwQhDSxymz8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:6d:a4:71:91:9a:f8:46:74:c4:90:4e:64:24:7c:0a:06:af:
3e:af:ab:c7:42:13:ad:51:24:96:cb:f8:2a:24:6f:f2:51:64:
6b:f5:1e:fc:f6:31:8f:54:4e:f8:45:be:69:22:8d:bb:4b:04:
01:09:7a:31:ec:c1:1f:85:87:49:43:a3:67:b7:d6:c7:8d:77:
d6:df:7e:bf:e1:2e:3a:6a:d7:d4:e6:f2:54:58:1f:b3:31:e2:
f7:35:f7:80:92:a3:e9:c3:d6:cc:5e:46:5c:ec:bd:69:1f:4a:
77:c8:3b:4d:2e:d9:51:35:bb:03:d7:1f:af:c6:f2:b2:fa:0a:
66:85:45:37:48:ed:fe:75:9c:d5:4b:45:e8:39:9f:6d:8d:7b:
2b:8b:3d:e2:7b:87:a9:27:2b:a5:a2:16:c1:b1:96:28:64:fa:
bb:1e:bf:ce:34:1b:f1:2f:b2:20:10:e1:54:9c:36:4e:67:01:
16:cd:13:bf:a6:bc:88:19:29:00:4b:eb:b9:6c:0d:69:26:2c:
8a:6d:6e:80:39:b5:8f:7e:1f:72:b7:47:46:84:1e:0a:d5:5a:
12:a4:bc:49:6c:23:10:e9:29:6d:51:a3:f3:0b:ba:cb:86:33:
51:c8:a1:1b:bd:4c:bb:f2:18:c6:f2:f7:85:f8:c1:ee:d8:5e:
fe:c4:49:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:24 2025 by rpki-client