Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ENlaadd-Sg3YkzI_WGcHCLumR1U.roa
File: ENlaadd-Sg3YkzI_WGcHCLumR1U.roa (raw, json)
Hash identifier: gj/bIeZS5slrpHhuVWJDjJeo/HNXJglHLSQmaSJ2SYc=
Subject key identifier: 10:D9:5A:69:D7:7E:4A:0D:D8:93:32:3F:58:67:07:08:BB:A6:47:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BA1410ADF114F3335D3F8DA6136D796A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ENlaadd-Sg3YkzI_WGcHCLumR1U.roa
Signing time: Sun 27 Nov 2022 17:13:07 +0000
ROA not before: Sun 27 Nov 2022 17:13:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ba:14:10:ad:f1:14:f3:33:5d:3f:8d:a6:13:6d:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 27 17:13:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10d95a69d77e4a0dd893323f58670708bba64755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:76:95:b6:6a:98:f0:73:01:6f:50:1a:79:
9f:eb:8e:84:99:12:d1:b2:c9:eb:1d:07:36:d4:cf:
b8:20:4e:7e:ef:d6:81:1d:51:cd:0e:6b:87:7f:82:
35:48:e8:fb:26:39:08:ad:57:ac:13:92:d4:e9:35:
32:00:bd:30:a4:24:53:a3:66:bd:bd:15:43:8f:4b:
00:bb:3c:a6:6b:f7:e6:ef:cf:21:cb:a8:fc:bf:0a:
34:20:95:7c:b8:55:01:bd:de:6c:c1:e2:ea:5f:4b:
08:51:a0:b1:00:ca:6b:bd:dc:ca:a6:45:06:0c:9f:
2c:07:14:fa:70:0c:89:ce:4a:92:7f:d6:9a:32:a7:
da:91:65:4f:e0:cf:ed:5b:4f:9f:56:b1:00:0a:a0:
5c:98:d8:64:84:02:d5:ff:18:db:4d:d3:ed:c6:95:
ea:b2:8b:50:ff:67:d0:2e:3e:b1:20:25:f5:d4:84:
73:36:41:1f:e6:80:2b:13:1f:c2:ab:a4:f8:ac:8d:
35:f0:b7:be:59:95:1a:48:d4:63:61:17:50:53:a4:
f3:7c:d4:3a:bc:62:b5:52:df:7d:39:06:3d:a4:18:
ff:79:ea:4a:e2:68:7e:a0:03:46:08:27:73:97:6d:
cd:fc:0a:8c:bc:78:9d:9a:77:73:70:60:8e:e0:a7:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D9:5A:69:D7:7E:4A:0D:D8:93:32:3F:58:67:07:08:BB:A6:47:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ENlaadd-Sg3YkzI_WGcHCLumR1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:ae:29:a3:9d:34:f7:b9:3e:d9:57:4b:a9:53:5c:b0:04:0c:
55:3e:3c:5c:75:f8:a9:f5:3e:51:d2:4a:5d:1c:4c:b1:b2:3b:
60:ec:ba:a0:1e:42:e4:3a:92:32:d4:42:6f:ee:95:89:0d:a5:
b1:75:df:bc:6d:f6:19:7f:47:00:bb:4b:bf:76:48:a7:b7:0d:
eb:44:42:51:dd:3a:02:1b:c4:96:c8:8a:a3:f6:fd:ed:53:6f:
b6:95:c2:98:27:20:57:d1:76:d2:94:2a:9f:7d:0a:0f:78:01:
73:48:34:7b:38:a3:1d:58:9f:d6:a8:87:a7:33:64:32:89:ea:
12:91:ec:d8:43:4d:9f:fb:81:f9:ec:f7:12:1a:89:36:91:dc:
ed:1c:f2:88:f5:a7:c1:b5:54:26:5c:30:5b:8d:57:8c:07:b3:
ec:33:c5:3e:83:ba:70:8b:3f:d9:80:a5:d8:0b:4c:91:72:19:
43:55:90:9a:a5:50:70:4a:f4:48:75:74:b2:b7:7c:da:cf:af:
72:6f:56:f0:a2:3b:9d:a1:f3:91:79:82:f8:35:0a:9a:7e:29:
55:6a:75:6d:2d:d2:e2:52:c9:aa:49:6d:75:21:5b:48:f5:26:
ce:4c:8a:4c:41:e2:b3:af:a9:eb:3e:7f:a7:fa:12:69:b5:20:
69:f8:9f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:16:14 2025 by rpki-client