Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ENqeT-LPYO3OQhrSpibGWunpldY.roa
File: ENqeT-LPYO3OQhrSpibGWunpldY.roa (raw, json)
Hash identifier: /KRZFY7iSgPEPdEIpSpboLe270VdFxRwYs+ZrVcNaKs=
Subject key identifier: 10:DA:9E:4F:E2:CF:60:ED:CE:42:1A:D2:A6:26:C6:5A:E9:E9:95:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866324219C233556537933AE0B56756FFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ENqeT-LPYO3OQhrSpibGWunpldY.roa
Signing time: Sat 18 Feb 2023 06:09:17 +0000
ROA not before: Sat 18 Feb 2023 06:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:24:21:9c:23:35:56:53:79:33:ae:0b:56:75:6f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 06:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10da9e4fe2cf60edce421ad2a626c65ae9e995d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:52:73:e3:d9:57:08:36:af:dd:34:10:52:05:
92:23:87:b5:70:3f:50:08:c4:95:a7:8e:7e:79:b2:
42:a8:40:89:6a:8b:81:32:7b:69:1b:c8:94:6a:f9:
a5:e7:e9:9e:7c:ee:52:17:b3:9c:e9:52:92:fd:0e:
ff:16:74:f3:ac:d9:c2:3f:48:4d:3b:91:fe:97:33:
68:c4:27:a8:b2:31:c2:fc:79:24:15:de:64:9f:7c:
c5:91:02:12:ee:e4:d5:8f:61:c4:c5:1a:52:85:1a:
7f:ad:95:fe:26:df:c2:e9:8e:3d:62:61:82:dc:d4:
60:42:30:37:cd:12:c7:fb:88:ba:a8:60:3e:f0:72:
16:c9:03:02:1c:59:c7:c9:92:0e:61:c3:f2:9c:55:
c4:8a:30:e1:b5:4a:fc:d4:fc:94:45:12:26:9a:2a:
ee:80:bd:1e:ab:f4:f2:8a:91:b8:0c:b8:b5:cb:37:
2f:8d:4d:60:15:a2:71:94:e2:4d:93:e6:0d:2b:d2:
37:ca:de:f3:dc:23:29:eb:07:01:62:25:ec:e7:a3:
b1:41:c1:ba:ea:ba:87:fd:b7:07:4e:98:16:33:90:
1f:db:4d:e0:db:2d:ed:9d:89:1c:5f:eb:4d:0d:5d:
7c:cd:dc:03:e6:c1:08:6a:e5:1f:f3:4c:0c:5b:02:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DA:9E:4F:E2:CF:60:ED:CE:42:1A:D2:A6:26:C6:5A:E9:E9:95:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ENqeT-LPYO3OQhrSpibGWunpldY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:2d:bf:9b:06:a4:08:a2:49:01:99:b2:40:f5:9b:0f:b3:ad:
18:72:ea:41:ef:39:6c:7f:62:91:a9:44:d6:30:c6:04:1d:b6:
28:d0:3c:a7:3f:5d:9c:25:a1:cf:a5:eb:b7:2d:f6:6d:2c:48:
6c:2a:a9:d4:a4:3a:50:4a:80:28:7a:4c:13:ed:27:cd:da:87:
34:b5:bd:74:c8:7d:d9:8e:5f:ee:20:4d:68:ea:c4:1f:1c:e9:
4a:d9:c9:07:6c:93:11:c7:ed:e2:85:90:76:42:f4:2d:3f:da:
31:1d:93:1b:0a:3c:2d:b7:f5:f1:5b:08:92:7a:30:16:16:b0:
90:59:d3:56:5c:db:d7:d9:68:48:61:0f:76:ea:c7:10:41:fb:
c0:5f:3d:a2:41:62:aa:d6:14:dd:04:6d:47:f1:a3:df:0e:4a:
1b:4d:75:43:c2:41:3a:f8:5f:17:5c:9a:c1:c2:bd:06:09:c0:
cd:37:f5:55:fb:51:8e:43:a7:ec:ac:4e:9f:3e:60:e3:8a:57:
87:38:cd:d5:7c:dd:48:ac:c5:7a:17:78:de:45:49:c5:18:a3:
24:fd:52:47:56:33:60:12:fd:21:a9:50:c0:c3:8b:90:44:d0:
8a:d7:9a:18:f8:79:f9:bb:3c:01:5e:92:ba:8e:36:b0:e2:a8:
92:bd:f7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:29:48 2025 by rpki-client