Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ENs4264kjgZi3LFhhI7BhlRA09o.roa
File: ENs4264kjgZi3LFhhI7BhlRA09o.roa (raw, json)
Hash identifier: oHQw3zixPpZmIoFgsZC0W9cP5YpAJeL2ARIWiDHyiPo=
Subject key identifier: 10:DB:38:DB:AE:24:8E:06:62:DC:B1:61:84:8E:C1:86:54:40:D3:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E8D037AE63BB21CE2C12D1015B68DB2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ENs4264kjgZi3LFhhI7BhlRA09o.roa
Signing time: Thu 04 May 2023 22:09:32 +0000
ROA not before: Thu 04 May 2023 22:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e8:d0:37:ae:63:bb:21:ce:2c:12:d1:01:5b:68:db:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 22:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10db38dbae248e0662dcb161848ec1865440d3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:e9:8f:fc:f4:c8:ef:ab:06:69:32:5a:98:
56:1f:fc:2e:ed:1d:43:ec:bb:d7:0f:4a:c0:2f:89:
db:1c:5c:59:71:d7:7b:af:78:4a:4e:4b:3c:90:09:
dd:56:73:1e:d2:3e:44:a1:02:8a:03:25:59:bb:ea:
66:df:78:33:a4:e7:21:da:65:4a:11:42:2f:95:04:
9c:ef:2b:d5:2c:1b:28:34:8b:d6:78:0b:1f:9e:12:
90:a9:d8:82:19:d4:e6:68:31:55:ee:98:6b:96:39:
15:68:c1:24:bc:71:0c:bb:79:3c:eb:82:29:3b:71:
cf:18:90:df:cf:b4:4a:4b:24:6e:c8:be:73:f1:04:
ed:e0:37:61:92:d8:52:33:fc:1e:eb:e1:50:71:de:
b5:9f:88:f7:8e:9b:bc:c2:7b:ea:5c:38:e8:66:42:
7a:0e:d3:cd:19:33:f0:cd:2d:6e:f6:70:9d:69:55:
0c:35:c1:cf:4a:42:b7:55:76:72:0a:1b:bb:20:22:
e8:c1:98:f0:de:4a:4c:b6:21:86:25:1c:10:1e:66:
f2:be:a5:69:28:7a:0d:3b:23:20:df:ed:3d:42:d4:
b8:b2:88:9e:43:0a:54:2b:67:51:9b:3b:d0:df:2d:
9d:2f:0d:33:ba:90:5a:ab:a1:0c:96:1d:9e:ef:0d:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DB:38:DB:AE:24:8E:06:62:DC:B1:61:84:8E:C1:86:54:40:D3:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ENs4264kjgZi3LFhhI7BhlRA09o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:e2:db:7b:ba:65:18:3a:31:6b:7a:32:f6:e8:a0:80:0b:52:
8d:2e:be:8d:a9:93:ea:17:b3:63:6e:e7:8a:62:3e:4e:04:cf:
00:2f:2d:16:0f:63:ab:48:2f:bf:45:ad:d1:d0:92:87:56:a3:
2c:de:81:80:e8:29:c4:64:9c:f1:55:17:00:09:47:bd:71:81:
1c:49:88:d2:e1:db:b4:9e:82:d7:57:dc:58:4b:be:5d:58:04:
4f:23:35:22:bb:29:6a:bf:fc:73:26:14:a3:57:51:60:e7:b7:
88:2f:9d:f9:6a:56:33:09:6b:46:c9:98:a8:f5:0d:e9:5e:14:
ff:2a:12:45:f4:df:f8:09:f0:14:3a:95:47:b1:ed:18:af:16:
92:0f:d8:b6:21:d8:ca:72:96:ab:c8:ad:2b:70:c5:04:58:29:
2c:6b:41:08:42:3f:94:5a:fc:52:de:0b:36:aa:43:e9:e8:f8:
95:75:fd:af:33:17:c1:ac:fe:7f:dc:02:1c:b8:e8:9d:ec:8b:
cc:96:e4:3e:c1:11:69:3b:c9:16:36:5b:5f:4e:45:fa:08:c2:
cc:ec:fb:a9:b1:eb:59:96:21:90:41:c7:e4:b0:2e:d5:3a:f5:
58:40:d7:71:6c:fc:53:0b:4f:a6:69:be:2f:f4:aa:0f:9d:c2:
2a:85:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:12:13 2025 by rpki-client