Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EO6aff4UStka_3zB5N0qXSQDwTo.roa
File: EO6aff4UStka_3zB5N0qXSQDwTo.roa (raw, json)
Hash identifier: akVTkjD0TyXL4VYmpISlck77QFEMMx9hhXvbN4KmYMo=
Subject key identifier: 10:EE:9A:7D:FE:14:4A:D9:1A:FF:7C:C1:E4:DD:2A:5D:24:03:C1:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B06C625E3BF2AA5A67F8C7347BB13FED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EO6aff4UStka_3zB5N0qXSQDwTo.roa
Signing time: Fri 25 Nov 2022 20:13:23 +0000
ROA not before: Fri 25 Nov 2022 20:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b0:6c:62:5e:3b:f2:aa:5a:67:f8:c7:34:7b:b1:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 25 20:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10ee9a7dfe144ad91aff7cc1e4dd2a5d2403c13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:07:c0:57:46:1d:a5:e4:5a:1e:70:11:29:
b6:9f:a0:b7:81:cd:24:c3:e1:4b:18:e4:62:40:05:
1a:fa:3a:89:55:ff:73:02:d2:c7:76:8c:21:4a:b1:
aa:fa:ef:04:8f:08:10:14:11:a5:3c:24:41:72:0c:
a2:a3:b7:fb:a4:bd:87:9a:bf:75:21:51:6a:06:9e:
8d:1e:7a:84:27:75:14:4b:aa:e6:19:0e:ba:10:f1:
b1:e5:15:f4:28:af:f0:77:6f:a2:3f:8d:e2:6c:4c:
b9:a0:2d:82:20:f5:1d:21:71:be:9e:55:46:78:d5:
20:5a:8d:19:08:36:9c:5c:10:a9:e0:72:bc:c6:8b:
d1:b9:c9:7a:2e:89:71:c3:1a:0a:b9:03:f6:ba:80:
89:ce:93:0a:93:b1:33:7a:0f:11:2c:e3:ee:e3:53:
8f:71:64:3f:fe:60:46:42:4f:ca:80:42:85:af:82:
c3:4b:79:95:7a:28:2b:77:74:c4:6e:fb:d6:8d:9d:
97:78:bc:a9:c7:2b:62:ae:e8:2d:53:aa:1b:c8:c9:
f5:97:7b:30:f1:35:4f:86:d4:07:65:03:95:01:9d:
f3:52:99:93:43:ff:90:05:47:f5:a9:3e:0f:6d:f1:
3b:59:f0:19:05:51:45:63:52:74:ee:73:b4:32:97:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EE:9A:7D:FE:14:4A:D9:1A:FF:7C:C1:E4:DD:2A:5D:24:03:C1:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EO6aff4UStka_3zB5N0qXSQDwTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:2c:cc:dc:1e:17:28:19:c1:75:5e:69:3e:33:77:f8:d7:b6:
a8:1a:48:28:ea:e5:57:bb:7a:6b:8f:60:a8:95:a5:1a:ec:a3:
57:bb:88:7f:7b:d8:92:be:5a:7e:65:7a:d1:da:59:02:4d:06:
cc:59:80:7a:28:f6:1f:15:f5:f7:46:43:20:3e:a9:02:c6:91:
c0:09:b0:00:8b:4b:8d:94:7c:d7:ea:25:f5:37:8e:41:f2:45:
10:0e:b5:02:cc:bf:10:ec:70:0a:5f:26:b7:23:af:ac:88:f8:
2e:2d:b4:8e:95:01:de:00:e6:e1:c8:46:ed:d5:a5:a1:6c:cc:
6e:61:7b:e8:1b:0c:74:b9:7f:58:fb:d9:6b:f3:c8:01:3f:c8:
46:3d:d5:a7:bd:62:0c:8b:70:92:7c:02:89:2e:58:8b:dd:2f:
19:18:9b:0f:ef:c9:79:40:a6:78:80:d8:3e:c4:57:45:b5:bb:
37:3b:47:f0:54:bb:4f:ac:a4:f7:86:79:ab:3f:cd:53:6d:60:
f6:29:a7:f6:80:20:6e:e0:75:2e:4d:f0:cb:29:99:de:19:f6:
fe:4c:02:94:ce:7b:3e:71:04:75:a9:06:d7:9d:e5:e1:f3:7e:
66:0a:9b:3a:c4:64:ab:3c:1d:c4:46:7b:b2:cd:02:91:65:e4:
f2:67:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:33 2025 by rpki-client