Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EUGQpw-0G0XDlgjumv1Ai6lJ--I.roa
File: EUGQpw-0G0XDlgjumv1Ai6lJ--I.roa (raw, json)
Hash identifier: Gy7gSR/EF1z2NtkEVKCUZsnQvyzNMLDlES+uUZJYYFA=
Subject key identifier: 11:41:90:A7:0F:B4:1B:45:C3:96:08:EE:9A:FD:40:8B:A9:49:FB:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A4D8B458C74763965AB77F7994FEA906
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EUGQpw-0G0XDlgjumv1Ai6lJ--I.roa
Signing time: Wed 23 Nov 2022 14:16:16 +0000
ROA not before: Wed 23 Nov 2022 14:16:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:d8:b4:58:c7:47:63:96:5a:b7:7f:79:94:fe:a9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 23 14:16:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=114190a70fb41b45c39608ee9afd408ba949fbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:88:b9:ea:15:7c:10:13:0a:f7:c5:ef:6a:
09:de:a3:59:fb:06:fb:cc:50:49:c5:85:5d:34:a3:
1c:04:0f:fd:43:b6:ae:6e:e3:e7:77:95:e5:e0:c6:
3f:87:0e:3d:e6:4a:c8:52:ed:df:59:fe:de:43:cc:
00:5c:32:5f:af:fc:df:aa:c4:6e:a9:c7:88:a5:aa:
31:90:22:d6:aa:5a:36:70:42:e4:5f:24:16:da:60:
dc:d2:6a:e2:94:03:fe:cb:5f:ab:e5:d2:3f:24:35:
a3:89:30:41:25:ab:0d:be:93:cc:a1:dc:84:df:70:
5b:82:86:53:c1:ee:6e:d3:dd:f9:bf:92:83:ed:58:
0b:87:b1:40:2f:fa:bc:f9:ea:2d:6f:e5:ac:25:88:
e7:c7:3b:18:97:ce:ce:30:55:ed:5f:13:01:e1:70:
65:be:07:da:7c:97:f5:cd:37:79:3b:81:a1:c7:94:
84:a9:22:a7:b9:a6:35:a5:6b:bd:ca:e4:28:c5:38:
a3:b4:5d:63:00:a2:c3:f1:57:56:41:36:92:86:f6:
45:80:a6:7d:7a:8c:d4:1b:a4:f2:2f:03:85:1c:40:
e1:97:12:b6:30:98:b8:a0:fe:ce:3c:7c:83:0a:2a:
f7:42:08:e9:7d:46:95:ca:3d:c4:86:38:78:5b:3e:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:41:90:A7:0F:B4:1B:45:C3:96:08:EE:9A:FD:40:8B:A9:49:FB:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EUGQpw-0G0XDlgjumv1Ai6lJ--I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:2e:b6:07:d6:18:e6:17:87:94:64:b5:a9:69:61:fb:79:fb:
50:0e:66:90:e8:fa:23:ff:83:a2:b2:a5:97:29:f5:21:6a:31:
c1:9b:fb:05:28:b1:09:d4:3d:b4:e4:44:ab:bd:33:cb:11:51:
ef:b2:6c:03:a3:ef:06:59:e3:c0:a7:6e:3f:96:96:64:f8:17:
6c:a1:51:9f:8a:f5:a7:c2:ac:4b:06:af:92:3a:d9:a0:a9:53:
dc:3f:3d:6d:bf:f0:5c:dd:c6:a0:74:c0:d0:4d:98:0f:ea:88:
43:7a:f4:8b:3d:53:9d:54:d1:73:61:98:56:81:e0:25:b2:d7:
33:de:34:3c:86:d9:6f:84:90:1a:65:61:74:67:7e:d7:48:3e:
dc:a4:9b:95:68:05:b3:9f:f0:49:47:e7:23:a8:31:56:e9:52:
07:dc:4a:0f:da:f6:68:bd:d2:78:3d:e6:11:9a:f6:61:b3:a7:
a2:88:40:b2:20:ad:51:f6:28:76:92:c3:cd:d1:8d:37:d7:32:
01:ce:9a:b1:7a:e9:c6:55:7c:d2:a4:9a:2e:c1:94:d7:f6:38:
72:71:43:ff:19:37:35:e7:3f:8a:69:8c:cf:9a:f1:e5:ba:cd:
4d:71:27:6e:5c:5e:21:5b:10:c6:bf:68:bc:9e:81:4c:0c:91:
6d:e4:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:20:53 2025 by rpki-client