Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EWzgDG5W3ViJesJ3N9P1GH7VliU.roa
File: EWzgDG5W3ViJesJ3N9P1GH7VliU.roa (raw, json)
Hash identifier: ph7REnG6qxmK33U/mULqnCNq0qt3FsQx3jUK8IIAF44=
Subject key identifier: 11:6C:E0:0C:6E:56:DD:58:89:7A:C2:77:37:D3:F5:18:7E:D5:96:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188077A9F92C4DE025F3D06C21537EBE8C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EWzgDG5W3ViJesJ3N9P1GH7VliU.roa
Signing time: Wed 10 May 2023 21:04:16 +0000
ROA not before: Wed 10 May 2023 21:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:77a:8f84/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:07:7a:9f:92:c4:de:02:5f:3d:06:c2:15:37:eb:e8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 21:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=116ce00c6e56dd58897ac27737d3f5187ed59625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:b3:b8:28:44:43:ea:8f:64:14:58:6e:bd:
73:13:40:76:fb:39:c6:cf:e7:bb:5e:77:d1:74:76:
c8:80:db:cd:e8:a1:31:06:7f:ed:68:62:30:75:e1:
0c:81:60:b7:3e:06:e2:dd:7c:31:61:74:00:ca:87:
d7:42:c5:bb:85:49:fe:9d:bd:40:4f:27:77:57:43:
d3:99:55:25:af:3d:91:1a:58:a5:d3:dd:56:d5:e9:
78:61:b5:ac:b4:9d:a4:32:ab:bd:ec:3a:a5:93:d6:
9f:34:cb:5a:2c:21:93:00:ad:c1:52:ed:19:82:55:
cb:bf:d9:8b:08:4a:c8:cf:b3:24:b5:f7:13:a5:b9:
25:28:7d:e8:58:f3:90:50:4a:80:1e:a4:ef:53:69:
ab:f3:ec:14:b7:fb:ce:75:6d:e2:e3:88:b8:d2:ef:
40:96:52:51:e1:d9:f4:da:0c:99:30:1b:e2:fb:80:
12:2a:4f:3f:6c:18:71:4a:fc:e8:32:8a:4a:18:3c:
28:54:2b:e9:c6:a4:e3:47:71:e6:db:04:da:57:4d:
95:1f:e2:a7:d9:8e:fc:65:de:7c:95:8f:7e:c2:8e:
22:96:da:b2:87:aa:a4:14:4f:3d:b9:ae:15:5a:18:
ba:e4:6a:7d:ff:82:49:59:fc:46:9e:ad:f9:33:5e:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6C:E0:0C:6E:56:DD:58:89:7A:C2:77:37:D3:F5:18:7E:D5:96:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EWzgDG5W3ViJesJ3N9P1GH7VliU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:85:cd:49:c9:e6:d1:61:d8:73:48:28:99:28:e2:d2:55:09:
47:40:ab:41:99:7b:d1:d2:9c:f6:a6:e3:82:35:60:c4:bd:f0:
07:5d:4c:bc:c0:9d:22:92:7a:cb:db:80:c5:6b:91:47:ce:57:
6c:3f:3d:bc:ae:32:46:23:7c:95:ab:80:04:c3:43:f6:56:1f:
d9:4c:6d:f1:11:99:46:b3:90:64:f6:1d:02:25:8d:13:29:03:
44:52:da:41:a8:a3:4e:d6:cb:0a:08:6c:96:cb:7d:60:60:3a:
f9:3b:5d:5a:2f:13:3d:92:7a:cc:9f:6a:21:b6:d2:4a:2e:23:
b0:00:27:20:95:d2:08:88:51:9e:b9:08:6d:64:99:15:38:3c:
b8:87:01:91:30:cd:e3:86:38:bd:b5:01:29:2d:3d:3d:02:c5:
b7:a6:96:c3:ce:08:9a:7d:bd:78:f2:f4:42:91:66:16:f2:7d:
a7:d1:0a:01:8b:b1:85:dd:3e:af:df:6a:db:d1:46:ee:af:70:
f6:bb:71:7f:08:b0:f4:e9:43:36:98:b6:3f:a3:07:ec:46:d0:
52:a6:67:33:f9:79:1a:2a:84:ff:e1:de:f1:96:8c:50:6e:97:
88:47:f9:c4:7c:b3:7e:fe:f1:64:56:2f:0a:bc:81:fe:c9:f9:
ad:10:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:44 2025 by rpki-client