Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E_8DQFFVygldpIHAfV4Z59ran4M.roa
File: E_8DQFFVygldpIHAfV4Z59ran4M.roa (raw, json)
Hash identifier: u/oLsx0KWj5TW6wrwOCwMQcKkOjNZw+EAed7n0zhaDU=
Subject key identifier: 13:FF:03:40:51:55:CA:09:5D:A4:81:C0:7D:5E:19:E7:DA:DA:9F:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C0E4DABAE3EE93648AF8506277501ACB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E_8DQFFVygldpIHAfV4Z59ran4M.roa
Signing time: Thu 15 Jun 2023 21:10:03 +0000
ROA not before: Thu 15 Jun 2023 21:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c0:e4:da:ba:e3:ee:93:64:8a:f8:50:62:77:50:1a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 21:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ff03405155ca095da481c07d5e19e7dada9f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:65:cb:59:9f:a2:6c:cf:3d:06:9b:d2:45:
0a:84:e1:bf:40:65:13:0b:34:e5:62:03:33:15:6e:
a0:a0:21:d8:c6:64:a0:e7:fb:a5:2d:fb:4c:c4:d9:
78:73:b6:f6:cf:67:8f:c0:35:e3:ce:2a:c7:d3:f4:
7a:5c:6e:eb:ac:a7:b5:dd:11:79:83:2f:e0:e0:94:
51:05:d8:74:ce:64:60:4a:db:f0:2c:e1:e8:1e:b1:
d6:e2:02:1f:d6:1a:4d:39:4a:88:fb:6d:bb:91:10:
f8:bd:64:2d:53:ef:c5:b1:aa:bb:3c:96:bb:13:b6:
19:e8:a4:f2:71:e6:df:16:85:08:d8:1a:9e:78:b4:
d9:b9:9d:da:ed:9d:b5:d9:9c:ea:cb:e2:be:eb:40:
b6:58:b3:53:85:66:d1:09:d7:b4:e5:a9:8d:c6:ff:
29:7c:07:f4:74:80:16:0c:0f:ec:ad:e6:06:86:2f:
9a:93:5c:b1:24:97:ed:18:4a:b1:1a:4d:b6:45:b3:
89:8a:cc:59:53:a0:0e:76:61:6d:10:d2:80:e1:5f:
01:f0:0a:f4:2a:05:03:a5:c8:ea:e6:47:8e:f5:35:
a9:76:f2:78:4f:bc:41:d9:fc:76:d8:65:56:d1:d9:
20:f6:87:19:90:a2:de:b2:3d:34:b7:6f:2b:bf:66:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FF:03:40:51:55:CA:09:5D:A4:81:C0:7D:5E:19:E7:DA:DA:9F:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E_8DQFFVygldpIHAfV4Z59ran4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:ee:80:fa:4b:e4:7c:0e:28:85:8e:35:a7:6c:83:25:aa:c3:
8b:bf:56:03:2f:f2:f9:7d:f3:53:39:49:0c:22:ec:fa:48:45:
ce:36:d7:02:84:3e:25:0e:8f:78:dc:1b:8e:11:3b:1f:34:34:
ee:f9:fd:92:31:9b:dc:d0:61:17:f5:f3:2b:a2:e4:0f:9b:1d:
8e:20:f6:1f:45:1a:2e:6c:eb:5d:47:6a:10:28:77:65:17:2e:
d0:da:2a:3f:1e:2f:66:8a:15:19:94:b3:c2:3d:ab:09:e5:87:
24:f3:1f:a8:4d:24:af:d2:ac:a6:40:b7:6c:b0:f5:22:56:f0:
d3:9a:a8:d6:e7:a4:d2:a1:9a:39:a7:7f:1a:96:15:67:e1:30:
4b:25:d3:f6:19:1c:f8:96:8b:a9:36:a4:65:04:ce:dd:28:0e:
db:e2:77:d5:a7:14:55:2e:90:3a:5e:02:27:1f:5e:f3:1d:34:
c8:be:db:84:16:ac:5c:6a:66:76:c9:c5:13:25:3e:b6:64:8b:
92:ba:36:7d:e2:3f:74:ee:4b:3c:8c:d5:e8:ab:0f:25:83:5d:
d6:86:58:fc:8b:02:87:2a:3a:83:ee:60:4e:66:fe:7e:9d:97:
43:92:23:59:0d:57:08:c2:79:3a:36:58:cd:ab:dc:23:fd:5a:
94:52:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:44 2025 by rpki-client