Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Eaop1BiR7QyrDkO2-gO28ORK9bs.roa
File: Eaop1BiR7QyrDkO2-gO28ORK9bs.roa (raw, json)
Hash identifier: EZ22+IF9BWv/sqXpAUGTrsbZPeNto6pydb2qvyv/Z9U=
Subject key identifier: 11:AA:29:D4:18:91:ED:0C:AB:0E:43:B6:FA:03:B6:F0:E4:4A:F5:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7361AB5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Eaop1BiR7QyrDkO2-gO28ORK9bs.roa
Signing time: Fri 18 Mar 2022 01:04:27 +0000
ROA not before: Fri 18 Mar 2022 01:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:9a8d:efc2/128 maxlen: 128
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935780703 (0x7361ab5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 01:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11aa29d41891ed0cab0e43b6fa03b6f0e44af5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:e7:dd:70:37:24:5b:cd:fa:9d:76:67:a5:
c2:06:a3:45:c0:f7:16:3a:3e:f6:12:52:ae:32:e6:
71:86:4e:43:12:e9:97:a0:1a:78:f3:56:04:c2:a6:
57:9b:67:36:81:65:c2:41:a5:d7:d6:23:e7:9d:f1:
20:ee:80:c3:a0:83:96:cb:be:21:fc:a2:86:01:79:
d8:c4:1b:66:52:3c:10:d8:ac:5e:6d:7a:a9:f5:b1:
be:0e:89:47:d1:45:56:04:f0:4c:9d:d6:ba:77:ce:
f7:2d:48:22:5e:80:92:34:4d:90:dd:79:26:ac:72:
95:90:92:3a:60:ba:8e:25:f9:df:8b:26:69:6a:25:
f5:3a:24:8a:3f:52:74:40:d8:70:53:d9:ec:ea:db:
8d:58:ef:78:a1:07:2f:4e:f8:00:11:a7:a5:72:26:
7a:f7:ef:4e:67:01:f9:e2:24:47:bc:1f:df:2f:39:
f7:36:ff:20:ae:84:1d:5a:6f:9b:ab:4d:9e:ef:92:
be:ab:15:91:c9:5a:cd:70:fa:f2:27:9b:0f:8d:95:
fd:98:82:02:15:34:aa:8c:01:87:80:0d:97:ea:2d:
b3:73:46:ef:04:9a:ea:00:ac:ca:b5:3f:e3:97:5a:
a2:bf:f4:e5:01:84:8a:1d:26:2f:09:8a:df:73:21:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AA:29:D4:18:91:ED:0C:AB:0E:43:B6:FA:03:B6:F0:E4:4A:F5:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Eaop1BiR7QyrDkO2-gO28ORK9bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:87:51:f8:59:2c:19:5b:62:fe:43:0c:63:ae:5a:0e:55:0c:
53:f7:98:a4:94:8a:4e:07:90:c2:5e:70:32:b9:d1:0b:d1:ec:
4c:3c:d9:00:45:00:50:8a:68:86:11:30:d8:96:7b:dd:93:91:
a7:2b:19:d6:cd:ae:f2:af:a7:13:5a:e4:93:df:de:de:be:df:
b2:0c:8a:86:71:9b:b0:10:43:c0:af:d8:f5:06:ce:fb:b1:d0:
40:14:b1:da:a0:11:21:02:5b:c8:b5:20:51:69:69:17:32:01:
9b:a8:5d:20:ec:57:3d:6a:13:88:69:da:18:f6:42:99:14:a4:
c2:59:90:3f:d6:a4:a6:e6:c4:5e:a8:96:58:cf:e7:11:d5:2c:
02:c3:20:24:85:ef:9d:c1:ba:aa:a5:62:32:f0:d7:d9:32:b9:
cb:1c:05:3a:dc:b4:dc:54:57:b8:01:06:36:77:74:13:89:33:
2d:c1:b1:9e:f5:d5:dc:32:56:c9:ad:03:5a:4c:ff:c7:52:54:
b1:d8:a4:54:6d:a8:bc:54:d5:e7:cc:1f:28:b5:79:3f:f7:d5:
a1:58:62:a7:49:87:75:61:b2:af:5b:b7:de:ff:33:0c:41:e2:
5e:26:1e:f1:02:87:7a:80:d1:14:3e:dc:7f:2b:83:e2:e4:35:
b6:99:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:09:03 2025 by rpki-client