Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ec5gpuiSIAoZtZx-7PeenS7UlUM.roa
File: Ec5gpuiSIAoZtZx-7PeenS7UlUM.roa (raw, json)
Hash identifier: pf2bPAR6EZuy7UzvmuhHsZ7d/0ZozaYCfFHUM6doN4k=
Subject key identifier: 11:CE:60:A6:E8:92:20:0A:19:B5:9C:7E:EC:F7:9E:9D:2E:D4:95:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B6D102464D7357B9A50A444BCD555EF5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ec5gpuiSIAoZtZx-7PeenS7UlUM.roa
Signing time: Wed 02 Aug 2023 15:14:58 +0000
ROA not before: Wed 02 Aug 2023 15:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:d1:02:46:4d:73:57:b9:a5:0a:44:4b:cd:55:5e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 15:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11ce60a6e892200a19b59c7eecf79e9d2ed49543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:6b:f3:12:3e:60:52:5d:26:cd:92:f4:20:
e2:02:1e:92:24:87:29:d6:b8:82:f3:e5:b6:a3:f6:
57:91:bb:db:28:1a:b9:ff:f0:41:5d:ac:5d:19:3a:
be:8a:ac:41:28:f9:b6:13:af:9b:73:f9:b9:0f:5e:
fe:fa:94:29:33:b5:79:a9:49:cc:b0:f1:69:17:b4:
be:f2:40:38:5e:e7:fe:28:70:a4:1d:a5:6b:dd:a8:
20:d0:51:d3:c9:b4:54:7d:5c:85:95:b0:a1:c6:ac:
1a:a8:e9:ec:f8:a9:ef:04:07:d3:c5:c5:c7:ae:55:
64:48:4c:4d:b9:5a:45:d9:90:2e:c2:29:a2:14:6c:
f7:b7:ea:9f:95:b1:62:32:a8:2a:46:9e:18:c2:a7:
ab:69:46:07:e0:bd:da:dd:e8:4c:39:ed:f0:0a:f9:
1c:52:88:db:4a:49:0c:b6:8a:40:32:fa:a6:e0:8e:
2d:53:da:83:89:a6:72:63:64:5b:cf:ef:cc:bc:35:
e2:72:af:d4:54:75:cd:97:1a:cd:9d:6a:a1:ab:62:
1f:a8:51:f6:12:a5:b9:e2:f3:d1:de:4a:c7:47:d4:
4e:d5:a5:22:64:52:cc:5c:3a:65:2c:60:dc:b8:09:
d7:41:74:ff:42:b2:b8:af:0b:24:22:fc:ee:92:ec:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:60:A6:E8:92:20:0A:19:B5:9C:7E:EC:F7:9E:9D:2E:D4:95:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ec5gpuiSIAoZtZx-7PeenS7UlUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:52:01:b0:74:3a:d8:97:e5:b4:94:ed:70:dd:cc:19:f4:6a:
7e:18:48:2f:39:f0:32:eb:17:1a:d5:a5:58:9f:8c:8a:8c:a1:
1f:7e:88:46:34:de:2b:6a:7e:c4:44:75:20:77:4a:01:b8:a5:
12:1c:67:34:bc:60:9a:17:7b:fb:15:89:b6:2d:bf:8f:19:5b:
df:7a:24:ce:55:09:8c:49:7c:c8:d6:16:04:b7:ca:d3:6b:f4:
36:6c:6d:cd:0f:4b:35:21:f4:13:51:6f:49:eb:e3:7e:30:9a:
9e:6c:16:d8:e8:43:e5:81:f6:e4:b3:a9:15:08:c5:98:50:8c:
8a:40:87:2e:39:65:30:74:06:4f:98:aa:6f:e9:e7:80:41:1a:
ae:ac:f2:7e:4a:4f:9e:aa:c5:b4:07:3d:32:bc:11:f4:ce:b0:
5d:5c:aa:2c:fb:9c:99:77:8d:7f:6e:98:50:4e:54:b6:30:02:
65:a2:a2:d6:49:0f:d9:af:f6:0b:3a:5b:a9:7f:77:59:8f:a5:
51:3e:b9:ad:e0:54:24:b4:7a:7f:05:76:00:e6:5b:2b:94:8d:
ec:de:95:a7:84:77:96:d2:b3:ae:72:97:6a:d5:22:a0:68:f4:
05:30:db:3c:34:a0:a3:ff:32:b1:4d:37:46:bc:fe:d8:90:dc:
69:4e:a7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:11:32 2025 by rpki-client