Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ecq39NE0xbbmbi8f4BKoJGEEwmk.roa
File: Ecq39NE0xbbmbi8f4BKoJGEEwmk.roa (raw, json)
Hash identifier: BSmUSawj74xyM/7aBYniTFtBIYs4SzYEaoyW0IXgi4U=
Subject key identifier: 11:CA:B7:F4:D1:34:C5:B6:E6:6E:2F:1F:E0:12:A8:24:61:04:C2:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CF0722BD6FC4F5F2E5AE880A8D975EF7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ecq39NE0xbbmbi8f4BKoJGEEwmk.roa
Signing time: Mon 07 Aug 2023 08:04:58 +0000
ROA not before: Mon 07 Aug 2023 08:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:cf06:7189/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:07:22:bd:6f:c4:f5:f2:e5:ae:88:0a:8d:97:5e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 08:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11cab7f4d134c5b6e66e2f1fe012a8246104c269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:dd:96:6c:4d:e2:81:1d:e8:1b:ed:65:90:
4a:be:e3:80:41:5e:06:8a:1d:cd:a6:c1:21:68:05:
ad:bc:43:35:b3:93:c0:10:06:52:12:35:e7:8e:e8:
3c:f6:58:18:86:de:40:b2:ca:32:e9:5b:9c:e8:43:
97:e9:77:d3:02:0a:16:5c:58:ba:2a:f2:02:7f:ed:
19:c5:44:da:52:39:e8:7d:27:36:6c:39:95:09:bc:
97:20:a0:8d:fe:62:6d:ef:40:c6:b5:a5:9b:d8:fa:
b3:60:73:b6:fc:8e:d9:7e:97:a5:34:c4:e2:69:24:
76:6f:6f:a8:82:6b:95:e0:55:16:a4:58:09:99:e4:
5c:89:f8:6c:d1:d8:bc:b0:ec:cd:95:a8:63:2b:ae:
5f:43:c5:79:5a:29:06:b5:5c:77:f6:51:69:f3:ae:
a3:c2:e9:ec:c4:6a:db:b5:b6:88:1d:94:d6:44:eb:
f3:ad:df:34:c8:79:da:95:a1:7b:81:26:da:02:3e:
8e:6d:70:25:52:3c:1d:dc:ca:ac:1e:bd:38:aa:45:
c5:aa:ff:a8:42:9f:2c:b8:99:df:91:5b:15:96:d7:
05:08:7b:4e:36:d4:50:67:ca:6d:a8:31:6e:69:58:
54:ac:0c:1d:bd:1e:5e:35:f2:2b:6a:0b:e1:b5:38:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CA:B7:F4:D1:34:C5:B6:E6:6E:2F:1F:E0:12:A8:24:61:04:C2:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ecq39NE0xbbmbi8f4BKoJGEEwmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:82:d8:75:66:0b:8e:db:f6:9f:6b:d5:b5:33:85:88:d8:24:
85:73:f7:48:8a:52:86:51:c5:db:1b:51:29:43:29:46:6b:18:
3b:2f:21:c3:ca:fa:a6:9a:67:fe:6b:68:a4:a5:46:5b:17:cd:
5f:f5:a6:60:37:b7:2e:a5:fa:5a:10:9c:39:f6:98:f8:b1:b5:
55:6c:22:39:1a:27:dc:74:8e:23:37:a7:02:72:ed:45:33:dc:
0c:1a:79:77:fb:6c:53:98:30:7c:5c:af:99:72:b7:82:10:2c:
56:3f:cd:40:6e:b8:27:51:f6:17:30:ab:a4:bc:08:ef:42:99:
e1:53:44:ee:3b:a0:c1:db:20:2d:f6:bf:9a:1a:7d:61:a4:37:
15:b4:5f:9a:54:b5:64:a0:d0:d8:03:3e:e2:1e:4b:57:ce:c2:
c8:e8:10:df:ea:39:29:f0:87:3f:63:e6:42:be:9d:fb:95:e6:
0e:47:fe:eb:92:95:79:1e:39:fc:d5:77:5d:ab:8d:52:66:9f:
24:c9:39:90:52:b9:a5:9b:a7:fa:d6:d9:d8:fc:86:de:45:99:
f7:23:2a:51:6e:28:48:61:cf:02:70:cc:44:6a:38:5c:2f:d0:
d4:6b:33:67:d9:2c:c5:b5:33:1a:d7:a8:38:2c:4a:be:c2:ef:
87:26:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:40:34 2025 by rpki-client