Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ee4b6hmRUzExcN5e25XVPAb3nHE.roa
File: Ee4b6hmRUzExcN5e25XVPAb3nHE.roa (raw, json)
Hash identifier: 8XRfR/9ehjHERU++9IE40U1kxiAM2RQNYaDrOi7cCHQ=
Subject key identifier: 11:EE:1B:EA:19:91:53:31:31:70:DE:5E:DB:95:D5:3C:06:F7:9C:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81F383C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ee4b6hmRUzExcN5e25XVPAb3nHE.roa
Signing time: Sat 07 May 2022 14:10:23 +0000
ROA not before: Sat 07 May 2022 14:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180219845 (0x81f383c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 14:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11ee1bea199153313170de5edb95d53c06f79c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:2c:2d:27:29:ec:f2:8c:84:65:b6:f7:c3:
e5:2b:5d:b9:a9:89:09:b1:41:ab:be:51:48:22:92:
44:5a:e5:0d:73:5d:81:53:13:0e:e4:0b:53:e7:26:
35:7e:78:2c:62:ed:2c:b5:e5:be:26:37:0b:c2:da:
b5:c9:1e:aa:d8:13:70:29:0e:88:e5:f6:ec:3c:55:
aa:e6:a0:74:1e:a5:dc:e6:8b:f0:26:be:fc:9c:72:
3f:2d:02:a0:d3:c8:2f:77:b0:ab:15:34:40:da:a5:
de:f3:c5:13:a5:2a:fa:ca:7b:88:78:fa:9b:98:5d:
31:40:7c:b1:fc:da:cb:37:f1:80:6f:ea:59:45:a4:
dc:0a:4c:23:f8:cd:01:da:e5:2a:fd:97:1c:db:a4:
cb:51:dc:e5:cf:72:c2:da:e4:57:ef:05:22:7a:5e:
2a:34:7e:09:5f:0b:10:9f:9e:63:86:7e:6d:8e:2a:
60:0c:14:65:17:32:dd:20:de:f1:64:41:4f:9c:96:
29:86:ab:0f:62:f9:fa:64:3a:eb:07:d7:04:cb:b7:
31:c7:fa:e6:4d:58:ba:7a:e7:af:ba:67:9b:5b:e0:
8c:72:14:cc:a0:69:12:89:06:7c:4a:66:2e:a7:2e:
05:de:14:5f:b3:e5:42:78:82:f6:e7:95:0d:f0:6f:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EE:1B:EA:19:91:53:31:31:70:DE:5E:DB:95:D5:3C:06:F7:9C:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ee4b6hmRUzExcN5e25XVPAb3nHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:dc:d3:63:ab:bd:03:70:ff:c0:4e:ce:9b:94:7e:37:ae:d5:
24:02:47:71:36:20:95:07:c0:82:43:9a:2a:0c:05:8c:dd:e5:
d9:40:bf:b8:e5:1b:99:d8:7e:df:8c:58:02:77:fd:55:30:c2:
b1:f8:5f:36:8c:65:40:9d:71:5d:7a:39:aa:50:a9:ad:31:c2:
24:da:6f:7f:70:43:2d:14:7b:9f:b4:f4:8b:57:a7:a7:1b:b0:
fc:e2:c5:0a:6a:8c:12:02:3f:35:3d:c4:91:9c:69:c5:27:13:
35:39:04:17:91:7b:7f:cd:56:10:be:8a:00:9b:b7:6b:0c:55:
d7:7c:3b:ef:bd:22:ff:1c:b5:ee:8e:c4:5e:5c:85:22:17:0e:
f1:9e:09:54:c0:6b:c4:c0:8e:c4:f0:e4:c5:36:41:0e:0a:f5:
63:86:28:8e:70:e8:ee:b6:11:b0:d3:f5:9c:c1:5e:95:c7:72:
2c:d6:58:cd:7d:78:cd:95:7d:7d:4d:80:2a:f2:f3:d3:4d:29:
91:af:8a:b2:1c:3d:27:70:df:a5:61:8c:77:6a:3f:57:16:5a:
b0:49:88:2e:18:85:41:36:93:72:35:45:da:d8:0e:63:a6:e5:
a8:29:24:85:90:86:29:c0:e2:c8:14:a3:36:0e:55:12:29:6f:
49:f8:12:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:24 2025 by rpki-client