Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EgkgAPKk9oAxEJufJzI_ufAaajc.roa
File: EgkgAPKk9oAxEJufJzI_ufAaajc.roa (raw, json)
Hash identifier: 0o5B9Ij6YPvVhmRiN/OgHekEf/8uzV1tsST+Ji74zRw=
Subject key identifier: 12:09:20:00:F2:A4:F6:80:31:10:9B:9F:27:32:3F:B9:F0:1A:6A:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872AED5437429C185984EE874DF13AD3F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EgkgAPKk9oAxEJufJzI_ufAaajc.roa
Signing time: Wed 29 Mar 2023 01:13:29 +0000
ROA not before: Wed 29 Mar 2023 01:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2a:ed:54:37:42:9c:18:59:84:ee:87:4d:f1:3a:d3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 01:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12092000f2a4f68031109b9f27323fb9f01a6a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:e4:c0:2d:43:ba:47:cd:df:75:3c:e2:e5:
1a:c4:db:1e:c5:49:7d:a0:63:79:aa:50:d0:f5:c3:
06:21:00:d3:6c:95:3f:fb:80:ab:39:72:9d:a6:90:
d0:0f:c5:26:66:41:4c:b9:96:6a:6f:9c:26:d6:a3:
6d:73:32:98:6b:bc:ed:37:5b:05:47:8a:f7:c6:db:
e6:71:8b:98:03:69:d7:28:00:a7:47:73:6f:59:fe:
de:06:fa:eb:9b:1e:d1:85:58:2b:5d:2e:28:1a:df:
a0:56:07:ca:20:41:75:ec:6c:ba:e8:f1:28:cb:de:
24:41:62:e2:f7:15:5f:d8:cf:0a:8f:7d:8d:4e:79:
3b:a5:ac:df:40:ec:7d:89:fa:27:d3:f2:a7:45:31:
71:f0:3f:be:f7:a5:b8:97:6a:66:e5:2f:3e:7d:9b:
ca:2c:99:e7:b0:02:9a:60:8e:59:74:6a:7f:13:ed:
73:e1:a1:03:ee:47:95:f0:f2:f5:70:85:78:bf:dd:
64:a2:b3:44:5e:c0:5a:27:c2:f6:36:8f:d2:74:0c:
f7:d0:00:60:99:66:ea:85:ef:9d:b2:7d:aa:b4:b8:
45:8e:82:5a:6c:75:75:b3:55:78:35:e4:5c:82:b1:
50:1f:60:c8:b9:3c:e2:f9:30:55:6e:f6:97:47:ed:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:09:20:00:F2:A4:F6:80:31:10:9B:9F:27:32:3F:B9:F0:1A:6A:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EgkgAPKk9oAxEJufJzI_ufAaajc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:41:7d:54:ae:db:f4:51:d7:4d:03:76:b5:cc:fb:f3:e2:e2:
29:fe:b5:a4:d3:0f:97:eb:8a:72:e9:94:67:ac:e8:df:e1:ed:
e9:7b:25:0c:fd:5e:0c:00:0a:19:49:4b:cb:91:82:a1:f9:da:
d0:98:6d:70:de:00:95:a3:a7:dc:04:99:69:1b:50:f1:fb:f9:
4f:bd:67:80:d6:75:e8:03:1d:3e:33:1c:d0:f2:80:a0:de:c9:
69:2b:64:b9:a9:97:f7:bc:b6:4a:e4:b1:ab:a4:08:5c:66:11:
26:db:2a:d8:81:74:20:22:cf:4e:f2:3e:6a:83:46:96:93:e4:
33:56:24:71:6e:8f:8d:2f:7f:69:6b:cd:01:ae:3a:9c:c3:bf:
ba:8e:c2:5b:59:56:6d:59:ab:c5:94:2c:da:89:ad:3a:c9:8b:
c3:22:63:7b:df:e0:31:bb:0f:d6:61:4d:61:21:e5:1b:03:ab:
85:38:e0:e8:80:89:b0:1b:51:e9:d4:11:bf:63:b6:08:68:30:
e6:7e:3e:dd:eb:cb:50:f0:d2:e9:c8:52:4d:b3:5b:80:81:67:
83:77:73:ae:c4:05:a3:b3:44:20:f3:d0:fd:f3:5f:bd:fb:c0:
b0:c7:22:f0:f8:59:8f:5c:71:e5:6f:f8:0e:01:64:d5:ad:5d:
92:53:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:00:26 2025 by rpki-client