Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EhxCLYU16DNKg8kPVn--Qy7scPQ.roa
File: EhxCLYU16DNKg8kPVn--Qy7scPQ.roa (raw, json)
Hash identifier: /xXQdi50g7OP/DKp/jmvYe92DMSqyr5mD1tv6aZofVI=
Subject key identifier: 12:1C:42:2D:85:35:E8:33:4A:83:C9:0F:56:7F:BE:43:2E:EC:70:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181EE093604542742763C644970DF422EDA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EhxCLYU16DNKg8kPVn--Qy7scPQ.roa
Signing time: Mon 11 Jul 2022 16:13:09 +0000
ROA not before: Mon 11 Jul 2022 16:13:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ee:09:36:04:54:27:42:76:3c:64:49:70:df:42:2e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 16:13:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=121c422d8535e8334a83c90f567fbe432eec70f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:93:8f:ba:6f:25:64:db:a2:25:29:e1:73:
90:8c:2f:3b:98:28:be:7a:87:64:d3:49:7e:0c:cd:
f1:2a:3c:69:b5:f5:40:ea:26:03:ea:2a:36:0d:89:
0e:05:43:26:b8:0d:04:44:9e:95:f9:d5:71:f3:48:
39:94:ff:ff:65:f1:4f:f7:82:1d:ce:05:59:14:c1:
97:47:00:0a:23:6c:9e:d5:21:f2:c8:3f:92:fe:ee:
68:51:77:0c:38:69:bf:bb:04:0a:81:31:de:97:1e:
fe:65:e5:b7:d2:37:de:7a:82:6d:28:d2:4c:02:79:
de:21:1c:28:a5:e8:ae:86:53:84:39:30:d9:74:84:
68:67:fa:af:bf:e6:bc:b7:52:9b:2e:bc:ce:8e:ee:
ed:1a:34:88:98:d5:37:b2:51:90:06:31:cd:20:57:
66:ff:e2:46:d2:a6:0a:57:46:23:45:c6:f4:1b:b3:
35:3c:5e:e4:48:0a:63:4f:bf:e7:fd:91:72:00:66:
be:1c:de:2a:cf:96:2d:14:8b:ed:b1:4c:7f:f0:d8:
0c:4a:00:1d:8a:ed:c5:f1:23:20:4d:54:7d:89:dc:
ae:86:03:3a:00:cd:a3:7d:c2:91:ed:08:c8:be:ba:
7c:16:e9:54:cd:f0:3c:19:25:62:4f:fc:85:f3:fb:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1C:42:2D:85:35:E8:33:4A:83:C9:0F:56:7F:BE:43:2E:EC:70:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EhxCLYU16DNKg8kPVn--Qy7scPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:5a:c9:37:8d:8d:95:d1:4b:31:29:05:4b:9f:d3:84:c4:8a:
2c:14:e2:22:43:73:a1:43:c5:30:21:d0:d4:4b:8e:18:39:12:
fd:b0:9f:88:e9:d4:0f:f6:e0:49:be:2d:b8:5d:19:2d:54:55:
0c:53:7a:b2:ea:da:90:cd:0c:02:c3:2d:a0:54:e1:03:0c:fb:
80:66:7d:d5:9e:38:2c:0c:18:8f:08:d1:ba:c4:87:87:07:49:
26:ed:8b:53:28:6d:34:03:d8:b1:f8:5b:05:90:ed:a2:ba:41:
27:ff:eb:04:77:53:f6:3e:06:7f:a8:bc:27:65:3d:30:1a:f7:
7c:01:53:a2:e0:22:cd:18:d9:2e:e4:5b:3e:9b:48:57:22:ef:
cc:6a:5a:74:2c:e7:d0:e4:64:e9:6b:1d:12:43:ec:11:cc:a7:
80:e6:bd:c4:bd:3e:72:60:63:5a:a0:98:8f:6a:5b:be:2e:08:
c6:1e:ec:02:86:c9:3a:1a:d8:5f:87:e4:40:b1:80:36:3f:9f:
e7:4b:4c:a6:85:81:73:46:e7:5b:95:76:11:67:46:76:c1:73:
17:92:5b:22:87:e2:11:b6:18:01:94:57:68:49:b6:d9:1a:9e:
d5:91:6c:aa:15:80:29:6e:74:33:98:d9:b5:2c:7c:ff:39:9d:
62:c8:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:06:58 2025 by rpki-client