Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EiZNeDYE-O5sAwXYeV6dalSVqyA.roa
File: EiZNeDYE-O5sAwXYeV6dalSVqyA.roa (raw, json)
Hash identifier: MadkEt08KrPz8jMxfOUQn/jRhk0Ko1KCsYwDwFL+mZQ=
Subject key identifier: 12:26:4D:78:36:04:F8:EE:6C:03:05:D8:79:5E:9D:6A:54:95:AB:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F9FFF7E52A1011C33B8B3B62C3230EFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EiZNeDYE-O5sAwXYeV6dalSVqyA.roa
Signing time: Sun 19 Mar 2023 13:12:27 +0000
ROA not before: Sun 19 Mar 2023 13:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f9:ff:f7:e5:2a:10:11:c3:3b:8b:3b:62:c3:23:0e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 13:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12264d783604f8ee6c0305d8795e9d6a5495ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:9f:12:b8:9c:78:c7:77:07:57:f9:db:3c:
70:14:a1:34:21:ca:f3:2e:c4:80:f4:b5:8f:b6:a0:
1d:73:9f:66:3a:8e:52:38:b9:a9:3c:8c:a2:93:f0:
f4:bb:cd:79:eb:4e:a4:11:91:cd:90:98:b2:cb:68:
75:e0:dc:8f:f6:b9:56:e8:5a:ff:dd:78:78:1a:7a:
9c:81:67:97:3f:2d:b3:13:1f:76:cc:6e:de:00:54:
02:14:bb:33:33:1e:41:c2:19:70:ac:0d:78:69:bf:
0c:d8:42:4d:7a:21:2d:c1:f8:04:19:f9:ae:5b:d5:
87:3d:5f:a7:b3:c4:00:5d:50:90:b0:d9:e3:2c:6c:
f6:3d:cf:65:b5:19:e7:29:16:35:db:01:bd:4f:ff:
9a:4e:c4:09:b2:18:c5:c7:b7:05:a3:91:a7:44:89:
14:03:32:22:3e:90:f7:50:7b:e2:d5:27:0f:9a:99:
e2:1e:68:bd:78:0d:81:0f:f6:e6:29:bd:da:f5:99:
27:0c:48:7f:1c:11:c9:15:52:f7:6a:0d:54:7f:0e:
28:d5:77:1e:08:4e:67:12:01:76:36:01:b9:31:ed:
ef:48:18:7a:c9:2f:6b:8c:a8:cd:2d:97:af:04:0c:
43:cb:7c:e6:fb:c1:ff:b3:94:c5:51:bf:6b:ce:3a:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:26:4D:78:36:04:F8:EE:6C:03:05:D8:79:5E:9D:6A:54:95:AB:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EiZNeDYE-O5sAwXYeV6dalSVqyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:70:db:3a:1e:9b:e7:ef:67:15:0f:69:b7:0c:9d:5c:00:09:
2c:0b:4d:26:ae:ad:ed:e8:96:df:b8:c4:1d:3f:0c:f5:65:e5:
aa:b8:44:ad:12:64:3a:28:70:30:ee:57:bd:91:d4:ae:70:64:
0e:1d:a2:47:97:16:8a:f9:51:ad:11:2f:62:66:de:7f:7d:df:
7a:d1:5e:4f:95:5d:57:43:9b:09:64:07:be:1b:a0:81:4e:76:
d4:d0:f2:c4:75:d0:25:d8:a1:3f:f0:f8:34:bc:16:dc:15:77:
40:b5:b1:e5:23:d7:f7:33:10:4c:3d:b7:1b:5a:2e:10:15:88:
fc:f2:f7:cd:d3:c5:67:de:5d:e7:ad:8c:28:df:eb:3f:7f:07:
b7:db:86:fe:97:31:41:87:c5:82:3d:70:29:d8:d6:97:db:a1:
5b:9b:34:95:94:5d:69:aa:2c:33:22:3f:9b:03:90:c3:7f:6f:
86:2c:c0:80:ab:b7:79:6c:f4:3a:d9:65:8b:ee:ce:e0:f1:6b:
b2:c5:f5:80:6c:11:6f:6b:29:f5:e2:c0:97:8c:23:5e:b1:57:
cf:8e:0f:db:b6:3c:31:6d:0e:c3:b8:03:7b:d7:9f:e7:57:b2:
ef:96:95:5f:4e:62:4b:37:b8:8c:45:ed:c4:86:90:bc:bd:3c:
c9:08:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:45:03 2025 by rpki-client