Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EjDiJSX3tAx9E2qQpuFZFZkm9KY.roa
File: EjDiJSX3tAx9E2qQpuFZFZkm9KY.roa (raw, json)
Hash identifier: 9PP3aYJY6gXD2HKW+UCCuMIIfq4lMhDCpn2IxwuvR/I=
Subject key identifier: 12:30:E2:25:25:F7:B4:0C:7D:13:6A:90:A6:E1:59:15:99:26:F4:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DE87EA59E456DA277286853441684E48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EjDiJSX3tAx9E2qQpuFZFZkm9KY.roa
Signing time: Tue 14 Mar 2023 05:11:34 +0000
ROA not before: Tue 14 Mar 2023 05:11:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:de:87:ea:59:e4:56:da:27:72:86:85:34:41:68:4e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 05:11:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1230e22525f7b40c7d136a90a6e159159926f4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:0a:cf:f2:c6:67:97:a8:88:f4:1d:c2:32:
88:48:d3:81:b4:b7:82:e7:ab:d3:fd:28:a2:41:8e:
7b:83:43:20:6b:b3:e3:ed:b3:61:7c:d0:ef:60:78:
1d:fc:22:fe:ca:5f:5e:28:8e:33:05:49:9a:f5:16:
c6:0c:72:db:e9:ea:68:7b:ef:af:bc:fd:4f:c6:ed:
03:39:2d:a4:a0:cb:3b:64:60:78:bf:7f:46:b6:90:
46:8e:2b:47:49:4a:52:9e:51:2f:75:c4:ed:41:c1:
b1:a8:5c:a7:c7:b4:fc:d1:c6:a0:3d:ab:33:73:25:
a6:3e:f8:f1:b3:2d:e2:a5:40:e3:42:ee:4c:6e:83:
94:0a:11:7a:3b:ed:89:be:67:4b:a9:49:a2:73:63:
4d:2e:9a:53:81:60:d5:0e:b6:74:9c:c7:5e:ba:e2:
31:04:47:0c:85:c4:69:5a:cc:d7:b4:06:af:28:de:
a1:7b:a4:e9:55:99:b1:09:c3:4e:03:4a:a3:0e:47:
a4:c3:e7:43:4c:17:a1:62:b1:40:85:0c:12:ab:ac:
c5:73:30:4e:45:cc:f9:96:ac:cf:e1:e2:fa:4d:2f:
7b:aa:ce:52:e6:97:9b:33:96:67:7d:a3:9e:f4:0d:
e3:67:bd:4a:c4:62:35:d8:5b:5e:60:9d:a5:77:55:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:30:E2:25:25:F7:B4:0C:7D:13:6A:90:A6:E1:59:15:99:26:F4:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EjDiJSX3tAx9E2qQpuFZFZkm9KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:c7:b0:5b:25:3a:d0:36:c6:1b:26:0f:25:14:c3:fa:5b:44:
05:49:27:d9:37:4d:b6:64:2e:bf:c0:3b:30:d5:84:05:7f:9d:
b3:f7:29:aa:60:b8:bd:ff:c1:fc:b3:f3:ce:de:bf:15:08:2f:
a2:9b:dd:01:60:27:20:6c:84:b2:4e:22:79:48:a0:66:b1:40:
37:f7:fd:1c:98:05:dd:2f:6d:a5:50:49:a5:7d:f8:e3:c4:aa:
1c:0b:ff:da:f1:11:5c:a5:0b:cd:af:4a:73:29:5e:0a:f7:1e:
9f:59:f4:8d:af:9a:83:c0:f4:13:c5:43:0a:17:51:10:ae:a7:
70:af:75:9f:44:49:28:d3:71:89:af:c1:51:cf:6e:0e:4f:86:
65:bb:7e:90:ef:47:67:d8:c6:8d:2e:de:83:fa:35:05:c8:27:
45:56:54:b3:f1:9b:2d:cc:66:7e:ce:fe:d3:ec:69:d2:8d:74:
b1:8f:96:ef:95:6d:4b:fb:50:3e:3f:b6:f5:1f:85:76:c0:e3:
47:f8:6b:e5:77:86:4a:32:5a:bb:3b:75:52:3a:9c:57:e7:3c:
a5:4d:3c:b8:74:6a:be:3a:ea:33:a2:24:6e:70:42:a8:30:54:
c0:e6:9f:6c:56:a6:eb:59:f7:19:92:4c:fd:3d:99:59:ba:ea:
cb:38:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:37 2025 by rpki-client