Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EkHv76fd4kkC3h64VGOtKzUj6dk.roa
File: EkHv76fd4kkC3h64VGOtKzUj6dk.roa (raw, json)
Hash identifier: HgdKZjbznINP82/5uzfcQ4ayHsPAYHpmvMciPpuhJoM=
Subject key identifier: 12:41:EF:EF:A7:DD:E2:49:02:DE:1E:B8:54:63:AD:2B:35:23:E9:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851B40465C3B198A4C15D865D48DA1554A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EkHv76fd4kkC3h64VGOtKzUj6dk.roa
Signing time: Fri 16 Dec 2022 14:04:35 +0000
ROA not before: Fri 16 Dec 2022 14:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1b3f:ff20/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:40:46:5c:3b:19:8a:4c:15:d8:65:d4:8d:a1:55:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 14:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1241efefa7dde24902de1eb85463ad2b3523e9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:56:c6:34:9d:5b:bd:a4:6f:50:91:a2:4f:
45:ad:85:6f:ec:53:81:28:4d:19:07:df:2b:55:59:
81:6b:d7:33:dc:f9:c6:98:51:9d:52:6a:e8:a3:e3:
fd:07:50:0a:da:6f:63:73:89:cd:c9:0b:f9:e2:ca:
73:a5:29:9c:20:97:cd:31:b4:77:e6:9e:1b:13:5c:
0c:9c:49:43:f4:9e:f4:fb:f7:ea:38:e6:20:84:2e:
df:81:83:d1:43:75:95:68:42:7d:13:af:b1:14:9d:
ca:b4:09:bf:74:ee:fd:99:f4:d2:3a:e5:db:29:51:
db:47:48:e6:8a:0a:bd:76:21:42:a6:eb:9d:65:a9:
c3:52:70:b3:8b:5d:d2:42:53:ed:40:83:5c:55:d8:
65:d7:78:59:d6:b1:6d:81:2c:71:51:6e:82:e5:16:
9d:28:7a:6c:49:5d:a1:15:23:12:ab:1f:6a:56:3b:
be:61:b5:e6:8f:1c:a2:26:11:9c:d9:79:90:ac:f8:
84:70:32:0b:10:b4:24:85:4b:ab:f5:ec:e8:30:9f:
7b:4c:03:88:8e:c4:71:70:da:52:97:9a:7c:ab:13:
08:67:4f:9f:f9:f2:ba:23:21:a9:c0:9a:21:53:4c:
f4:b7:3a:ca:af:47:aa:78:6a:99:15:31:18:90:08:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:41:EF:EF:A7:DD:E2:49:02:DE:1E:B8:54:63:AD:2B:35:23:E9:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EkHv76fd4kkC3h64VGOtKzUj6dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:26:12:b4:70:90:58:a9:65:59:bd:e6:0e:f7:e1:07:33:bf:
e3:57:9f:b5:d7:95:fa:37:82:9e:34:0b:88:1b:8c:8a:28:64:
82:b4:9f:b9:d6:b4:a8:57:24:76:e2:b7:4a:d3:48:4d:f9:ca:
70:0b:73:61:40:3c:57:a9:aa:38:61:37:37:57:9a:b0:d3:a2:
be:ca:60:ce:de:16:bf:99:37:3a:15:96:d0:84:cc:ab:47:9b:
92:8d:fe:8e:86:66:ee:e4:23:4e:18:01:84:50:e1:b0:7f:72:
99:f6:78:67:90:91:54:9f:3f:a9:0f:58:fe:cf:3b:ef:7e:0f:
ec:cd:dd:55:4a:b7:9c:16:49:90:af:b0:2e:26:2e:5d:11:fd:
b8:e7:af:7e:22:fc:9f:f4:99:65:1e:a1:39:43:97:69:f7:0f:
ea:fc:ab:92:18:f0:85:17:72:81:1b:b4:0e:6b:cd:ae:59:6a:
36:d1:cf:87:53:00:30:bf:cf:9b:d7:57:ee:57:7e:f3:c6:d0:
4a:a7:8d:ed:e6:de:85:db:57:ca:d5:85:e5:7f:21:27:77:49:
d2:07:63:e5:29:b2:7c:0e:ab:fa:64:62:d0:f9:31:4a:b7:b6:
74:38:94:fd:f9:83:b7:41:26:a2:62:6e:d0:3b:ef:f9:7b:e0:
b1:f7:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:36 2025 by rpki-client