Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EkV1qVLOYZZpQ4_P-WthhkP3g-M.roa
File: EkV1qVLOYZZpQ4_P-WthhkP3g-M.roa (raw, json)
Hash identifier: DpiPWGWxB7NUYHS9iW1Y32W7I2DWZ1B+D2JyyQkfM6U=
Subject key identifier: 12:45:75:A9:52:CE:61:96:69:43:8F:CF:F9:6B:61:86:43:F7:83:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E762896513C547A3000424D9D630E186
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EkV1qVLOYZZpQ4_P-WthhkP3g-M.roa
Signing time: Sun 10 Jul 2022 09:13:23 +0000
ROA not before: Sun 10 Jul 2022 09:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e7:62:89:65:13:c5:47:a3:00:04:24:d9:d6:30:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 09:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=124575a952ce619669438fcff96b618643f783e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4b:30:be:2a:56:94:e5:32:a1:33:b7:d6:8b:
d7:2e:8f:92:e1:e6:33:a7:71:c0:fd:1e:18:c6:8c:
d8:13:29:ed:ea:65:06:5f:4b:25:f4:1e:9c:7e:f3:
4d:25:dd:35:f7:aa:3b:4c:89:0a:28:3f:46:3c:30:
d7:aa:93:9f:f8:cd:46:9e:80:d2:63:7b:69:cf:0a:
99:ad:16:ee:8a:ff:d5:e5:b5:aa:3a:9d:a8:32:b3:
6f:e2:62:8d:92:52:5f:67:ca:5b:c0:27:9a:42:3a:
e6:26:e4:61:4a:e6:47:e3:7e:86:d7:00:92:b6:68:
b9:de:4d:f9:02:6a:d3:1e:e7:05:16:cc:ff:68:2e:
76:5c:cb:65:c4:b7:fd:af:b2:14:f1:32:5e:b4:e4:
e3:75:f6:c2:7a:49:da:76:09:a0:1b:c4:bd:3a:81:
42:b7:9c:23:d1:04:18:8a:24:3c:65:4b:cd:3d:df:
86:96:7b:be:a1:f9:31:05:52:03:7d:a2:6c:73:69:
f0:74:7c:e5:f2:0a:cb:94:e0:e4:22:dc:0f:1e:fe:
ea:de:9d:23:41:ca:87:52:ee:e6:45:66:ca:8b:d9:
6e:aa:93:52:1d:09:e1:64:1a:21:19:8c:49:9e:a0:
43:13:8b:ca:4c:4c:ba:ff:6a:ee:27:e3:1f:64:73:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:45:75:A9:52:CE:61:96:69:43:8F:CF:F9:6B:61:86:43:F7:83:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EkV1qVLOYZZpQ4_P-WthhkP3g-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:d9:fb:94:2c:64:3d:de:7b:e0:70:44:14:62:0a:82:91:1e:
10:b7:ca:c1:c6:0a:f4:ad:33:33:24:e5:24:6c:2a:17:f2:07:
4f:d7:80:a1:c1:f1:74:ce:ed:dd:ea:d0:f9:a9:4c:b2:08:89:
60:5e:63:36:75:6f:53:35:32:29:9c:8e:2e:5a:35:25:fd:4c:
00:02:e5:99:f2:51:1b:b5:28:21:a1:42:d8:55:0c:cb:e6:c0:
45:d7:d2:2c:f0:87:b3:df:22:ba:76:32:b4:5a:4a:01:54:87:
98:c3:61:08:f9:ee:4b:6c:c8:49:7e:d2:68:5c:af:3f:8e:69:
46:1e:58:2a:c4:74:c7:5f:4d:84:76:e1:ec:8b:9c:02:09:b2:
3a:91:6d:75:52:03:52:dc:66:54:f2:90:0d:2f:d5:80:7b:c2:
2c:65:bf:31:f1:b4:8a:ef:92:5c:f7:69:3e:be:30:ea:bb:f3:
78:15:ba:bf:02:a2:b5:d2:fe:89:60:7b:99:59:fc:38:72:94:
86:35:e7:34:23:9e:f2:fc:a8:e8:f6:17:ab:f7:17:99:14:98:
8d:13:d7:80:d7:7b:6e:cb:7d:8d:59:69:31:f5:9a:2f:3e:06:
6b:80:b4:15:0e:02:29:15:c6:e5:21:12:2e:37:34:62:ff:51:
7d:8e:e8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:18:23 2025 by rpki-client