Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Em2R3m6f0mYHcUyL85tKTrr1bM0.roa
File: Em2R3m6f0mYHcUyL85tKTrr1bM0.roa (raw, json)
Hash identifier: GIsbaCSzjzar+bVqX10RQaGRu9LQPYofwPillcTOPVU=
Subject key identifier: 12:6D:91:DE:6E:9F:D2:66:07:71:4C:8B:F3:9B:4A:4E:BA:F5:6C:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018806A53171E609453F14EB6526C826AEA2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Em2R3m6f0mYHcUyL85tKTrr1bM0.roa
Signing time: Wed 10 May 2023 17:11:09 +0000
ROA not before: Wed 10 May 2023 17:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:a5:31:71:e6:09:45:3f:14:eb:65:26:c8:26:ae:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 17:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=126d91de6e9fd26607714c8bf39b4a4ebaf56ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:14:98:44:c8:92:e1:62:17:28:38:6f:52:
bd:13:f3:1e:14:d5:7e:d3:20:ae:51:52:78:37:dd:
a6:69:a6:a0:ee:8f:0b:8d:69:1e:a2:02:6e:34:26:
74:2f:a0:a6:60:c4:9d:85:50:eb:d7:f8:ad:a1:1f:
f5:27:38:ec:2a:66:27:b1:93:9b:c1:ae:35:fa:b2:
ee:26:2b:19:d4:36:f3:5a:f9:01:f3:21:ce:63:6b:
be:ca:d3:2e:df:b5:99:2c:3a:70:6d:26:21:46:33:
dc:fa:5c:29:5b:7f:f3:81:8b:39:51:fd:0a:e1:73:
17:c1:f1:fe:1d:e2:c3:2b:77:b3:65:b6:e1:32:8c:
91:15:55:b2:50:21:aa:2a:c5:83:7c:2d:7e:bd:72:
de:62:ab:fe:d0:5c:ec:c3:28:58:b9:47:93:9d:ae:
ce:f1:51:3d:cd:03:2b:9d:ca:47:82:c2:84:3f:83:
98:1a:ff:be:64:0f:9f:f3:b5:cb:63:63:98:86:e3:
25:6f:ef:f4:17:d5:85:82:cf:54:3d:55:a5:b7:aa:
a8:f4:75:9d:d3:fd:9d:ae:8e:82:2c:45:32:57:d4:
e5:e8:a4:58:f7:72:cf:08:b3:d5:28:95:95:d2:2b:
7b:76:fb:40:0e:c1:3f:82:c7:b8:8f:1a:61:70:f4:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6D:91:DE:6E:9F:D2:66:07:71:4C:8B:F3:9B:4A:4E:BA:F5:6C:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Em2R3m6f0mYHcUyL85tKTrr1bM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:2d:ba:be:e1:84:8a:e2:04:ba:9e:c4:78:38:21:3c:5e:5e:
f3:2b:aa:8f:25:a0:41:de:6f:7f:70:2f:50:25:5f:7a:14:c6:
29:d3:b7:52:15:29:06:13:4a:bc:60:99:f2:85:e7:b8:d4:bf:
15:c7:b9:14:32:86:3e:54:cf:11:d5:ee:0b:23:66:e4:0b:36:
4d:7a:be:75:7c:c1:90:a9:60:47:bf:54:99:16:90:2e:c9:ca:
b8:eb:dd:e2:ec:fc:d7:30:79:14:bc:73:a8:d3:bc:b0:1d:95:
75:ff:b6:49:8f:e8:1c:45:53:57:94:0c:a9:00:a0:1c:8d:99:
4f:71:7a:86:6d:06:c8:13:86:61:28:2a:0b:af:3b:19:f9:60:
82:fd:dc:8d:6d:b8:db:f0:27:a5:68:8c:72:6e:7a:5e:9d:c5:
26:3e:10:3c:c8:dd:58:c4:26:ba:6f:2b:36:1e:7a:e0:87:6b:
c9:4c:bf:0f:68:40:18:4d:ac:b9:21:b1:1b:f2:f5:67:7d:0c:
c6:24:c0:ca:87:11:81:98:1a:dd:4c:e6:b4:78:19:c4:8b:e6:
e9:57:e6:00:7a:5e:26:45:37:d6:40:1a:97:47:cd:b2:be:ce:
e3:2c:4a:36:47:c1:95:38:95:c7:86:e2:3e:6a:6a:dd:00:58:
26:d1:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:58:56 2025 by rpki-client