Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/En7nyxed_ngfd_bpUH65DLbDrqA.roa
File: En7nyxed_ngfd_bpUH65DLbDrqA.roa (raw, json)
Hash identifier: by2ER5JmNhIVMZBsBtOJcJPRxccmZ4T1Xk2SSKLc4Zk=
Subject key identifier: 12:7E:E7:CB:17:9D:FE:78:1F:77:F6:E9:50:7E:B9:0C:B6:C3:AE:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A837D91EA6A98A3E2B81462A44E6BFD0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/En7nyxed_ngfd_bpUH65DLbDrqA.roa
Signing time: Sun 11 Jun 2023 02:10:12 +0000
ROA not before: Sun 11 Jun 2023 02:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a8:37:d9:1e:a6:a9:8a:3e:2b:81:46:2a:44:e6:bf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 02:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=127ee7cb179dfe781f77f6e9507eb90cb6c3aea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:b2:e1:79:e9:f2:17:4f:d5:73:f6:b3:7f:
8a:ac:c2:83:82:b5:30:c9:b8:6a:dd:7f:83:34:03:
16:da:76:c4:6e:85:e6:3a:28:cb:3b:08:ac:8a:7b:
f1:e6:51:9c:e4:b4:8f:a7:c1:0d:6a:99:1a:16:a3:
80:86:94:1f:4d:d6:ab:3b:90:ba:10:0c:3b:3b:00:
89:1b:b3:52:6d:6e:71:62:fb:01:16:62:09:e8:50:
3b:e8:47:c7:72:65:08:92:d0:d3:a2:3b:54:00:b6:
cf:0e:32:f5:de:87:ac:0d:8e:77:6b:82:db:41:ac:
a2:fa:46:51:01:fb:8d:94:57:2f:e6:52:e3:41:d9:
90:eb:7f:89:49:52:d4:06:41:cd:f7:2b:d3:5d:32:
b9:6c:a6:d1:fb:0b:73:e6:22:07:be:44:92:68:7a:
81:36:41:4e:8e:ae:d9:83:b9:63:d2:e2:b7:95:70:
51:85:42:cc:09:37:66:86:6d:e8:fa:cf:a2:4f:44:
28:7e:48:b8:4f:3f:23:20:42:b3:d5:1d:84:c2:ff:
e6:3e:42:f4:7c:6a:c3:05:f0:4f:0e:12:fd:84:b2:
8f:32:55:34:d4:31:0d:4e:b5:21:9c:71:4e:db:a1:
db:3d:26:d6:4c:07:1d:47:e1:78:29:57:1c:46:53:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7E:E7:CB:17:9D:FE:78:1F:77:F6:E9:50:7E:B9:0C:B6:C3:AE:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/En7nyxed_ngfd_bpUH65DLbDrqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:e4:0e:05:16:ec:03:02:27:b3:bd:e2:bf:76:45:3b:7e:67:
d6:5a:71:5f:0b:9a:f4:2b:5a:a6:79:91:1b:b4:1d:07:46:9e:
e7:d2:0f:c2:18:79:53:f9:7c:81:3b:d1:dc:30:a0:bd:23:2d:
6e:34:d0:8d:9b:a3:23:db:a6:55:1a:8a:e8:f7:22:9b:34:6b:
aa:a6:44:c0:36:b0:92:96:59:ab:f4:09:88:06:47:5f:a9:7f:
ae:e7:c5:b1:b9:fe:48:ab:3d:db:68:21:e5:36:cf:c4:5f:3c:
07:44:b4:8d:3d:d2:77:48:7d:79:64:b1:a8:fd:29:9c:86:3a:
b9:ba:4e:7b:90:f7:52:29:aa:42:41:50:c1:2e:ec:01:ee:9c:
ed:92:30:eb:05:1b:6b:72:86:84:a6:9e:8f:a0:49:67:b2:dd:
2a:97:6c:28:cd:19:2b:74:ff:5b:bc:60:cd:75:ce:e1:7d:59:
c3:6b:a2:6f:2e:02:fe:5f:5a:00:05:ce:6a:eb:dd:41:29:c9:
f8:7e:07:b5:78:a5:77:65:24:72:cf:b9:ee:63:40:03:ef:5e:
0b:bb:64:b6:05:27:fc:61:cd:93:55:28:2f:c2:96:8c:1d:f9:
40:3d:8b:fb:c4:37:40:95:57:37:d9:f5:4b:8a:41:bc:dd:84:
26:45:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:56 2025 by rpki-client