Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EnDlC3OHqENesil_oOJAjQEzev8.roa
File: EnDlC3OHqENesil_oOJAjQEzev8.roa (raw, json)
Hash identifier: ycpE0oJIMZI5zbk/ulRrY2+UVRxi9ouayIbkb5TF3Ro=
Subject key identifier: 12:70:E5:0B:73:87:A8:43:5E:B2:29:7F:A0:E2:40:8D:01:33:7A:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EAEC3FEA91AB141991F9F6B65EB58544
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EnDlC3OHqENesil_oOJAjQEzev8.roa
Signing time: Sat 12 Aug 2023 18:04:58 +0000
ROA not before: Sat 12 Aug 2023 18:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:eaeb:9932/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ea:ec:3f:ea:91:ab:14:19:91:f9:f6:b6:5e:b5:85:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 18:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1270e50b7387a8435eb2297fa0e2408d01337aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:78:06:4c:f1:82:4c:15:a8:19:94:dc:eb:
5d:6b:d1:4c:fb:93:7c:57:3f:1d:67:d3:ec:64:cb:
55:0e:8c:f4:53:09:5c:1c:82:80:dd:d2:4f:93:46:
5f:e3:08:b0:61:a1:0d:e8:ff:97:46:7d:39:a7:68:
35:37:85:81:ac:ef:92:f6:b9:47:e4:6b:37:a3:4c:
f8:78:74:30:de:54:6f:89:64:3b:6a:07:a4:30:1c:
2b:2a:ea:b6:8d:3d:17:05:34:bb:14:5b:6f:a5:7f:
4d:36:93:8d:1f:16:fc:90:ce:c2:19:19:65:1e:77:
5f:da:fd:0d:28:ae:ae:4d:9c:b6:ce:8b:4d:d9:a5:
5b:50:49:ba:f0:f2:93:fe:c2:2e:52:65:3d:90:2d:
aa:da:f1:76:ea:c6:ca:f7:62:06:4d:1e:93:29:78:
c5:11:ac:33:23:59:d7:94:05:43:d0:67:f5:01:ba:
64:42:ce:1e:b3:6d:37:92:f3:f6:c2:76:42:80:ab:
65:8c:95:4d:d5:0b:03:ed:79:2f:3a:7b:8c:d2:b0:
e6:1f:68:38:cd:35:bd:96:53:20:1a:39:ba:bb:c3:
06:8e:a5:a7:9c:38:db:3e:a5:6b:cb:98:dc:2e:51:
d7:07:d7:f0:56:6f:98:83:54:48:aa:e9:d8:8d:5f:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:70:E5:0B:73:87:A8:43:5E:B2:29:7F:A0:E2:40:8D:01:33:7A:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EnDlC3OHqENesil_oOJAjQEzev8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:22:8b:ce:7f:7e:a7:41:e1:bc:a3:96:6b:62:d0:61:7e:8a:
23:fb:36:48:7f:1f:de:0d:7f:d0:f0:54:eb:ef:5f:ad:86:f6:
79:df:f6:aa:5c:ba:73:b2:85:db:8b:56:f8:8b:90:58:a5:40:
99:07:71:f5:e6:24:10:96:ab:7d:ce:55:47:f6:76:8b:1e:40:
c0:68:9d:1f:67:ee:9f:8f:a9:5d:7c:e9:b7:35:8f:97:1c:76:
37:3c:2c:5b:8b:3a:ea:3a:dc:a1:30:1f:f5:fa:c9:ed:d4:b5:
24:4b:82:87:e5:ca:57:4b:1c:48:c1:29:46:84:02:b1:e1:b3:
3e:7f:74:f4:e0:fd:2c:6a:5a:d0:83:f6:bb:6a:67:74:79:25:
5d:ff:6b:4d:19:9b:e5:4c:74:db:b5:ed:54:ef:0a:07:78:03:
27:56:8a:3e:8b:a0:5f:cc:d5:9c:78:25:36:26:b9:5e:d8:07:
89:01:9f:00:69:be:ae:a5:18:67:e0:bd:dd:80:03:97:ee:76:
49:5b:ba:e4:9e:47:f1:64:2b:fe:52:16:c2:9c:d2:90:dc:e7:
1f:e8:22:0e:6a:15:e8:a7:d1:d5:24:a1:1e:0d:fa:e2:55:1d:
43:c2:7c:aa:69:88:92:fc:9b:6b:1d:e9:bd:e9:2c:83:55:bb:
05:eb:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:05:41 2025 by rpki-client