Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EppOYxifmHhxABXQVEvM1u-RKks.roa
File: EppOYxifmHhxABXQVEvM1u-RKks.roa (raw, json)
Hash identifier: qxhjJTn8F7zArz+TTovrjsnJOyx5/2E8b/yynuJJTvc=
Subject key identifier: 12:9A:4E:63:18:9F:98:78:71:00:15:D0:54:4B:CC:D6:EF:91:2A:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AD91E886194CFCCE678C5D9012E41CBD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EppOYxifmHhxABXQVEvM1u-RKks.roa
Signing time: Mon 31 Jul 2023 20:09:27 +0000
ROA not before: Mon 31 Jul 2023 20:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:91:e8:86:19:4c:fc:ce:67:8c:5d:90:12:e4:1c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 20:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=129a4e63189f9878710015d0544bccd6ef912a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:aa:ec:42:bc:d3:a1:3d:0e:78:7f:13:59:
ba:1e:eb:28:80:0d:ca:78:b1:34:f9:9a:a5:1a:3e:
85:8b:47:51:41:6b:67:7a:51:58:5d:0f:a5:c4:c8:
50:d5:c6:39:9c:97:43:b7:d2:79:17:4e:be:5c:77:
4c:0b:a8:58:62:a6:58:aa:be:d1:ca:04:71:78:23:
be:ee:46:46:c9:e8:cc:5b:e6:be:59:36:09:c5:1f:
73:b6:a7:0a:b2:0b:36:ee:1e:28:1b:b1:bc:db:84:
e6:a4:8c:ee:43:dc:b2:6b:32:b0:b2:2a:9d:6f:a5:
e0:05:4a:2f:3d:2a:b5:e3:e5:fb:ce:71:19:08:34:
8d:ca:5e:10:d4:e9:dd:b1:9d:42:01:a7:cd:fb:09:
95:b3:07:62:ac:78:65:e8:16:99:b3:05:55:f6:60:
82:a4:b9:fc:ac:82:14:52:8d:03:54:57:ab:eb:35:
75:6e:89:49:fe:74:2b:b5:96:b6:ec:cc:bb:7c:2e:
87:2b:7e:b0:e2:be:50:01:94:33:85:0a:87:84:ad:
8d:fd:e9:ef:58:cb:3d:75:1b:07:9d:00:29:4a:7f:
82:3b:04:f8:1f:7f:59:e7:8e:51:de:aa:66:9f:f3:
1a:9b:e3:e0:d6:99:d1:6e:c7:9c:8d:70:37:94:37:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9A:4E:63:18:9F:98:78:71:00:15:D0:54:4B:CC:D6:EF:91:2A:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EppOYxifmHhxABXQVEvM1u-RKks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:38:9e:1b:54:df:aa:04:5c:90:a9:dc:6b:9b:ae:d1:9b:93:
2f:87:82:e8:31:60:e1:a6:07:d8:56:d3:71:44:ab:10:ca:36:
10:86:90:96:d3:22:37:d3:43:db:6f:a3:ce:15:f8:39:83:8f:
2d:3f:b3:21:b9:08:f3:26:be:80:3f:00:18:31:d0:97:91:38:
b9:a4:89:27:a0:f1:af:18:4e:51:8c:8d:75:51:bd:87:6d:2a:
43:26:3f:67:9a:95:57:9c:e3:0a:20:8c:9e:4b:00:e2:34:be:
9b:7d:ba:6e:76:5e:8d:91:2b:59:ad:52:c9:11:91:06:ad:c2:
83:bc:64:9f:7c:c7:88:17:d0:c2:7c:8a:9a:08:96:00:a8:3f:
49:df:47:3e:4c:66:97:3e:06:5a:09:44:b7:fb:ef:a8:5e:34:
5d:e4:e5:93:17:e8:27:0a:f1:27:40:0c:19:13:b3:f3:d7:45:
9f:ae:dc:bf:14:42:ba:89:37:e1:a7:35:3b:02:ba:24:fb:94:
21:70:84:03:ec:ef:c5:19:71:f5:90:c5:87:d7:fb:bf:a1:8f:
18:06:18:fd:81:fc:4f:28:e8:ab:83:cf:f3:33:9a:0e:d4:db:
f4:03:c9:89:2a:a1:d5:03:0b:6f:df:83:12:64:a5:18:24:ed:
69:f0:fa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:08 2025 by rpki-client