Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EsO4u7tnHna79kXyYleMLkWyy-w.roa
File: EsO4u7tnHna79kXyYleMLkWyy-w.roa (raw, json)
Hash identifier: FrPh2y9IgdALRISzpK80Pm+wYIDTG0E/kAMMlJNfxx8=
Subject key identifier: 12:C3:B8:BB:BB:67:1E:76:BB:F6:45:F2:62:57:8C:2E:45:B2:CB:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A25224EDE2EF20AF6E970AB2FEBDD2DFC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EsO4u7tnHna79kXyYleMLkWyy-w.roa
Signing time: Thu 24 Aug 2023 01:22:00 +0000
ROA not before: Thu 24 Aug 2023 01:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:25:22:4e:de:2e:f2:0a:f6:e9:70:ab:2f:eb:dd:2d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 01:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12c3b8bbbb671e76bbf645f262578c2e45b2cbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:ec:99:e2:eb:b6:b8:0e:48:76:ab:15:2f:
4d:e6:1c:49:27:64:dc:2f:d1:f8:2d:01:1b:ce:8f:
d1:f4:00:15:b0:23:41:7c:77:7a:4a:18:31:d0:e4:
b4:a0:ba:1d:2f:f1:6a:ca:49:e4:cd:6c:a8:b3:d5:
12:b4:09:c7:ef:fc:59:76:9a:97:56:f8:c4:b1:32:
ef:77:f9:a5:01:b3:34:b5:92:d7:e5:2d:4c:f1:4f:
d3:c3:6a:bc:94:db:44:0a:a0:d9:1a:ef:d5:37:55:
97:e5:73:cb:af:f4:69:43:a9:11:00:03:b4:c3:06:
97:d5:69:16:d6:a2:7c:85:b0:9a:da:33:2c:96:db:
7a:ac:cb:be:a8:5b:47:0a:97:26:1f:1f:bb:3c:b2:
11:7d:69:23:ac:ab:cd:60:3e:f2:6c:99:85:aa:a9:
6e:70:5b:39:0a:33:8b:01:a7:3c:33:00:7b:c7:d8:
4f:ee:09:c0:70:27:ab:bb:e6:77:8c:e3:cf:42:12:
79:4d:e4:d4:7d:6b:a6:d5:34:83:25:a4:fb:c0:a3:
82:4a:da:2f:30:f7:1c:1c:0c:cb:9a:6c:eb:19:3c:
83:79:3d:eb:a5:a1:6c:7f:6c:0d:4b:45:34:68:fe:
e0:9b:7c:29:8a:a0:72:e2:c8:58:6a:9b:b2:cc:f9:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:B8:BB:BB:67:1E:76:BB:F6:45:F2:62:57:8C:2E:45:B2:CB:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EsO4u7tnHna79kXyYleMLkWyy-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:e8:ef:9c:10:d4:6e:61:56:bd:51:e5:16:4b:92:6e:30:89:
11:f6:9d:04:e3:0d:7b:bc:a0:77:a2:e3:93:40:68:db:71:dc:
43:56:ae:d2:bb:ca:85:df:90:ec:b9:d0:fd:c5:d7:2a:8c:e8:
99:4a:0c:11:d5:2f:69:0f:96:c3:1f:46:d1:e7:0f:ba:98:3e:
4a:e9:a5:22:2c:2b:48:72:e8:1e:50:73:ad:d2:ef:1f:c7:66:
85:39:c1:20:82:bb:ac:3a:30:17:1c:a8:b6:f8:11:31:36:9d:
ae:28:79:07:9e:56:4c:37:92:f3:d5:71:6f:00:f3:39:a7:d8:
db:e9:71:16:69:32:1e:cd:b8:fd:e0:6c:c0:3d:4b:6f:a4:75:
00:e7:7d:9c:9a:a9:19:26:4e:a3:bd:e8:b4:84:7b:92:a7:25:
a9:6d:59:0a:0d:f5:83:7c:05:06:38:1b:b0:42:b5:57:da:be:
7a:10:ea:1e:e7:8c:de:fa:93:34:5a:0d:6f:ee:10:9d:de:8d:
c4:41:db:21:bb:6d:a6:7f:c6:fd:ac:29:0c:4c:5d:3e:ab:e3:
96:9e:6c:91:d6:3e:13:36:1d:b2:db:9b:6f:6f:27:0d:a2:56:
48:15:d7:ea:fd:d5:f4:4d:88:ee:f4:4f:5c:92:99:45:a0:8f:
12:41:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:51:34 2025 by rpki-client