Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EtfGRXp0FCc55bZ3sLJrn5aCLDE.roa
File: EtfGRXp0FCc55bZ3sLJrn5aCLDE.roa (raw, json)
Hash identifier: sDDrLpF0pS/aguw7L3vb59FdOh/mRaHGA74Y5KeGUQM=
Subject key identifier: 12:D7:C6:45:7A:74:14:27:39:E5:B6:77:B0:B2:6B:9F:96:82:2C:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BB27B0672EA41A2EA92EC744DBC445DC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EtfGRXp0FCc55bZ3sLJrn5aCLDE.roa
Signing time: Sun 27 Nov 2022 22:14:11 +0000
ROA not before: Sun 27 Nov 2022 22:14:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bb:27:b0:67:2e:a4:1a:2e:a9:2e:c7:44:db:c4:45:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 27 22:14:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d7c6457a74142739e5b677b0b26b9f96822c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a0:7a:42:35:fb:18:22:23:ad:e0:ea:9f:0b:
dd:de:06:e0:64:11:34:21:aa:98:86:96:d2:68:28:
bd:5d:32:48:fa:3a:45:74:3b:7b:da:48:9d:51:73:
42:a8:c2:61:19:e9:6a:13:61:27:97:d1:ab:68:83:
6d:60:e2:4b:d3:1c:32:a9:61:bb:44:c5:19:1d:a1:
fa:2c:48:00:e4:15:64:8d:3a:e3:9a:a1:fa:70:f6:
2f:5d:48:eb:e6:7f:5a:22:a4:a5:10:b4:3c:87:1e:
60:24:3a:10:8b:97:8d:9f:9e:c5:9d:d3:ef:f5:19:
4f:84:9e:44:5f:c6:4c:f2:c2:a2:f3:2b:e2:f9:97:
c2:71:fc:9a:34:dc:81:21:21:85:50:34:91:fa:99:
65:e3:7a:2f:18:1c:c5:3c:84:56:22:a9:e8:96:d7:
e8:33:71:5a:54:d1:6b:aa:0d:fa:0a:6f:66:2a:61:
30:5b:53:0e:7d:65:91:07:9d:89:31:a5:2b:82:2a:
de:b9:c0:d7:a2:d4:67:da:4f:c5:b8:04:e7:d3:a1:
d3:26:1e:e1:41:60:44:36:8b:37:aa:d3:7e:d9:48:
1b:02:1b:67:c0:62:78:8f:1f:8b:d4:f9:31:a1:ba:
0f:96:77:f8:cb:00:ad:24:57:44:95:8f:7b:dc:a5:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:C6:45:7A:74:14:27:39:E5:B6:77:B0:B2:6B:9F:96:82:2C:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EtfGRXp0FCc55bZ3sLJrn5aCLDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:a8:e4:4b:18:6b:a7:53:ec:bc:f8:5b:d6:f6:1a:d2:e3:51:
97:7d:40:5d:50:fb:72:49:1e:41:6a:4c:22:93:86:b5:1f:39:
f2:16:ff:67:37:17:3c:a7:58:3c:7a:26:f2:c4:43:c6:b8:d1:
ac:b1:34:b2:08:ad:ac:7b:75:1f:80:b8:77:cc:96:26:63:ef:
cc:9b:3e:b9:68:f4:0d:d6:32:9c:83:04:18:bb:7b:ad:a1:87:
dc:71:a0:be:1b:bb:08:31:f1:93:53:94:34:be:5b:f8:2f:10:
95:02:9d:9f:2e:cc:ac:5d:de:5e:91:fc:57:9d:b2:e5:8b:d1:
54:e3:4d:a1:58:ad:7e:85:e4:ff:68:69:23:40:7b:e6:dd:3b:
73:e3:0a:ea:44:5d:10:13:45:85:23:7d:08:af:d6:ac:38:76:
ac:c9:b9:cf:14:10:5b:b6:5f:e7:26:64:4d:cb:d4:dc:2e:b0:
72:d1:eb:20:bf:f6:74:49:43:3d:8f:fc:8d:3f:07:d5:3f:48:
eb:c5:0e:40:22:98:b5:c7:73:7b:8c:6e:d5:b9:c8:04:95:3a:
6a:8d:f2:be:bc:d8:27:e3:d7:88:df:29:09:cd:85:c5:8a:f6:
e8:61:5e:92:3c:02:21:9a:45:16:a8:e1:93:5d:29:10:79:5d:
22:96:67:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:22 2025 by rpki-client