Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EvmVfhOo4UbqbiJzHp_4olf0s_M.roa
File: EvmVfhOo4UbqbiJzHp_4olf0s_M.roa (raw, json)
Hash identifier: ZUa0arxtDIREE0MFJxkDhyWn71BYLP69/p6qzuOmO/s=
Subject key identifier: 12:F9:95:7E:13:A8:E1:46:EA:6E:22:73:1E:9F:F8:A2:57:F4:B3:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A33E153DCF84AC758A49CC36A9AEEACC8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EvmVfhOo4UbqbiJzHp_4olf0s_M.roa
Signing time: Sat 26 Aug 2023 22:05:19 +0000
ROA not before: Sat 26 Aug 2023 22:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:33e0:8df6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:e1:53:dc:f8:4a:c7:58:a4:9c:c3:6a:9a:ee:ac:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 22:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12f9957e13a8e146ea6e22731e9ff8a257f4b3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:27:94:9e:29:ba:0e:2d:ff:e1:b8:ca:da:
e3:a9:0d:a6:01:29:7e:b9:bd:76:b6:fb:64:5d:a2:
3a:1e:21:14:81:2e:1b:67:af:5d:d0:3a:36:76:79:
ff:e6:74:1e:20:16:04:24:b8:cc:21:b0:07:f3:cf:
0e:7c:7a:5e:da:3b:ce:b4:85:a2:70:96:34:d2:f0:
d5:1c:c1:46:83:7e:01:72:c9:4f:34:cd:83:fb:a1:
0f:27:96:22:55:a8:68:c1:76:25:23:80:78:02:d6:
48:53:10:77:67:70:54:d1:49:67:87:0e:0a:45:a7:
6f:e8:34:a0:34:06:15:54:c3:92:d6:53:37:79:de:
b9:43:52:d9:df:d3:90:c2:31:1b:27:76:97:1a:46:
16:b4:d2:ce:19:13:13:f6:8e:50:e0:e0:30:60:ad:
9d:ea:48:a0:81:86:bc:f8:7b:be:b5:25:a0:6e:94:
89:13:ce:6e:62:16:fa:95:1d:51:7b:fd:0b:a0:c8:
62:8e:e8:53:89:c9:8e:26:1d:ad:07:a3:62:88:49:
1d:b8:40:07:2d:9a:d1:7c:1e:12:4b:19:5a:f2:3e:
d8:21:3b:ae:00:1d:ca:27:ac:fe:5c:13:08:13:d8:
9a:9a:87:39:9e:14:b3:e8:9e:5e:e7:b7:3a:30:67:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:95:7E:13:A8:E1:46:EA:6E:22:73:1E:9F:F8:A2:57:F4:B3:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EvmVfhOo4UbqbiJzHp_4olf0s_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:40:97:6e:42:c3:8e:aa:7a:16:36:3f:68:89:37:69:e6:6e:
2d:37:c5:30:6c:97:d1:53:16:9b:e0:6a:8e:c5:d7:2c:54:f8:
2f:2d:da:f8:e3:78:70:c5:69:4e:25:9e:70:2e:72:c2:49:25:
6a:d0:bb:35:fd:c6:73:ea:23:da:fa:3d:9b:0c:da:5d:1b:f5:
50:51:04:1c:00:64:1e:25:9b:1b:e2:b9:23:63:e5:a6:c1:99:
a6:74:8e:1e:43:68:71:ea:d5:15:7f:42:03:96:bf:c2:8c:96:
68:6a:74:4e:dd:0f:be:bd:df:f8:bb:4a:8b:9e:c1:03:97:25:
7b:11:4d:44:51:36:a9:fc:35:9e:19:c6:56:e3:ce:dc:aa:09:
66:3d:4d:2e:a7:03:ec:2e:72:f1:29:f0:fb:5b:62:dd:b1:10:
4e:bf:47:b2:9e:3b:80:e4:ec:05:a7:a3:42:b4:3f:80:31:e6:
35:35:a3:a7:f0:2c:9b:96:ff:c8:9b:3e:a3:9e:07:90:f5:8e:
86:9d:0f:8b:e8:9e:f1:25:bd:8e:9e:02:71:5d:a7:03:9d:4f:
67:18:bc:1c:a9:1a:86:72:11:05:6e:5f:10:3f:ba:e0:fc:ca:
38:c6:08:03:aa:95:6d:d7:d8:d4:43:5c:fd:2f:3a:ca:b3:3f:
75:f8:f4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:47:00 2025 by rpki-client