Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EvyudwUMpl_Za2O25otGKJXEg5I.roa
File: EvyudwUMpl_Za2O25otGKJXEg5I.roa (raw, json)
Hash identifier: U9gavy9ff0AF7oTe1Xp1YEpu3BvPXMFzB3VC40iC7jQ=
Subject key identifier: 12:FC:AE:77:05:0C:A6:5F:D9:6B:63:B6:E6:8B:46:28:95:C4:83:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898DD1D81DEF227C02A74BAB177E660B93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EvyudwUMpl_Za2O25otGKJXEg5I.roa
Signing time: Tue 25 Jul 2023 16:11:27 +0000
ROA not before: Tue 25 Jul 2023 16:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:d1:d8:1d:ef:22:7c:02:a7:4b:ab:17:7e:66:0b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 16:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12fcae77050ca65fd96b63b6e68b462895c48392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:a4:7f:90:22:31:f0:61:9f:e6:5f:96:6b:
9e:4b:28:c9:2f:a9:ab:55:9d:f8:f5:83:b9:2b:39:
f4:62:b7:eb:c4:47:f1:ba:1b:eb:72:3f:eb:66:4a:
6a:80:4e:4e:1f:69:76:4b:7e:d0:00:06:e5:74:3c:
3f:46:27:e7:88:99:ef:e6:3a:a9:bf:96:0f:07:f6:
30:ce:9d:2b:d9:16:0b:a9:28:08:21:7b:2e:e9:13:
d4:b5:44:ee:31:bb:6d:3a:14:61:14:95:da:91:8c:
ac:35:38:3d:42:58:0a:37:3d:80:6b:a6:56:65:52:
b3:00:d8:ea:dd:e7:e2:3c:51:90:13:cd:aa:f4:ef:
26:1e:c0:5e:d7:f8:ae:b4:4f:43:5c:2b:09:6c:ad:
4f:52:80:53:f6:f6:0f:9a:0e:65:ac:cd:06:86:b1:
2a:f9:0f:86:2f:85:e0:83:cb:9b:78:7b:f0:0e:95:
c3:05:31:03:16:cf:06:8e:ce:be:2c:51:92:c4:1e:
34:70:04:b5:7c:9c:50:35:cd:95:c2:6c:46:5d:23:
e2:bf:ff:72:19:1a:f9:fa:bd:9e:57:f0:60:13:7e:
cc:b0:ea:18:8c:7a:a3:03:31:3d:2e:2f:97:5f:88:
ed:06:32:1c:83:c6:d3:b8:2a:38:9d:53:80:17:7e:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FC:AE:77:05:0C:A6:5F:D9:6B:63:B6:E6:8B:46:28:95:C4:83:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EvyudwUMpl_Za2O25otGKJXEg5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:ec:f2:64:50:d6:82:74:f4:35:0c:22:2a:b3:6e:9a:20:26:
d2:aa:df:f0:45:32:ec:29:10:0e:5f:a3:4a:36:1d:5f:0b:b0:
aa:05:93:48:a0:f1:75:b0:a1:ba:f8:4c:2c:34:d2:9d:36:47:
80:ed:ae:ca:78:ff:84:cd:e0:fb:e9:f0:ba:e0:2f:43:1a:ba:
b2:17:12:68:2e:c0:9d:6a:7c:fa:3e:9b:74:db:cd:1e:c8:cd:
0f:88:36:a1:86:4e:8f:59:58:75:78:45:8c:82:29:21:7f:ba:
9e:30:f5:41:e2:cd:88:c5:2b:3d:1b:2f:a0:e9:8d:e4:9a:13:
7c:d1:7f:ce:d8:d7:96:9e:fb:73:52:0d:3f:ae:37:af:9f:d5:
ae:f9:51:e6:e2:45:10:5c:b7:a8:bc:16:d6:66:45:e1:be:77:
54:53:dc:74:53:8b:1f:23:84:c4:61:5b:1d:8a:9e:ec:75:dd:
e2:ba:88:40:66:0c:cc:87:d6:f2:6e:44:ab:52:99:26:6d:09:
4f:5f:44:24:05:1f:37:16:aa:99:5d:c0:4f:e6:dd:9e:b2:6a:
b1:f8:31:4f:af:40:e5:07:a9:32:02:76:6c:bc:ea:36:22:5f:
5a:66:b0:16:f9:00:03:35:36:13:4b:7d:c0:20:b2:a4:ad:cf:
8e:4c:1d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:42:56 2025 by rpki-client