Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EwOdR6Cyy0YIK0x54E0iqawnUzM.roa
File: EwOdR6Cyy0YIK0x54E0iqawnUzM.roa (raw, json)
Hash identifier: op6ikqv3vHehH7aoYAQgwZWoIs6dqVvQzWG9M/clpkY=
Subject key identifier: 13:03:9D:47:A0:B2:CB:46:08:2B:4C:79:E0:4D:22:A9:AC:27:53:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8CE24F7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EwOdR6Cyy0YIK0x54E0iqawnUzM.roa
Signing time: Wed 15 Jun 2022 08:17:35 +0000
ROA not before: Wed 15 Jun 2022 08:17:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2363641726 (0x8ce24f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 08:17:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13039d47a0b2cb46082b4c79e04d22a9ac275333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:0c:82:b1:e4:49:a7:15:62:3d:6a:02:ef:
2e:b1:2d:e2:df:81:86:63:e8:34:f0:79:9e:51:ab:
8a:e1:50:23:d0:d0:fa:e1:f9:42:ab:9a:97:f0:a7:
17:71:55:31:60:ea:ad:53:cf:66:e1:57:fb:29:2b:
4c:27:50:0f:2d:d5:2b:de:49:0f:37:7d:cb:49:94:
db:d0:d5:08:eb:a2:db:5a:71:96:15:69:b5:3b:9d:
d0:2b:dc:97:0c:17:e8:39:27:d3:2f:b4:dc:49:ab:
0a:40:ae:f3:a2:e1:dd:3a:0c:97:76:54:70:09:6f:
56:2d:fd:e6:7d:a6:42:c7:a5:b6:55:94:ab:25:fd:
66:97:d7:2c:b4:44:d5:92:41:ce:0b:98:04:dc:98:
6c:f6:38:94:91:e2:d7:3f:47:f6:fd:88:0b:a0:94:
6d:79:91:de:fd:db:c4:40:d0:15:2f:40:a7:01:7d:
dc:14:5e:fe:d8:33:c7:c2:a0:9a:49:49:04:1d:5c:
69:15:d3:2d:01:10:97:91:7e:d0:a3:85:e0:39:f0:
d1:7f:2f:f9:88:41:5b:e4:da:a8:fe:42:44:07:2b:
f6:35:20:69:fe:d2:b2:b8:ac:0d:38:8f:b7:aa:8a:
14:84:1c:eb:00:0c:8d:db:fd:f7:e9:ec:cc:ca:38:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:03:9D:47:A0:B2:CB:46:08:2B:4C:79:E0:4D:22:A9:AC:27:53:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EwOdR6Cyy0YIK0x54E0iqawnUzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:12:09:85:43:4a:71:e0:ca:59:16:e7:f2:5b:9c:b1:b0:9a:
a0:7d:6e:c7:8c:fc:a8:78:6b:bc:82:a6:40:d7:cb:84:18:9e:
4c:d5:db:2f:39:42:36:a5:c3:b4:f0:9d:cb:d7:37:78:1f:e7:
95:79:de:ff:e3:e0:a0:e2:85:bd:42:80:98:6e:4a:b4:0e:f2:
02:56:69:0e:a2:f8:c3:59:43:33:ca:de:c6:00:21:09:51:62:
77:88:08:ca:aa:b0:7f:99:7a:75:38:25:ef:5b:2d:c7:4c:fd:
02:ce:63:f4:bc:f1:3c:d1:10:ed:b1:d7:30:db:4f:90:a6:eb:
47:cf:0c:c9:f4:de:5f:a8:a3:5d:d4:c6:87:5b:3f:45:ed:16:
f2:4d:81:dc:6e:ea:69:10:2f:bf:7e:95:bb:f8:d8:0d:c7:b8:
a2:09:6e:d5:a6:c9:05:01:ef:79:2c:c1:d3:b6:14:0d:58:05:
41:db:bd:64:32:0f:f1:a3:50:9a:10:b4:00:89:e0:69:b8:c5:
16:c4:cc:c4:dc:d0:88:2e:b4:21:5e:cd:cf:f6:ae:15:72:4f:
06:e2:3f:21:ad:23:1b:3d:80:d4:a0:53:ca:ea:61:bd:46:5e:
80:2e:70:b4:28:97:81:d2:73:de:9e:ea:86:dd:87:5f:2b:eb:
65:4f:1e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:11:11 2025 by rpki-client