Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EyBOniU7o0TJcF4HdNImqJPoOUo.roa
File: EyBOniU7o0TJcF4HdNImqJPoOUo.roa (raw, json)
Hash identifier: W0to0Ldlx9lJ4Kuqd/zdhpj/h3JaiMupQg06Ya+IlMc=
Subject key identifier: 13:20:4E:9E:25:3B:A3:44:C9:70:5E:07:74:D2:26:A8:93:E8:39:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C4C390B39933284BAF860CD6CE89E9E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EyBOniU7o0TJcF4HdNImqJPoOUo.roa
Signing time: Sat 05 Aug 2023 08:14:58 +0000
ROA not before: Sat 05 Aug 2023 08:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c4:c3:90:b3:99:33:28:4b:af:86:0c:d6:ce:89:e9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 08:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13204e9e253ba344c9705e0774d226a893e8394a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4e:33:f7:ba:3f:f9:ee:88:ba:72:c7:e6:77:
44:f7:70:d6:95:2d:20:db:97:ae:e2:08:ba:3d:35:
4f:9a:15:d9:5f:c1:fd:e5:bb:5f:c1:63:56:b7:59:
06:fd:4d:ec:e7:19:7d:5e:61:6a:62:13:59:c9:3e:
ca:08:65:e7:78:08:7b:cd:09:89:d2:37:4c:7b:46:
ae:77:ce:27:14:f6:29:76:1f:5e:3d:ce:38:75:b5:
3d:2c:16:4c:30:55:07:6b:fc:26:c4:24:84:11:16:
38:0c:7d:39:c4:84:6c:f1:f5:20:a4:c1:e1:7e:80:
90:2f:5f:22:e1:92:51:38:30:56:88:1e:8a:6f:f8:
36:f0:0f:24:05:4b:37:ef:7f:2b:19:bf:32:48:94:
6c:1b:a0:74:3b:f6:ce:0f:5b:88:a7:10:95:a3:f0:
d8:37:40:70:c9:14:d8:a5:42:31:6e:11:4b:01:2d:
dc:dd:ac:b1:b2:5b:8e:0a:76:c2:d9:d1:f6:f6:37:
11:2b:a9:a6:a5:84:c4:08:cd:13:a3:a8:c3:64:1b:
83:02:56:e7:c5:d5:fa:3d:84:14:eb:97:d2:d3:8e:
30:8f:26:92:d5:59:86:f6:2d:f3:00:54:26:80:ce:
1f:0a:89:2d:03:23:e4:07:3a:57:2a:99:41:23:54:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:20:4E:9E:25:3B:A3:44:C9:70:5E:07:74:D2:26:A8:93:E8:39:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EyBOniU7o0TJcF4HdNImqJPoOUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:e4:44:e2:38:d8:6b:e0:98:44:2d:5f:91:ec:c9:44:26:46:
a0:3e:01:64:2f:be:3e:06:ed:c2:d0:f6:fc:66:e9:2d:bb:c5:
e5:1b:0d:ab:66:dd:b9:ec:9d:85:86:36:d5:be:1e:8b:08:ae:
d7:62:ac:4f:d3:9a:32:e2:38:b7:b7:74:ec:04:9f:c3:1d:80:
e2:cb:d0:44:1c:0d:b3:ca:ef:87:3b:05:cc:81:80:31:ad:bd:
4e:04:16:58:4a:5d:01:eb:cb:bd:27:e3:a1:7c:dd:f9:35:5f:
07:b3:df:d5:9b:02:a7:a1:fa:3e:30:80:57:00:bf:e4:56:86:
a8:c9:50:31:aa:53:4f:94:99:4b:c6:60:30:f1:21:1c:08:53:
73:a6:92:3e:bf:ce:31:fd:b7:c0:8b:28:b8:a9:fe:2f:54:3d:
6f:a9:01:2c:af:e2:53:67:3b:53:b3:b6:13:35:d8:c9:44:20:
22:7b:89:99:d5:3f:bb:12:9d:8f:3c:40:af:13:05:13:a1:71:
2a:8f:b6:54:15:e9:1d:03:f3:f9:3f:9d:b3:42:e1:05:d1:b7:
df:f8:78:ea:74:b9:e4:c0:4b:3a:40:49:4d:2c:bf:72:39:7f:
39:28:1e:8f:2a:ac:43:9a:3b:67:c5:30:a4:21:77:0a:98:c4:
a0:12:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:58:16 2025 by rpki-client