Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EzAWGHxxZ4WJZJUPeAATPU_8lKM.roa
File: EzAWGHxxZ4WJZJUPeAATPU_8lKM.roa (raw, json)
Hash identifier: YuqR4VYJN66f7/t6souDxgLCzZVHGDCKWVpKLvAGNUc=
Subject key identifier: 13:30:16:18:7C:71:67:85:89:64:95:0F:78:00:13:3D:4F:FC:94:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018796D3E457591DD56ABD89A7B68F44B6A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EzAWGHxxZ4WJZJUPeAATPU_8lKM.roa
Signing time: Wed 19 Apr 2023 00:04:41 +0000
ROA not before: Wed 19 Apr 2023 00:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:96d3:8875/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:d3:e4:57:59:1d:d5:6a:bd:89:a7:b6:8f:44:b6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 00:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=133016187c7167858964950f7800133d4ffc94a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:e1:4b:73:b5:c8:cd:ce:20:0a:05:bb:d2:
b4:f0:bb:30:32:58:8f:ca:b1:e7:a2:98:31:e7:19:
3e:5e:39:26:16:2a:94:6a:a5:ca:0a:df:14:cc:fa:
be:42:03:b4:d7:c9:9e:ed:48:bb:ef:1e:57:0c:70:
45:f4:13:32:63:40:60:7f:74:61:81:b9:4d:af:e1:
9c:85:40:f9:4f:13:5c:fe:7f:13:e8:c3:80:3d:61:
73:74:61:2a:86:5e:38:ed:0e:28:ec:f9:8d:9b:7b:
86:d8:d9:8d:aa:14:3c:f6:7b:30:bd:d0:ef:e1:24:
13:c4:7b:31:0c:f5:cf:2d:02:95:9a:5c:df:4c:12:
fc:b5:ac:c3:dd:49:cf:66:da:da:a7:8e:6f:6a:b4:
1b:14:bb:c4:fe:82:24:0e:92:2b:1f:41:40:13:c2:
22:bc:cd:ff:58:46:16:1c:c2:5f:c3:95:8b:00:2b:
0f:13:b9:7f:a9:4f:07:5c:dd:8a:e5:33:42:0a:4a:
17:ee:51:b4:e3:ae:66:d4:22:13:53:1b:5d:60:d3:
a4:43:0a:f9:ff:cc:6c:30:2a:70:df:78:f6:56:9d:
49:21:96:ac:d6:1d:8a:e8:cc:bc:3b:58:ec:e5:61:
4e:64:89:8f:e9:60:29:dd:82:4f:a8:61:2b:7f:8b:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:30:16:18:7C:71:67:85:89:64:95:0F:78:00:13:3D:4F:FC:94:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EzAWGHxxZ4WJZJUPeAATPU_8lKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:62:b1:27:1f:b4:51:ab:9b:53:a5:c3:38:0c:41:e7:4f:e2:
74:3c:c9:0d:93:6b:d9:85:3a:33:1e:c0:a3:e4:d7:d0:1c:bc:
ee:f2:f2:38:c5:07:09:8a:96:c0:a5:d4:61:c9:a8:80:81:b8:
f4:9f:c7:58:1a:6d:b2:c9:a3:7a:4b:f4:52:bc:ac:ad:fb:2c:
99:82:64:46:f7:44:0e:3e:73:de:aa:7f:38:c4:f5:e4:6b:73:
a5:ed:0f:e7:d8:08:71:36:e4:59:d0:40:c1:bd:d8:b4:63:70:
ed:a8:4b:84:01:15:f6:36:f3:e4:fd:e4:39:f9:f9:5b:4f:d3:
93:65:78:93:88:d6:01:e1:bd:8b:5d:ff:fb:ad:3e:d5:3c:ea:
5f:de:7e:e0:82:61:b3:e5:a8:4f:92:5d:c0:68:d2:ac:68:5e:
a2:cd:7a:fc:28:03:44:58:74:5a:f3:7c:e7:d4:1f:b7:77:2c:
d0:b1:92:c8:cb:a5:6d:b3:14:6d:ef:8f:c1:f4:ce:7d:72:48:
7d:ad:68:46:19:53:9b:b6:0a:2e:f5:ea:1f:84:c4:37:cc:0a:
14:6b:ad:2b:61:c4:ce:49:de:e6:a7:02:83:bb:4d:b8:af:35:
7c:43:12:20:c2:31:ee:95:58:2f:f5:02:ee:e1:25:3c:3c:09:
11:4b:51:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:43 2025 by rpki-client