Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EzKEfsZ_oQlbiNF2lEy-hJFpy2k.roa
File: EzKEfsZ_oQlbiNF2lEy-hJFpy2k.roa (raw, json)
Hash identifier: /nhhi0UrbaY6nPOAQk0AkLD0i6DNYnrYIkvyB/tB0+4=
Subject key identifier: 13:32:84:7E:C6:7F:A1:09:5B:88:D1:76:94:4C:BE:84:91:69:CB:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C5CE522
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EzKEfsZ_oQlbiNF2lEy-hJFpy2k.roa
Signing time: Sun 20 Feb 2022 22:17:58 +0000
ROA not before: Sun 20 Feb 2022 22:17:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818027298 (0x6c5ce522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 22:17:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1332847ec67fa1095b88d176944cbe849169cb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:a6:08:5d:92:b0:7d:84:42:ac:3a:30:f6:
4f:52:48:b5:cf:4c:7f:d2:08:a4:56:b6:a5:e3:01:
c9:ad:cf:59:c2:13:be:2c:43:1b:ce:d9:6b:24:db:
49:7b:64:1f:18:2d:07:e2:d1:a8:0f:42:42:b8:a1:
50:0c:f6:99:ec:5a:3a:aa:87:df:59:aa:b4:0c:1e:
59:0e:73:50:ee:84:90:01:e3:8d:64:bc:e6:93:7f:
29:a8:99:be:4f:a1:ac:bd:45:cb:21:a9:b5:f3:3f:
ed:e5:ed:19:d6:4f:28:2c:f4:24:f7:d4:59:9c:80:
b1:9e:ef:45:bf:bf:58:07:1d:cf:76:a5:37:5c:0a:
c3:72:af:aa:41:bd:46:aa:13:f6:c2:63:dd:82:b8:
3d:9f:21:9a:9b:76:ee:c6:00:9f:90:77:15:e8:07:
8b:d2:5b:30:12:e6:f1:99:75:5f:a0:cc:9e:08:c3:
26:4c:93:06:86:19:40:a0:7c:43:d1:a7:46:fe:55:
57:b6:a3:d6:50:7b:29:00:57:33:e5:de:ca:26:0d:
8e:8d:82:0e:6e:d2:08:46:d3:a6:7f:23:8e:31:c1:
01:9c:a8:75:b7:03:98:ae:ee:1f:b2:5f:4d:8a:11:
66:95:42:48:7a:36:fa:55:ee:ce:11:36:d4:44:e6:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:32:84:7E:C6:7F:A1:09:5B:88:D1:76:94:4C:BE:84:91:69:CB:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EzKEfsZ_oQlbiNF2lEy-hJFpy2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:f7:76:9a:0c:7c:84:70:0a:fc:c4:b6:cb:6d:35:a3:20:97:
a9:46:1f:59:c7:d8:17:07:ab:2d:6c:f8:3f:bd:4a:c6:93:7d:
79:01:86:65:2d:51:0b:7c:bc:6c:c1:29:2d:e2:36:e4:21:60:
46:8b:f9:e1:cb:52:62:9a:7b:e3:59:c1:19:58:41:6a:32:bc:
98:41:1e:2e:f2:f6:dc:37:b6:8f:f6:8e:5a:f2:d4:f5:6d:61:
4a:06:e9:e5:b0:ff:58:8f:fc:e1:cc:75:e7:52:12:e5:8d:79:
3b:6b:92:82:10:4d:89:5e:ce:83:06:76:11:ba:d1:c3:8a:c3:
40:53:3c:26:ee:f1:77:54:60:92:b2:14:ac:f7:47:cb:c9:e3:
95:59:be:b8:6c:b2:4f:c1:fd:af:2e:83:59:15:cb:0b:87:c5:
aa:e3:33:14:99:77:66:00:f7:9c:ff:a6:ee:c6:cd:7e:23:64:
8c:f3:fe:9d:72:22:c0:b2:3c:e3:e9:c3:69:e6:ad:aa:1e:09:
7e:b2:85:cd:9e:d6:84:ff:b6:8b:d3:22:57:9e:5f:a9:06:a1:
79:5d:0a:05:5b:f0:33:13:42:49:84:b0:02:aa:1a:ac:76:45:
62:cf:65:28:87:28:39:b1:02:a2:04:38:25:ae:79:68:4d:f0:
03:81:21:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:26 2025 by rpki-client