Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I-EnidIJfJQDQabAekexc018zl4.roa
File: I-EnidIJfJQDQabAekexc018zl4.roa (raw, json)
Hash identifier: BLE82Htrqoj/Tk1OoTT/5Snz/8e2MYIYPUZzRmXZcoQ=
Subject key identifier: 23:E1:27:89:D2:09:7C:94:03:41:A6:C0:7A:47:B1:73:4D:7C:CE:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2C95A6AC1C40F073504EC18AAE39A211
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I-EnidIJfJQDQabAekexc018zl4.roa
Signing time: Fri 25 Aug 2023 12:05:19 +0000
ROA not before: Fri 25 Aug 2023 12:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:2c95:1e03/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:95:a6:ac:1c:40:f0:73:50:4e:c1:8a:ae:39:a2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 12:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23e12789d2097c940341a6c07a47b1734d7cce5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:d7:54:0a:dd:c9:3c:94:dd:73:80:8b:31:
76:6c:dc:5c:62:9b:9d:f1:a4:3a:0d:b1:82:62:e9:
74:1c:0a:63:b9:16:8a:ad:bd:5d:ba:2a:44:51:69:
39:27:03:92:44:ac:a4:7c:03:84:1a:eb:5c:1e:37:
3d:bd:62:68:1f:91:08:08:76:1d:35:e8:05:ab:2a:
c4:c5:0b:11:d4:f4:19:99:10:90:d7:7b:97:d4:d2:
88:02:78:48:6c:af:56:ec:9c:39:36:86:44:02:d6:
fb:3a:32:f1:27:b1:fa:ba:d8:5b:5b:55:54:6f:5e:
36:24:18:88:4a:85:ca:86:eb:26:a0:d0:d7:13:38:
e8:20:1b:9e:7f:f6:e6:ee:1a:a7:7c:95:52:09:b0:
a2:8f:ae:fc:fa:43:2a:36:bd:41:03:17:48:37:5f:
0c:35:cd:af:56:5d:a7:44:53:ad:ee:0d:8c:89:49:
89:f8:35:c4:58:ec:f7:f7:35:15:75:99:aa:cc:b6:
82:38:78:61:7d:5e:fe:5b:9b:da:1c:d3:4f:53:2b:
71:10:ef:24:dd:c2:e3:c1:c0:eb:f7:7f:b7:1e:dc:
76:64:c5:cd:51:c4:b6:a9:b1:2d:91:e9:1a:54:60:
75:dc:73:4a:11:81:1e:11:18:b9:4a:1e:09:78:ea:
d3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E1:27:89:D2:09:7C:94:03:41:A6:C0:7A:47:B1:73:4D:7C:CE:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I-EnidIJfJQDQabAekexc018zl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:70:a7:ff:8f:fd:1d:06:50:8f:f1:96:02:4e:42:81:5d:bd:
3e:d7:a8:69:8f:e5:62:22:bf:9a:18:72:b5:01:65:03:24:52:
e8:1c:7c:e8:dd:c8:33:6b:a8:7f:2c:7a:66:fb:64:2d:31:0c:
b0:d2:64:bd:a4:36:61:e7:e3:fe:90:b2:de:e1:d3:5c:2c:17:
d9:45:b8:70:28:52:0a:11:d1:21:4c:0b:33:d4:9a:8b:30:87:
e3:7c:7c:96:37:7e:24:13:05:20:a4:80:b2:7b:86:83:98:16:
8d:2b:6a:81:ac:96:d7:ae:bd:2c:5a:5c:db:a3:80:5d:dd:06:
96:38:9a:92:00:e3:2a:0a:b2:bf:2b:72:eb:1f:2a:30:aa:06:
04:6f:12:64:4b:e8:21:0f:69:b8:5e:42:65:4a:98:fa:f5:bb:
a4:b5:ae:e7:03:dd:7d:14:7b:c5:2c:4e:d9:15:55:be:36:8c:
ee:ab:59:72:4a:53:5c:d0:bc:c2:51:f8:a1:a4:33:a3:a7:34:
7c:4d:5b:c6:9b:28:52:d6:08:65:03:a9:5c:96:00:8c:e0:6e:
c3:b1:ff:77:ce:1b:38:4f:43:0c:16:5c:40:c1:0f:9d:30:3c:
5c:2d:76:55:32:a8:04:15:cc:f7:03:7e:0c:85:14:1b:99:88:
75:e8:e6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:04:11 2025 by rpki-client