Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SepkqlkSIh0ileeqMWkozERT31Q.roa
File: SepkqlkSIh0ileeqMWkozERT31Q.roa (raw, json)
Hash identifier: mueAFi0LQDJL2gBVP0UzDX79nS/TLtfTbfT0ujDMxlI=
Subject key identifier: 49:EA:64:AA:59:12:22:1D:22:95:E7:AA:31:69:28:CC:44:53:DF:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B295656E901344E56A1F29A35260826E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SepkqlkSIh0ileeqMWkozERT31Q.roa
Signing time: Sun 05 Mar 2023 16:23:00 +0000
ROA not before: Sun 05 Mar 2023 16:23:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b2:95:65:6e:90:13:44:e5:6a:1f:29:a3:52:60:82:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 16:23:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49ea64aa5912221d2295e7aa316928cc4453df54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:ab:52:a8:91:2b:e9:bf:9c:eb:b4:95:62:
fd:c6:1c:dc:af:cc:5c:67:f4:77:d9:c2:90:01:4c:
d4:69:0c:ea:be:8f:9b:db:6e:b6:db:61:cc:ee:07:
a2:fb:b8:a1:0f:3a:8c:73:c0:82:39:51:00:e9:2a:
4a:e3:94:07:1e:a7:28:ae:8a:52:07:8b:d4:68:06:
1a:86:a4:ac:f2:13:69:d5:83:7d:0f:40:d1:02:1e:
50:3a:11:7d:6b:be:92:83:0a:f9:6a:d5:2f:6b:bb:
38:cc:d3:21:e2:c4:65:63:19:d6:60:31:48:ce:a2:
6d:a8:98:d6:d1:f7:2d:40:82:57:6a:a0:cc:93:4c:
4a:76:17:63:fd:e6:8f:3f:6b:da:1e:43:4d:89:11:
1a:2d:d2:9f:60:e3:1d:d9:39:9d:5b:3f:cc:76:52:
55:2f:18:f5:b9:67:23:80:cd:25:fd:77:2d:2c:e3:
e6:60:83:7e:a5:de:77:e1:7e:ee:b1:ca:fd:87:1a:
83:68:38:6c:7f:72:6a:ff:28:76:41:ca:40:41:48:
dd:89:d1:06:82:e8:a2:40:aa:2d:5d:cb:a0:64:6b:
42:21:85:21:38:bb:c1:8c:0c:f4:4d:67:97:81:e0:
6b:49:b8:da:56:53:0b:41:41:50:68:15:55:24:11:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EA:64:AA:59:12:22:1D:22:95:E7:AA:31:69:28:CC:44:53:DF:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SepkqlkSIh0ileeqMWkozERT31Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:19:2b:99:62:5e:af:20:fd:0e:34:ff:e2:0f:0b:18:62:40:
0e:d8:a6:73:64:5b:95:c4:c4:0f:dc:b7:f7:58:94:99:10:f0:
c2:9c:b8:75:29:03:fb:1b:22:18:49:39:3a:7e:d4:26:c1:97:
5e:62:c3:bb:7d:ef:58:37:69:4c:97:b3:9c:23:2a:27:16:c6:
b6:96:bb:85:6a:cb:29:9b:07:29:2e:75:a3:13:54:12:35:25:
73:d1:59:89:b5:bd:02:65:1f:63:f3:16:ca:64:c4:d9:81:43:
d0:81:7e:21:a8:e4:03:c1:96:90:29:e3:2d:f6:71:ca:ec:1f:
8e:f2:35:11:18:e3:1e:87:e1:6c:c1:38:0f:05:d1:33:b8:4f:
49:69:cc:e5:a5:41:82:e5:eb:d5:9d:b6:47:c2:b6:18:4c:d5:
a3:51:7e:da:3b:27:cf:f7:74:e7:fa:06:8e:05:b1:a5:22:48:
6e:1a:bf:e1:fc:2d:83:48:22:0a:cb:ac:1b:b5:91:46:51:b3:
90:7f:1b:72:95:48:6e:b3:aa:13:a5:92:a0:90:64:e5:6c:c9:
9e:dd:2e:23:e9:27:b3:0c:f1:09:e9:3f:3b:07:67:61:e5:9f:
7f:bc:e9:d2:fc:fd:47:d5:27:c6:bd:a4:06:f4:c8:38:36:03:
83:0c:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:53:00 2025 by rpki-client