Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dEnlF6KxeRpDof7hxZBW8KHrQWA.roa
File: dEnlF6KxeRpDof7hxZBW8KHrQWA.roa (raw, json)
Hash identifier: EGBtN8PzvFWBVqGbZNiPTATZnUnTC1dLIc0KrdNqJDU=
Subject key identifier: 74:49:E5:17:A2:B1:79:1A:43:A1:FE:E1:C5:90:56:F0:A1:EB:41:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018779AAAE268AFEF63AE16F4D6D21264459
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dEnlF6KxeRpDof7hxZBW8KHrQWA.roa
Signing time: Thu 13 Apr 2023 08:10:41 +0000
ROA not before: Thu 13 Apr 2023 08:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:aa:ae:26:8a:fe:f6:3a:e1:6f:4d:6d:21:26:44:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 08:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7449e517a2b1791a43a1fee1c59056f0a1eb4160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:75:24:d3:0d:d6:b0:bb:01:17:9e:fc:5d:
73:fe:b2:4b:09:ae:44:70:ed:41:15:c6:ef:5a:9e:
13:78:d3:2f:ae:55:e0:84:c2:29:3e:f2:6a:99:36:
90:52:39:b5:9c:b6:4f:cc:e5:f6:d8:1a:6d:32:b8:
53:4e:49:9e:c1:24:7f:84:c8:a4:af:16:35:5b:a2:
62:7b:72:0e:12:bd:08:dc:ef:d3:96:0d:de:67:3b:
f6:90:51:d6:13:64:eb:a0:ae:5e:f1:c4:b3:59:be:
8e:6a:3a:81:85:5d:cf:cc:fe:ec:35:f2:aa:55:ed:
8a:5b:bd:e8:fa:52:67:05:bb:27:cd:6d:e6:04:46:
13:2f:c5:61:ee:fb:cc:39:04:fd:49:ec:74:3f:13:
d5:46:15:39:b9:7b:15:5b:e7:4f:e6:d7:2a:9d:9f:
89:15:af:06:83:d1:79:93:fb:f3:d3:5e:f3:1b:8e:
ba:c8:01:f1:a5:6c:a7:24:4c:64:00:f7:88:b4:ae:
b9:a1:09:8c:50:95:85:0d:88:2a:12:2a:40:2c:e1:
f5:8e:1d:4b:20:62:f9:96:16:fb:0f:00:6b:2e:06:
fd:8b:88:53:49:e8:65:ff:18:e9:aa:de:d2:1b:09:
e7:f4:ac:0e:dc:92:bb:32:7d:78:e0:d1:63:5e:55:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:49:E5:17:A2:B1:79:1A:43:A1:FE:E1:C5:90:56:F0:A1:EB:41:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dEnlF6KxeRpDof7hxZBW8KHrQWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:59:4e:86:f8:b7:fc:8e:ae:8a:f7:37:a3:05:85:0c:cf:f2:
3d:c7:68:cf:80:d9:0d:cc:27:2e:d9:55:5c:15:d7:35:b2:82:
0c:28:f4:8d:b8:41:e3:f5:8b:c6:ac:a6:3e:29:b1:13:56:8b:
76:32:4b:9f:27:2b:53:64:4f:8a:d5:2d:d8:72:b4:c4:0d:7e:
67:c5:92:a3:7f:88:17:92:a5:c3:70:aa:13:bb:b8:ad:a5:b3:
eb:08:d6:99:5e:eb:f5:23:9e:53:9b:fc:6a:3c:00:b5:b8:6b:
57:dc:f1:7f:e6:2a:43:89:32:0a:eb:f7:dd:4f:a2:17:21:44:
65:12:65:e0:59:08:33:63:e9:be:69:8c:78:8d:63:b0:aa:e8:
d6:da:a5:b6:dd:2e:f5:50:5a:a8:33:40:8e:ca:dd:e7:73:0c:
8e:03:f2:ed:b7:24:e0:6d:e8:29:1a:7a:d7:5b:45:b6:2f:38:
8d:ba:04:2f:8f:cb:fe:33:2b:fe:8f:24:c6:83:8c:75:47:2f:
55:fa:52:1a:1f:07:41:31:de:f1:9a:7f:cf:b7:eb:74:cb:c6:
91:7f:97:43:83:db:29:5e:0c:b2:b0:7b:19:bf:8a:b3:1b:05:
cd:d4:9a:d2:1d:96:d9:c6:9c:46:3d:0c:95:6a:13:79:ed:8a:
b9:ba:a5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:10:40 2025 by rpki-client