Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e1BNsyUTZoAPCrkBwY4sg6IG0_8.roa
File: e1BNsyUTZoAPCrkBwY4sg6IG0_8.roa (raw, json)
Hash identifier: 5y3cK5BQDvrRHujNfZqG679RcAgVOO/OYV+aOYS/sks=
Subject key identifier: 7B:50:4D:B3:25:13:66:80:0F:0A:B9:01:C1:8E:2C:83:A2:06:D3:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018662EFF2424D4D727E178B1A5D3D382D39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e1BNsyUTZoAPCrkBwY4sg6IG0_8.roa
Signing time: Sat 18 Feb 2023 05:12:17 +0000
ROA not before: Sat 18 Feb 2023 05:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:62:ef:f2:42:4d:4d:72:7e:17:8b:1a:5d:3d:38:2d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 05:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b504db3251366800f0ab901c18e2c83a206d3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:e9:44:21:01:05:51:7c:b2:f1:2c:79:c7:
54:24:38:79:4f:d5:72:bd:9e:77:15:2b:bf:84:a2:
24:c0:54:00:29:45:30:19:0f:af:fb:55:01:be:f0:
46:15:91:85:1b:42:fa:4e:61:8f:d3:02:16:94:de:
25:37:70:50:01:ce:6d:05:23:43:85:4a:1c:98:d3:
3a:e6:23:a1:bb:4d:09:61:e7:21:e3:09:b6:b9:35:
21:f8:9e:9e:7a:f5:08:f3:92:5b:48:d8:d3:90:b0:
a1:fb:4a:df:00:29:72:13:76:3e:ae:e9:01:9f:60:
9b:08:93:41:7c:a3:ee:c0:6f:46:0b:ba:e9:49:77:
90:15:f5:6b:02:65:88:ad:ac:21:a9:41:5c:0d:6d:
3f:c9:80:4c:ce:33:56:77:de:11:55:ce:b7:5f:53:
4a:06:39:e7:c2:c8:fd:1e:d6:d8:76:51:dd:c2:17:
86:ec:87:a1:93:c8:8b:9c:17:1a:cc:b0:23:8b:c3:
17:f9:4e:41:af:d8:dd:f0:40:85:35:22:54:5c:27:
a9:e7:d2:5c:d8:9c:b0:19:2c:fb:c3:86:5b:a1:a1:
47:39:46:7b:13:33:6f:7e:14:b5:48:33:60:bf:ac:
71:9f:6d:f5:02:c3:db:ba:d8:fa:98:fd:9a:38:f1:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:50:4D:B3:25:13:66:80:0F:0A:B9:01:C1:8E:2C:83:A2:06:D3:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e1BNsyUTZoAPCrkBwY4sg6IG0_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:af:81:0c:22:37:96:ef:79:e6:db:26:40:29:d3:7c:fa:03:
c7:48:3c:c0:04:26:9e:aa:d4:c2:ee:2c:86:e8:b7:41:cc:91:
85:cd:7f:f5:fa:4f:4a:72:d9:9a:cd:81:1c:d2:92:e6:b1:bf:
8c:0f:da:17:47:62:2d:71:e8:99:bb:78:a4:9d:6c:c7:d9:98:
41:11:f4:08:6c:0d:17:2a:11:1d:2e:01:54:af:87:a1:d4:20:
49:37:3e:2e:56:2c:8a:3c:79:71:33:46:fc:e4:e0:2e:b8:b3:
41:30:e8:1a:01:1b:71:6a:15:50:67:70:64:77:8d:a3:51:41:
f1:18:76:62:52:b0:bb:61:91:2d:bc:54:48:b2:5d:39:a1:02:
02:8c:62:14:c8:12:ce:67:eb:e6:7a:01:ae:0a:02:0d:46:a1:
77:bb:38:c6:38:e8:c4:90:a0:3a:be:70:49:19:77:d2:10:0f:
4f:79:24:ab:aa:c8:69:41:ce:19:81:8d:88:09:72:b8:d3:65:
25:08:bc:a5:0f:d4:e4:95:ac:4f:44:60:36:66:94:dc:6d:2f:
a1:78:32:12:c0:29:2d:76:15:c2:c9:77:37:c8:70:b9:8f:bb:
74:ee:2f:0d:1b:f6:3c:75:d9:ed:9f:56:f0:c8:1a:ba:14:5e:
58:d9:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:53:53 2025 by rpki-client