Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e868vplR5QRGo_XQVokauWUWwKU.roa
File: e868vplR5QRGo_XQVokauWUWwKU.roa (raw, json)
Hash identifier: 3GurUI5Xc187Psaar2dxOILezRmZfOfua3QVuBncFZY=
Subject key identifier: 7B:CE:BC:BE:99:51:E5:04:46:A3:F5:D0:56:89:1A:B9:65:16:C0:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866F2BF613F0796051E8F1DBF0022DC2C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e868vplR5QRGo_XQVokauWUWwKU.roa
Signing time: Mon 20 Feb 2023 14:13:17 +0000
ROA not before: Mon 20 Feb 2023 14:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:2b:f6:13:f0:79:60:51:e8:f1:db:f0:02:2d:c2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 14:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bcebcbe9951e50446a3f5d056891ab96516c0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:17:aa:81:3b:0a:ed:81:11:f5:57:72:8d:d7:
97:1b:ae:d5:c3:90:83:79:55:7f:20:5d:84:ea:db:
ef:a6:33:ca:f8:8e:ff:3d:fd:0b:30:17:a0:58:e4:
de:0b:ac:f7:ef:de:bd:e1:c6:aa:74:47:e7:5b:ef:
c8:1f:c6:ce:06:6b:1d:15:e0:e5:5f:62:bf:89:29:
fc:86:dd:02:54:98:9a:4b:a6:b3:66:b9:a6:4b:13:
61:24:9c:5f:eb:20:b8:0b:c6:84:24:9e:d0:ae:cc:
d0:a3:01:26:a2:eb:51:08:87:19:39:cd:cf:46:82:
d1:57:f4:da:47:86:ac:80:49:4f:7e:ce:60:ac:f9:
08:68:81:75:bd:c7:59:cb:10:1d:9e:03:a4:ed:57:
d2:25:95:55:37:16:f5:53:06:82:27:d0:13:6f:e0:
fe:43:f3:03:0c:aa:c6:f6:c1:49:72:28:04:70:50:
0f:11:55:2e:79:ce:4b:5b:cc:e8:5f:43:9c:d0:e9:
46:12:c2:fa:de:12:07:60:91:e0:ae:e7:23:7b:76:
c5:98:c6:38:b6:ec:40:1a:cf:ee:41:16:ba:6d:91:
f6:7e:8a:1e:9a:3c:8d:ca:91:4e:04:6e:e1:b2:d4:
a6:66:c5:b6:e9:22:b4:1b:e1:57:38:95:99:ae:7f:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CE:BC:BE:99:51:E5:04:46:A3:F5:D0:56:89:1A:B9:65:16:C0:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e868vplR5QRGo_XQVokauWUWwKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:09:3b:7e:55:6e:95:7f:ce:00:c1:fd:5b:aa:48:b6:8c:ee:
08:b0:fe:69:e3:20:de:47:85:be:32:6c:b4:21:39:3c:bc:a5:
c0:bc:14:a9:f6:3e:ed:07:1c:48:26:3c:45:60:4c:fe:e5:28:
45:25:6e:c3:6c:23:1a:3f:2c:60:08:36:f1:b1:8b:f3:01:ca:
00:80:b2:96:83:5a:5e:fa:1b:22:56:6b:eb:36:52:80:ed:f2:
2b:11:39:34:fc:32:a3:00:8d:83:39:19:c3:e6:e4:72:80:aa:
f2:b5:13:cd:ff:ec:71:69:3f:b1:0b:01:a9:53:99:c6:e3:1e:
b3:f0:fc:98:95:d3:3d:78:7a:ef:20:bd:a1:e3:30:dd:4c:c2:
15:03:05:03:95:c1:8a:cc:cb:61:7c:a9:c6:55:c3:cb:68:58:
00:9a:0e:48:bb:9c:2b:69:89:ef:c7:33:3d:e3:eb:20:60:4c:
e0:90:68:23:2d:b5:82:9a:ab:a5:38:ac:d6:ad:b7:81:f1:b6:
f2:e9:4a:95:69:17:d2:b0:b7:18:98:d2:d7:bd:32:08:a7:33:
59:a6:32:68:be:42:b3:24:91:71:19:61:14:ba:aa:23:3e:49:
5c:a9:b2:14:08:3b:54:00:27:64:7d:39:77:a6:7a:fe:23:44:
c6:5f:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:45 2025 by rpki-client