Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eANXRtwVWvQ6Wrtk4ZUBLYil_2Y.roa
File: eANXRtwVWvQ6Wrtk4ZUBLYil_2Y.roa (raw, json)
Hash identifier: 0UJpUcjnrLaxPXOJDtUhaIMUg6LMh5pvlNK8jYIGBj0=
Subject key identifier: 78:03:57:46:DC:15:5A:F4:3A:5A:BB:64:E1:95:01:2D:88:A5:FF:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A25EE78D80180966963D97E42B9C202E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eANXRtwVWvQ6Wrtk4ZUBLYil_2Y.roa
Signing time: Thu 24 Aug 2023 05:05:00 +0000
ROA not before: Thu 24 Aug 2023 05:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:25ee:380f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:25:ee:78:d8:01:80:96:69:63:d9:7e:42:b9:c2:02:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 05:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78035746dc155af43a5abb64e195012d88a5ff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:7d:36:31:d3:cf:66:9c:1f:7b:7c:23:c6:
ad:38:31:19:87:d4:5d:50:fb:68:e0:3b:33:df:47:
8c:92:9c:b7:ed:2e:dd:b5:aa:04:14:bd:a9:46:c8:
af:c9:57:54:64:65:4e:46:7b:4f:25:5d:02:a8:9d:
5c:67:a2:a2:a8:95:8d:cd:76:2a:f0:70:f5:3b:75:
57:7d:91:12:01:34:30:76:56:77:08:69:af:1b:e5:
a4:86:b1:5f:85:bf:6f:3d:6a:50:40:db:e1:d8:4a:
78:31:df:a8:ec:69:a1:d6:b2:2a:7d:b6:38:53:ba:
98:20:33:df:21:d6:bb:0b:08:4d:29:a9:d0:89:a4:
64:e5:0b:23:44:eb:b8:3b:ad:1f:e9:60:13:7d:5a:
93:a1:72:fe:8e:12:99:7a:54:30:19:d1:87:cd:da:
64:f3:1e:6b:fb:70:3b:1e:5c:64:fd:64:8f:1b:09:
5c:b6:3f:28:7a:e5:55:10:8f:4d:56:49:a0:e1:f8:
35:52:1c:c9:bd:3e:1e:2d:f4:ab:a3:db:93:9a:33:
42:ae:51:e2:1a:5a:d0:58:95:79:ee:2e:03:47:fe:
22:0c:54:99:1c:cf:79:40:94:b8:ad:25:ff:68:b3:
06:8c:c5:67:a8:39:3d:a2:8e:f9:88:c3:0e:96:b1:
12:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:03:57:46:DC:15:5A:F4:3A:5A:BB:64:E1:95:01:2D:88:A5:FF:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eANXRtwVWvQ6Wrtk4ZUBLYil_2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:1d:ae:06:94:61:f4:d4:d1:75:6c:95:b4:4e:2f:13:2f:5f:
e1:c7:00:b4:dd:f2:6c:08:4c:c4:cc:6a:3c:01:9e:e4:e6:47:
d0:2d:3b:19:c8:8d:e1:76:b8:f7:8b:c1:5e:a3:23:cd:a2:b9:
6e:e7:f6:eb:86:eb:41:fe:36:16:4a:27:d3:6e:c2:53:d7:b3:
44:b5:67:d4:ce:6e:8a:9b:df:aa:6f:4d:2c:86:a1:8e:7f:ea:
70:03:1c:22:8a:74:9a:db:f7:8b:22:6f:a7:be:af:76:c3:25:
65:ff:82:63:a2:63:d9:d1:02:8c:a2:fa:ed:9a:86:51:ce:0a:
d9:17:bf:d4:44:2e:58:78:9e:0b:f3:4c:c1:0c:4f:a7:b0:a8:
23:fd:8e:f7:ab:db:f9:0d:83:b5:91:7c:c5:c0:76:0c:b4:fd:
ae:5c:7e:0a:04:91:86:10:7e:2e:8c:73:05:b1:87:5f:7d:64:
7b:ab:bc:20:db:ef:da:aa:2f:05:29:08:ed:8d:0a:3a:05:ab:
99:78:f4:0c:e9:82:a8:5d:31:f1:d6:7c:44:e8:18:df:00:84:
b4:74:6c:99:d3:c2:5c:6f:3c:33:87:54:69:82:f7:86:6f:c9:
eb:84:ab:af:a6:96:3d:83:ed:c0:fe:cc:31:70:52:19:67:25:
f4:61:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:54 2025 by rpki-client