Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eEjeHa1522yeHYwXaswtiDzrMRE.roa
File: eEjeHa1522yeHYwXaswtiDzrMRE.roa (raw, json)
Hash identifier: o7Y+KJ2B19GEZGBrMDLHF+d4drZ/8dsaZ7bibDnaHrY=
Subject key identifier: 78:48:DE:1D:AD:79:DB:6C:9E:1D:8C:17:6A:CC:2D:88:3C:EB:31:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829754EE6D2AF72C8890A585DE32B7657D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eEjeHa1522yeHYwXaswtiDzrMRE.roa
Signing time: Sat 13 Aug 2022 13:11:41 +0000
ROA not before: Sat 13 Aug 2022 13:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:97:54:ee:6d:2a:f7:2c:88:90:a5:85:de:32:b7:65:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 13:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7848de1dad79db6c9e1d8c176acc2d883ceb3111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:83:93:7a:a5:33:bd:d0:8e:44:8d:4a:21:16:
e2:58:c7:c4:4f:ed:b5:4c:a8:b2:49:aa:bb:19:f7:
fc:99:27:c1:1c:11:6e:d3:1c:d5:13:56:2f:e2:e9:
9d:27:29:f0:8f:a6:0e:98:17:f0:07:b4:40:ee:9c:
49:86:92:34:55:15:4c:eb:a1:93:1e:5a:a9:fc:af:
9a:3d:20:36:81:13:65:9e:65:84:c5:d1:1e:86:f1:
c5:aa:d7:c1:e4:45:92:a1:11:ec:1a:de:37:ef:d2:
91:23:ce:6c:5b:1d:52:e4:f9:f7:ad:0c:9e:2c:0e:
cc:9c:ee:0b:84:a9:23:e1:f4:1a:88:db:69:97:23:
be:fe:e3:85:c5:b6:25:36:4e:d8:7e:34:36:2f:67:
ea:d3:1a:b4:06:11:62:5f:f8:60:80:c3:52:a2:b3:
e4:e9:1c:71:2e:c9:ec:fb:09:c8:3c:e7:29:6d:84:
6d:2b:2b:51:85:5f:e4:9a:71:13:6e:39:25:1f:40:
5c:c7:aa:dc:f4:0e:26:49:c5:41:d3:66:9c:85:ad:
37:d2:8c:ab:d5:9a:a1:2f:a9:f1:0c:1c:7a:dd:60:
15:94:47:1a:23:3b:93:8d:a5:d8:1d:19:ba:7b:0e:
de:25:b6:69:3e:4e:0d:82:60:b7:d9:11:8c:69:db:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:48:DE:1D:AD:79:DB:6C:9E:1D:8C:17:6A:CC:2D:88:3C:EB:31:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eEjeHa1522yeHYwXaswtiDzrMRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:b6:9d:3c:da:3e:a0:91:c2:50:5b:44:a4:99:49:53:9e:fd:
3f:e2:ab:d3:cb:3b:d1:e3:e4:e1:72:a0:67:95:c0:83:8f:a6:
7a:57:47:8d:40:9d:9b:42:03:3c:d7:31:1d:34:a0:7f:1a:0f:
2c:3d:35:5a:fa:d7:4f:d1:df:b0:e3:7c:05:df:dc:2b:27:fe:
90:f8:3e:30:66:4f:aa:89:e1:af:4f:67:11:8a:94:e6:5a:da:
0d:7d:1d:a0:4d:7d:5e:ef:a3:26:5f:e3:4c:c8:63:eb:e2:ae:
34:79:ac:21:9e:d5:5f:83:d0:2a:88:07:d1:75:09:ea:f2:91:
fc:b6:78:e6:78:36:af:86:88:dc:05:47:28:ea:4e:19:34:8c:
5b:37:73:c4:05:2d:d9:2c:86:15:dc:fa:1f:31:0a:8a:c6:5c:
a3:10:b0:4b:8e:9f:5b:16:48:38:54:00:a0:78:34:60:c9:34:
4b:4a:8c:1a:6d:cb:38:a6:f0:b3:f3:24:f0:76:6f:08:7f:22:
26:d8:ec:ca:6b:91:3d:4f:4e:0c:98:eb:7e:71:2f:fc:a9:45:
c3:eb:e9:6c:19:c5:4e:c6:5d:ac:3e:eb:23:32:51:33:2b:5e:
d0:ae:a7:ab:ac:5f:b9:90:7f:93:20:1b:44:16:c1:b9:e4:85:
8b:e3:6a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:25:47 2025 by rpki-client