Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eEr8FLyVHfzKQEdVKDT8OaU_xQI.roa
File: eEr8FLyVHfzKQEdVKDT8OaU_xQI.roa (raw, json)
Hash identifier: z2dgkgc4jgi1LO9u1PTXHY+osRG/ITqM6ptvXYXRPOs=
Subject key identifier: 78:4A:FC:14:BC:95:1D:FC:CA:40:47:55:28:34:FC:39:A5:3F:C5:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185586D6317D76A785D3DF3E150BD695AC2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eEr8FLyVHfzKQEdVKDT8OaU_xQI.roa
Signing time: Wed 28 Dec 2022 11:10:41 +0000
ROA not before: Wed 28 Dec 2022 11:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:6d:63:17:d7:6a:78:5d:3d:f3:e1:50:bd:69:5a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 11:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=784afc14bc951dfcca4047552834fc39a53fc502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:51:82:dc:c9:a1:ed:95:f5:35:4f:40:1a:
64:08:ec:1f:bc:b5:23:15:79:74:2d:c9:3e:33:5f:
f6:69:06:e1:ad:3f:e8:29:ec:47:81:fc:f2:94:13:
37:c7:54:4a:95:ba:8e:33:77:98:26:00:cc:2f:a2:
d8:a0:9a:c6:88:86:c4:ae:50:2a:19:9c:96:22:ab:
f5:57:4d:d3:bc:b5:ad:08:80:2c:c7:62:df:0c:cd:
60:68:ed:7b:03:20:21:ff:3b:46:f2:ff:d0:fc:30:
92:de:c6:63:b9:e5:57:e5:dc:58:bc:a6:04:42:89:
91:74:8b:e5:9b:61:df:a8:25:b4:1a:f7:6c:41:b8:
16:e4:60:1c:b1:6d:bc:c5:bf:24:db:ae:f5:aa:33:
46:8c:e4:58:97:76:6d:11:fd:ff:85:bf:a4:b1:8c:
ba:5f:34:ab:f7:d6:de:8b:e9:3f:5a:ef:6c:c0:40:
90:f8:1c:51:a7:f9:f9:b5:7b:b6:01:44:47:27:13:
52:f0:6a:25:cd:cd:c8:41:98:57:c3:11:f0:fd:8f:
4c:31:11:3b:a7:4f:3f:36:e9:01:81:71:d6:34:6c:
45:fb:3e:41:21:fa:39:97:82:0b:d8:ed:b7:9f:ec:
6d:c1:a5:7c:b6:6a:29:5d:04:08:54:86:29:f0:1e:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4A:FC:14:BC:95:1D:FC:CA:40:47:55:28:34:FC:39:A5:3F:C5:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eEr8FLyVHfzKQEdVKDT8OaU_xQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:a7:06:5f:ba:63:a6:08:35:b2:29:7f:cb:83:37:a3:69:43:
10:10:04:c8:90:31:5f:16:59:84:fd:16:06:2c:3e:e3:fc:66:
82:0a:95:bf:a7:a6:b0:34:ee:1d:04:ca:fa:6a:10:ab:da:83:
d4:9c:01:bc:28:e0:57:94:96:4c:48:56:ae:49:5b:00:60:85:
15:fc:ad:69:fe:be:32:b3:21:c8:a9:7b:70:f5:90:96:09:3a:
9a:a5:81:f5:d3:8f:4b:e6:a0:02:e8:f1:81:78:d8:78:7f:d4:
f9:f7:41:f1:c7:a1:56:c6:31:e4:97:9e:b2:b5:79:31:63:56:
45:ed:01:94:d2:e1:67:7d:4a:fa:cf:68:16:99:f5:28:79:11:
1e:2b:82:dd:ba:3d:99:66:a5:94:20:4b:d7:4d:3d:cf:4a:b4:
bc:a2:d3:2c:b7:d2:8e:34:fc:c4:18:e8:94:46:f2:c2:e4:93:
d2:60:d8:d7:96:b3:3d:28:22:ab:92:2a:4c:a4:a8:d2:56:ce:
41:06:38:61:43:61:e0:43:7f:ea:d6:31:15:58:1b:ab:fc:92:
93:a0:03:d5:42:c6:98:9d:98:f7:57:64:65:e2:49:85:86:6f:
b7:d5:bf:69:6f:24:23:38:43:b9:a7:53:20:82:62:f5:e3:ad:
21:19:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:45:30 2025 by rpki-client