Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eF2KqQIKWSMEJSskdFWkc7TNBuk.roa
File: eF2KqQIKWSMEJSskdFWkc7TNBuk.roa (raw, json)
Hash identifier: hA1GfIqpceahT4P3Pg1OQHmhZRllfUwRit8Wk56zwiU=
Subject key identifier: 78:5D:8A:A9:02:0A:59:23:04:25:2B:24:74:55:A4:73:B4:CD:06:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188687D57C3AF53867949D2A55096441360
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eF2KqQIKWSMEJSskdFWkc7TNBuk.roa
Signing time: Mon 29 May 2023 17:10:24 +0000
ROA not before: Mon 29 May 2023 17:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:68:7d:57:c3:af:53:86:79:49:d2:a5:50:96:44:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 17:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=785d8aa9020a592304252b247455a473b4cd06e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:b8:14:ea:fc:7c:52:03:72:46:11:94:66:
6c:1f:78:a3:14:62:c7:87:eb:d7:48:74:24:fe:ea:
06:3b:bb:f4:66:5e:f9:d0:b9:42:bc:57:80:0a:2a:
a0:e7:49:c2:a6:5d:b3:72:68:6b:ef:08:68:97:17:
c7:78:de:40:3b:73:98:5e:12:8b:a6:fe:99:1e:ea:
d9:fb:51:3c:cf:4d:79:35:e6:f0:1e:9c:6f:83:e2:
b1:7c:a2:4d:23:14:c2:9a:82:d0:d7:e5:fd:c0:60:
e6:b6:54:a8:9d:f5:f6:47:1a:30:c2:8b:3c:d0:2a:
14:12:c5:b5:63:fd:61:c6:a9:f2:6a:2c:26:97:ce:
b0:9b:d6:54:08:aa:06:c0:16:9e:62:63:5a:a8:4c:
79:da:8e:15:a4:24:58:2c:1d:84:dd:66:4e:d8:e4:
70:be:bf:44:94:61:4b:27:cd:ae:4b:f1:61:bc:50:
3d:87:4b:39:fd:23:44:d5:22:a6:d7:6e:7d:f9:bc:
3f:83:c1:58:bf:77:e9:59:0e:cd:d0:50:ce:58:11:
ff:82:ec:b2:4c:92:f1:2a:da:c5:58:73:27:09:33:
40:6c:fd:12:f1:56:99:63:ec:c3:01:75:3b:10:fd:
8c:9c:94:47:fc:50:3e:98:f0:ae:86:b7:3f:d4:b8:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5D:8A:A9:02:0A:59:23:04:25:2B:24:74:55:A4:73:B4:CD:06:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eF2KqQIKWSMEJSskdFWkc7TNBuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:35:a5:f6:ed:3d:ed:58:61:87:6f:4f:03:cf:04:e3:f6:e3:
d5:80:f1:a7:dd:6b:1d:65:5f:1b:db:34:fa:88:2f:57:5f:c5:
fb:88:5e:b0:19:5f:c8:af:f4:ed:90:86:da:2d:e7:f9:ae:18:
ad:36:73:6d:93:94:8f:70:95:a2:49:49:2f:f3:e1:e7:5e:f8:
8d:c7:be:53:6a:9a:a5:1f:0a:92:b8:c4:46:84:10:0b:f6:a9:
4d:cb:75:93:1b:ba:9e:4f:00:e9:19:11:54:07:28:58:43:53:
66:5b:83:39:6d:a2:f2:60:e1:b4:51:33:9e:d3:85:f7:08:00:
d9:c3:f0:35:65:44:07:cc:a0:29:52:ea:24:68:ef:ac:9e:d7:
6a:88:79:d6:11:67:92:64:be:b4:b3:6c:6e:1f:01:8d:79:6a:
87:0c:05:d0:03:d0:b8:5d:a6:06:86:a8:08:ec:63:fa:aa:75:
8f:43:24:fe:6f:c5:21:f9:3d:4f:86:ad:94:24:49:b6:42:a6:
54:a5:28:ed:df:09:73:25:f5:2a:28:e3:d2:0b:98:ad:82:fa:
d4:1c:c2:0a:69:c9:13:d4:e0:70:54:be:26:b2:d5:32:74:c9:
25:74:d8:23:b9:3f:a0:ad:ae:f4:d8:0d:d7:1d:e3:1c:d5:b9:
4a:76:83:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:22 2025 by rpki-client