Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eFUAHnZWUsm3lASgIhw1zvFQVPw.roa
File: eFUAHnZWUsm3lASgIhw1zvFQVPw.roa (raw, json)
Hash identifier: jKkL8z40H9rXOpsJ6A5LX1eQNYAcAX7AuocJWZPcmxA=
Subject key identifier: 78:55:00:1E:76:56:52:C9:B7:94:04:A0:22:1C:35:CE:F1:50:54:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185492F68DB31833AF916DE936D077A0D36
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eFUAHnZWUsm3lASgIhw1zvFQVPw.roa
Signing time: Sun 25 Dec 2022 12:08:41 +0000
ROA not before: Sun 25 Dec 2022 12:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:49:2f:68:db:31:83:3a:f9:16:de:93:6d:07:7a:0d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 12:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7855001e765652c9b79404a0221c35cef15054fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:ad:60:f4:5a:89:1e:60:67:33:94:4f:4d:
94:e9:fa:33:10:c4:b1:95:d4:e6:b2:7b:3e:8a:fa:
0c:c6:69:3e:fd:5e:98:9c:46:38:38:7e:c1:2b:9c:
cc:70:6b:10:bd:b3:08:0e:7a:23:31:81:97:70:8f:
66:b2:14:52:bf:3f:ce:6d:c0:01:84:0e:fd:83:1c:
06:51:17:91:3e:12:8f:ae:08:d7:e9:65:bc:ed:c6:
a2:30:90:eb:de:e6:2f:49:17:ae:1f:05:4e:95:66:
29:79:05:1a:0a:84:fe:a2:b9:f2:00:39:6b:56:09:
e0:f0:a3:5d:65:90:ce:bb:04:4c:33:b4:2c:82:8b:
a1:62:61:d9:3e:a6:62:6f:73:86:bd:d2:64:05:d8:
10:13:22:14:94:6a:d9:81:9a:46:0d:3c:b4:15:08:
66:1b:5b:50:6c:9e:4a:35:71:00:bb:1a:4d:18:a9:
af:97:c1:c4:94:68:41:7d:3e:a1:5b:e6:c4:15:bb:
9d:a9:59:96:3b:2f:6d:61:5a:6a:44:5e:17:90:91:
03:f2:68:37:17:c6:3e:06:b6:9d:49:a7:51:f3:0c:
a7:5c:dc:2e:5a:60:6d:c9:56:83:86:10:be:93:f1:
42:4e:cb:ef:db:14:d1:4d:be:9c:d9:01:58:e8:0c:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:55:00:1E:76:56:52:C9:B7:94:04:A0:22:1C:35:CE:F1:50:54:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eFUAHnZWUsm3lASgIhw1zvFQVPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:42:09:2f:4a:db:e3:f0:81:18:8e:9d:e7:70:a8:0e:6e:1c:
9c:d7:fb:ff:e5:a5:10:ae:4c:dc:57:da:37:da:58:04:51:64:
53:50:c9:66:9b:09:cf:c8:56:38:4d:32:7e:2e:e1:55:ce:a9:
79:68:e5:bd:ac:bd:3b:8a:f5:e9:91:5f:be:f9:16:2c:f3:25:
aa:2c:6d:9e:a3:cc:22:9d:c7:a3:52:ed:01:56:a1:2d:23:fc:
3c:32:72:3f:c5:b5:df:54:bb:54:13:96:de:45:a5:91:68:d7:
f0:a1:21:6f:71:67:0b:74:dd:7f:79:bf:18:68:e4:5a:83:fa:
81:d0:7c:66:4a:46:8d:64:72:21:dd:46:40:84:57:de:ea:72:
0f:6b:65:d8:f6:c1:0a:bb:44:96:74:d6:15:e8:69:35:a8:c7:
3d:9d:be:53:8e:37:b5:33:3f:c0:05:48:fe:27:be:bc:f5:42:
56:2a:c6:62:94:21:c3:95:36:59:71:37:e4:da:56:cc:60:6a:
a8:a9:08:c0:ea:0d:d0:18:7d:4d:f3:b6:57:ef:f2:2e:06:d0:
9c:ed:a8:36:83:89:09:a6:8a:f9:0f:c8:82:6b:88:7b:67:55:
51:3d:c9:aa:76:7c:99:de:a2:aa:fc:eb:28:d0:70:05:66:fa:
bd:2b:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:38:59 2025 by rpki-client