Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eFmBVPk3uxQWhyywnCOqyl7tAzU.roa
File: eFmBVPk3uxQWhyywnCOqyl7tAzU.roa (raw, json)
Hash identifier: MM0pqCRk2at68tlNvObMimN2ZH1G7qlF4b6Wnzhau2M=
Subject key identifier: 78:59:81:54:F9:37:BB:14:16:87:2C:B0:9C:23:AA:CA:5E:ED:03:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887DF1652A8400142FF87797BF1FD00678
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eFmBVPk3uxQWhyywnCOqyl7tAzU.roa
Signing time: Fri 02 Jun 2023 21:09:12 +0000
ROA not before: Fri 02 Jun 2023 21:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:f1:65:2a:84:00:14:2f:f8:77:97:bf:1f:d0:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 21:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78598154f937bb1416872cb09c23aaca5eed0335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:ee:68:99:62:e1:16:96:45:30:70:82:9b:
04:63:85:9e:33:89:80:b5:dd:79:c6:ee:e4:99:6d:
5d:59:39:cd:4d:59:92:ad:ff:3a:b0:05:6f:fb:93:
a6:4d:56:5c:ea:60:89:fb:ab:b6:1a:ea:a3:05:c1:
b4:5f:38:7b:c1:c9:9e:6d:fe:7c:b0:d6:59:85:4c:
fb:41:5a:b5:78:f5:fd:79:a6:96:a3:86:c5:69:b5:
cf:8d:28:7b:ec:8a:85:4e:10:f9:b3:63:ad:1d:7d:
dc:a2:1d:02:44:b4:86:40:b4:e3:fc:32:7e:4d:90:
ef:46:84:a4:d8:20:f9:1b:19:d4:2d:88:49:ec:c1:
2f:5e:b3:45:b8:4f:44:96:ef:09:64:ad:24:80:8e:
15:2a:18:b7:f2:c0:fe:6b:b9:98:0e:2f:af:14:02:
b8:ff:48:24:02:03:06:35:22:08:d2:75:68:05:f7:
c9:62:9c:bb:49:80:5a:9f:9b:7f:a1:62:1e:48:ac:
24:80:b6:5a:cc:bc:b6:0e:8e:3f:e8:f7:fa:09:d7:
34:9f:70:e8:6a:90:05:d0:5e:92:e8:11:18:a9:02:
98:5a:7e:59:9b:30:02:26:39:b2:b2:17:38:89:a1:
36:d9:00:41:42:6f:4d:7f:be:b3:6f:e1:1c:f3:ee:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:59:81:54:F9:37:BB:14:16:87:2C:B0:9C:23:AA:CA:5E:ED:03:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eFmBVPk3uxQWhyywnCOqyl7tAzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:08:2c:28:dc:70:9f:24:ec:5a:2d:81:02:84:dc:33:50:e7:
01:32:7c:7c:1f:4a:88:b0:ab:76:00:a9:6e:c5:08:91:58:ff:
25:b6:f1:be:b3:b8:de:d2:dd:c8:98:8d:0c:49:fb:85:30:cc:
40:fd:08:67:1b:61:e2:41:cc:ba:3b:bc:03:02:ee:b6:8c:a3:
da:32:f1:f3:4e:26:6a:ef:67:82:e7:4f:33:e5:0b:39:ff:01:
d3:cd:25:70:b8:20:f3:dd:1b:38:b6:a6:35:8e:e0:11:3a:1a:
18:19:26:a0:82:a6:b6:9e:68:66:25:77:4d:00:51:e7:3e:ee:
96:65:8c:32:d4:c5:7e:c8:95:a8:df:ec:91:4d:d3:53:ca:b1:
f0:9c:db:ed:62:b2:70:0a:9c:3a:e0:3e:7b:41:fb:87:9c:ac:
cc:c5:0d:07:8e:fe:f9:93:b9:1b:79:28:f2:e9:05:5f:96:47:
e9:f8:f0:f3:e0:7a:d2:b1:05:da:23:79:cd:87:87:b1:93:d3:
cf:22:6e:cf:47:5b:82:d5:cc:b0:f8:e3:71:7d:3d:51:63:96:
08:14:25:8c:5f:57:e3:34:ba:60:c2:10:30:de:5f:86:e5:f2:
05:74:05:3a:3b:6c:d4:be:cd:16:4a:e6:5f:de:e2:69:33:e7:
ee:16:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:25:12 2025 by rpki-client