Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eGt0Wzixmss6AY7ZYTzBU1rkbfY.roa
File: eGt0Wzixmss6AY7ZYTzBU1rkbfY.roa (raw, json)
Hash identifier: 1Oh5eURWYzNnWeqs2CLX9n7caoIbviEuRXX7oznVGnI=
Subject key identifier: 78:6B:74:5B:38:B1:9A:CB:3A:01:8E:D9:61:3C:C1:53:5A:E4:6D:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A954EDE94A6D278BBD8998AAB1AFB9E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eGt0Wzixmss6AY7ZYTzBU1rkbfY.roa
Signing time: Fri 03 Mar 2023 21:16:00 +0000
ROA not before: Fri 03 Mar 2023 21:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a9:54:ed:e9:4a:6d:27:8b:bd:89:98:aa:b1:af:b9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 21:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=786b745b38b19acb3a018ed9613cc1535ae46df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:15:fe:d7:66:2d:b8:9a:91:18:af:f6:7e:9c:
87:3f:d3:fa:9c:b7:ec:71:26:c3:07:8f:29:64:51:
29:78:1b:a2:e2:9d:cb:0b:ae:8a:91:59:59:23:1a:
1b:9c:24:ac:ef:6e:e4:5e:93:c2:19:4a:e6:cb:67:
e0:a6:93:45:8c:c9:e6:5b:f7:6f:41:7b:ba:2e:87:
09:d6:da:ce:4c:84:9f:fe:52:45:8a:39:62:28:bd:
50:b5:df:d6:ea:d2:44:e7:f7:a8:2a:7a:38:d5:31:
90:5f:d7:40:13:77:70:a5:a9:e9:f4:3f:99:5f:a6:
66:32:7f:1b:3c:5d:32:f1:81:1e:61:d9:5b:b1:33:
01:b5:40:ed:86:88:9c:9d:ac:84:22:5a:50:41:6d:
eb:b9:8c:33:a2:bc:f9:11:e8:3f:6b:a1:a4:fb:92:
4f:b8:2d:ee:1e:37:ab:69:d2:86:9c:2b:11:ff:92:
03:4c:b7:28:78:6e:ae:3f:2c:c0:18:37:e4:e9:7f:
98:0c:cf:b6:80:fb:bd:ed:58:47:de:a4:0b:78:d5:
96:3c:9a:7d:3d:c3:55:98:23:31:a0:46:f2:20:a4:
f5:c6:95:59:7d:a9:36:1a:0a:ab:ba:c9:4f:c5:3b:
ca:fd:72:33:f6:fa:89:d5:48:01:c4:9f:d0:1b:9c:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:74:5B:38:B1:9A:CB:3A:01:8E:D9:61:3C:C1:53:5A:E4:6D:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eGt0Wzixmss6AY7ZYTzBU1rkbfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:58:6b:b1:97:5b:f9:bb:13:32:4d:94:b9:31:cb:ec:93:8b:
eb:93:97:6b:3e:70:59:2a:01:dc:bd:e1:90:74:f9:ad:36:33:
45:6e:4e:b1:ec:44:ad:4a:57:69:d3:96:e3:65:d5:0f:a4:07:
44:44:93:27:1e:26:46:9b:63:4c:fe:11:41:bd:f2:e2:08:10:
3e:a1:ae:8c:fb:ad:72:ac:c5:a1:64:6e:d1:f7:f0:f3:14:ef:
f4:94:c5:c1:a3:24:a5:88:04:a1:e3:24:bc:d3:21:a2:25:69:
fd:a4:2e:3d:9c:78:62:d6:04:86:d0:35:2e:5b:35:cb:a5:5c:
eb:08:d1:d5:49:45:b3:79:21:7a:6e:24:29:e0:ce:dc:69:14:
f6:ea:a3:0d:c2:39:7b:71:e5:5e:6a:f0:e8:ba:d4:dd:18:67:
43:3b:66:4c:54:bd:5b:99:21:d4:3c:85:03:4c:9d:15:e8:17:
d3:66:51:5e:fc:36:7b:ff:6f:1b:ff:93:24:aa:02:85:b6:8a:
75:f3:0a:d9:13:21:31:c3:fb:73:d1:71:7f:94:a1:63:8a:36:
43:42:49:28:81:d5:9b:11:a5:4e:a4:65:9e:de:f3:8c:43:10:
b0:d6:5a:93:8b:17:1d:7f:af:04:70:5f:16:f2:c9:f2:77:9e:
a2:95:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:01:00 2025 by rpki-client