Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eHY04HVHuffq4Z9ljb7KXpzpHn8.roa
File: eHY04HVHuffq4Z9ljb7KXpzpHn8.roa (raw, json)
Hash identifier: 7om5c0VETMHXELY6OWZEMsz+z1zd6K8FiSpZ9yO4keg=
Subject key identifier: 78:76:34:E0:75:47:B9:F7:EA:E1:9F:65:8D:BE:CA:5E:9C:E9:1E:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185657EBA2ABE6258039659DEEE2CE0F6A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eHY04HVHuffq4Z9ljb7KXpzpHn8.roa
Signing time: Sat 31 Dec 2022 00:04:42 +0000
ROA not before: Sat 31 Dec 2022 00:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:657e:358c/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:65:7e:ba:2a:be:62:58:03:96:59:de:ee:2c:e0:f6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 00:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=787634e07547b9f7eae19f658dbeca5e9ce91e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:90:96:a7:5c:1d:9e:fb:39:35:e8:76:b8:
f1:e9:db:ad:5b:04:33:90:32:41:f6:93:db:37:a9:
da:69:de:8a:36:1a:e3:12:2d:d2:cc:d4:d3:4d:bf:
99:34:71:64:00:c9:e9:de:29:0e:ca:4a:64:62:b9:
50:62:13:2a:fb:00:b6:86:48:d4:2e:0b:3b:95:3a:
4b:d6:d4:98:3d:8d:8e:01:59:8e:1e:4b:87:77:e1:
ff:57:88:61:7c:9c:72:bf:c4:04:5d:f6:85:e9:9e:
b3:e4:bb:ad:01:56:13:2e:05:01:9b:32:dd:d6:76:
1a:9a:d8:40:a5:05:f3:62:1c:d0:aa:76:b5:53:93:
d1:6f:d1:e6:93:dc:ca:0b:d0:25:45:96:d9:02:f3:
0d:41:ae:54:de:38:99:e5:10:3a:b4:7f:81:86:83:
06:f3:41:94:94:ff:bf:79:e0:8e:a5:ad:63:cd:64:
88:8e:ba:e9:9d:0e:99:1a:9a:eb:97:94:eb:bf:c7:
20:bd:f9:5f:27:25:ab:d7:26:09:35:ce:30:a3:55:
99:a4:47:d3:31:79:c5:99:92:32:0b:97:52:05:19:
8a:b3:0a:e8:4a:d0:f2:13:bb:48:15:1f:a8:6c:ff:
dc:fb:dd:71:1c:78:af:d7:42:cd:26:6d:e4:50:21:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:34:E0:75:47:B9:F7:EA:E1:9F:65:8D:BE:CA:5E:9C:E9:1E:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eHY04HVHuffq4Z9ljb7KXpzpHn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:35:30:c6:fd:31:38:50:ef:81:70:24:bf:8a:f1:bd:92:a6:
34:4e:e7:42:84:ac:63:d7:4b:87:45:0d:a8:ae:18:ce:3b:d4:
7d:90:d7:a8:e2:6c:b4:fa:a3:0f:25:3f:86:a3:ac:21:13:8e:
c6:fa:46:15:a5:b7:87:fb:37:9a:15:5f:d5:64:19:c3:bf:14:
6f:12:eb:72:00:7f:bd:0c:b4:d7:48:d7:2a:68:2f:1e:44:66:
7a:8a:b3:e8:c3:cf:72:4a:46:6f:08:1c:40:78:47:e4:50:5e:
b8:e9:32:dc:e8:f7:b3:96:2e:4a:18:68:ca:97:34:a4:59:74:
e3:70:26:52:70:a8:be:3b:aa:89:46:30:78:eb:0d:c1:bd:ed:
7c:2a:c5:fb:62:37:1d:76:4b:b5:15:f6:a4:8e:6d:24:76:65:
94:9d:28:2e:fd:ed:d3:ca:0a:0b:26:b6:19:87:c6:61:90:5d:
ef:88:a5:2a:9b:67:9c:cb:75:b9:a7:b6:48:13:df:45:26:b9:
00:60:68:b2:a7:84:93:a7:4e:e6:26:15:26:77:26:50:71:98:
33:87:d5:59:f2:b5:c7:ef:c0:78:5d:85:68:02:8f:8c:85:5c:
a2:b8:f4:ba:87:75:47:fb:78:fe:37:0d:3d:dd:12:c9:19:5e:
da:be:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:44:28 2025 by rpki-client