Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eKz6Fie-2y77AO2HWHk3E0XLDks.roa
File: eKz6Fie-2y77AO2HWHk3E0XLDks.roa (raw, json)
Hash identifier: OKIB8dCo9cOnuI4J0Aa65dfJAS3irMsMCBYfSvhQL3o=
Subject key identifier: 78:AC:FA:16:27:BE:DB:2E:FB:00:ED:87:58:79:37:13:45:CB:0E:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879F323A09C9BC3A0F3826999BE07E8464
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eKz6Fie-2y77AO2HWHk3E0XLDks.roa
Signing time: Thu 20 Apr 2023 15:04:41 +0000
ROA not before: Thu 20 Apr 2023 15:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:9f31:e714/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:32:3a:09:c9:bc:3a:0f:38:26:99:9b:e0:7e:84:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 15:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78acfa1627bedb2efb00ed875879371345cb0e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:ee:36:bb:30:8b:46:d8:32:d9:6b:7c:4f:
1c:91:79:b2:cf:0d:f2:7d:c4:bb:f6:92:9d:96:4e:
dc:29:8c:62:65:09:52:d7:5f:f6:0d:db:bf:32:a4:
89:2c:40:ac:78:e6:9c:a8:63:09:83:8b:5f:ba:58:
09:45:5b:03:14:85:1d:43:ae:c7:e3:c4:cb:01:95:
7a:01:8e:db:36:32:fb:de:d2:66:7f:ec:96:8f:72:
5b:f1:5d:ab:ac:0f:cc:25:6f:e4:56:1a:88:41:f8:
53:84:af:7e:56:a6:35:a9:0b:7d:bf:26:ca:7f:19:
ab:36:68:a7:e0:34:f3:20:b6:a4:be:82:06:e1:1c:
fc:0d:82:5d:7a:4b:cf:28:07:3b:3b:e3:d6:86:70:
06:18:eb:b5:77:71:50:3d:b2:d3:3f:51:e6:06:fa:
65:a4:6e:23:5f:81:e0:28:a9:d2:9f:31:07:54:76:
83:55:cc:bd:c0:88:8a:d1:cd:f7:4b:cf:29:16:26:
88:49:0c:33:a3:15:56:8b:ae:51:7e:67:6b:9e:3c:
7b:76:5b:cc:7e:8f:67:d2:66:85:1c:4a:e7:29:d9:
cb:4a:bc:ea:00:2e:87:54:53:d6:84:05:39:20:e4:
1e:b8:71:af:75:e5:59:5d:3b:0f:7e:b9:84:36:23:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AC:FA:16:27:BE:DB:2E:FB:00:ED:87:58:79:37:13:45:CB:0E:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eKz6Fie-2y77AO2HWHk3E0XLDks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:61:aa:34:9f:a2:a9:02:67:a0:00:b7:d9:a1:9d:05:79:d6:
d4:be:81:af:b9:10:76:1a:c0:2e:5f:6d:20:f2:c0:ee:d5:ca:
18:08:ea:be:7a:d8:bb:22:4a:0e:00:3e:af:2e:c2:f8:06:9d:
fe:31:f9:2e:9a:08:0b:8f:f4:cc:47:22:6c:fb:fa:18:aa:2a:
40:d4:df:d5:b4:9a:97:32:b4:05:01:f2:78:f4:bc:62:18:aa:
79:6f:c3:90:eb:52:35:99:1e:92:00:4b:c0:34:50:36:46:e0:
83:5f:86:a4:c4:a6:a7:38:b3:c6:e3:fe:2f:06:bd:94:1f:78:
dd:1e:1e:26:7f:d1:3d:b7:24:1d:f5:7f:92:d4:a0:7e:3b:dd:
aa:08:96:56:e1:44:22:65:4a:4e:66:5c:6e:3a:2a:7a:f2:f2:
73:57:7c:9f:3e:83:cf:19:ef:34:d9:02:82:7c:0f:fb:de:d1:
33:36:71:a1:26:11:29:36:bb:45:48:d3:54:14:38:5b:7e:9e:
aa:24:77:7c:d7:6f:0e:69:29:dc:0e:eb:b5:4c:57:2b:9d:7f:
73:77:f3:de:fd:20:b7:da:59:99:61:5c:f6:4c:43:0e:67:a2:
cf:53:68:6a:80:87:0d:a3:40:5d:b1:01:de:90:e1:2e:af:b1:
60:f3:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:16:41 2025 by rpki-client