Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eLmwcsIzgBTVcNV9vTp5eXc04J0.roa
File: eLmwcsIzgBTVcNV9vTp5eXc04J0.roa (raw, json)
Hash identifier: iWtKVb8YcX41zXJhrqf6E1iC9vCewplZeA9ldHqREFQ=
Subject key identifier: 78:B9:B0:72:C2:33:80:14:D5:70:D5:7D:BD:3A:79:79:77:34:E0:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E6A9FBE08FFA101F9CFB309FE7E3CD26
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eLmwcsIzgBTVcNV9vTp5eXc04J0.roa
Signing time: Thu 04 May 2023 12:08:32 +0000
ROA not before: Thu 04 May 2023 12:08:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:a9:fb:e0:8f:fa:10:1f:9c:fb:30:9f:e7:e3:cd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 12:08:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78b9b072c2338014d570d57dbd3a79797734e09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ff:22:5f:ff:9c:7a:e4:3e:b3:dd:00:0c:ae:
60:a5:d3:13:6c:e9:be:9b:ee:56:de:2a:36:92:d0:
7d:5a:ce:e7:bb:47:3f:63:4f:75:15:88:89:a9:f8:
90:a8:a7:5b:4b:af:06:b5:9b:14:e0:dc:91:0e:fd:
70:4c:d9:cb:7b:02:ed:68:68:bd:3c:30:6a:0f:a1:
40:d7:31:00:8b:41:59:79:ee:f7:6e:08:75:19:05:
c9:6f:6a:b8:bc:d2:9c:bd:0f:ed:04:31:27:63:88:
40:f3:dd:58:ab:68:e4:31:ac:09:f5:dc:db:94:48:
35:39:71:20:3d:01:df:2e:53:75:93:24:71:0d:30:
d2:3c:5b:77:9f:df:f5:e8:29:56:89:fe:e5:4f:08:
eb:f7:80:a1:58:ad:39:8f:1a:c0:ef:dc:c4:9d:5c:
5d:b2:65:ba:ef:0f:c8:b7:82:92:95:ea:77:3e:34:
af:b2:9a:e6:ac:d8:e7:57:dd:b3:ab:f4:a6:9d:35:
21:8c:98:8e:51:83:80:d7:f5:46:a6:a8:a3:74:1c:
82:cc:fa:13:e1:30:a5:80:40:00:bd:a3:26:e2:0a:
9f:53:72:71:3a:31:8f:be:ab:c7:86:83:fd:22:44:
5b:80:49:7b:ee:db:57:55:90:f8:e4:03:83:4f:7d:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B9:B0:72:C2:33:80:14:D5:70:D5:7D:BD:3A:79:79:77:34:E0:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eLmwcsIzgBTVcNV9vTp5eXc04J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:52:13:f8:b1:45:c1:a7:30:0b:da:66:9d:54:ed:22:65:62:
a9:04:17:16:84:7b:dd:e2:fd:d2:10:5f:2e:aa:d7:9a:44:3b:
bb:a8:1e:10:77:c0:91:08:f4:80:eb:6d:5f:9b:a0:30:47:ac:
47:db:49:dd:5e:47:b3:7b:90:4a:4f:19:56:c9:14:0f:49:2e:
74:9b:55:69:ba:2b:a7:70:8d:b4:5c:50:b5:e2:44:a8:d3:4f:
11:62:53:65:02:dc:f9:87:1c:75:95:ba:50:24:f2:10:a3:34:
df:61:7e:7d:16:7b:c0:a6:b4:fa:18:16:ce:b2:7d:88:33:fc:
8f:be:6e:40:7f:13:88:59:78:6c:19:fe:64:2f:97:0f:8b:ec:
91:57:12:3e:a1:ba:b9:87:fb:6e:95:3b:a6:00:46:f9:82:02:
35:93:0d:91:a1:49:d2:65:8c:72:39:ef:39:83:f0:75:2b:58:
de:49:b3:8d:5b:a7:92:fc:f8:62:14:c6:1c:ae:af:1d:91:3c:
ab:8c:ca:16:4d:06:42:2c:f6:c0:c5:98:25:1e:f4:8a:41:b9:
61:e6:9e:41:f4:69:9a:53:d7:5b:c7:0a:c4:47:79:dc:97:09:
1e:72:31:b3:8e:57:69:3d:2b:0f:04:9d:80:25:dd:99:43:0f:
78:2f:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:10 2025 by rpki-client