Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNOwFLNUzOjJEyYpC12b_e8Wo0w.roa
File: eNOwFLNUzOjJEyYpC12b_e8Wo0w.roa (raw, json)
Hash identifier: XkhPiWmu4UUeMDFN7WDRCiFFURIpYRfgkagRIK1Vu0c=
Subject key identifier: 78:D3:B0:14:B3:54:CC:E8:C9:13:26:29:0B:5D:9B:FD:EF:16:A3:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D583638732DF5BE08551B5F52A58D87D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNOwFLNUzOjJEyYpC12b_e8Wo0w.roa
Signing time: Sat 03 Dec 2022 01:04:28 +0000
ROA not before: Sat 03 Dec 2022 01:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:d583:59a8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d5:83:63:87:32:df:5b:e0:85:51:b5:f5:2a:58:d8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 01:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78d3b014b354cce8c91326290b5d9bfdef16a34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:82:93:03:a9:7c:9c:89:ed:e4:58:8c:09:
be:06:84:90:ad:90:c8:c0:c2:78:d0:6d:ce:46:8e:
ff:ff:cb:f3:ac:49:a8:c4:79:b8:7c:d8:73:e2:d1:
27:ee:d7:8d:a8:4e:0c:80:ca:23:bc:80:b2:ae:9d:
d6:66:47:dc:e0:44:86:4f:83:71:dc:0e:f1:1a:cf:
21:64:1e:9e:13:90:d0:15:ae:df:47:7c:3f:30:3b:
57:40:10:6f:c5:5f:a5:ea:f2:aa:7d:2c:39:16:8b:
ef:e8:78:e3:cc:f0:92:3f:b0:c2:63:60:a2:f5:09:
f3:25:4a:2f:23:ff:74:d7:e2:40:0c:fd:b3:73:d0:
3e:74:03:b0:7b:2f:ce:d1:fd:3c:57:0d:42:6c:d6:
ef:84:9c:95:be:83:51:69:70:fc:3c:da:18:ea:3a:
78:6c:ca:77:99:82:ff:40:03:e6:ed:6f:17:40:02:
60:e5:80:f2:08:fe:2f:3d:88:76:cc:1e:d7:53:26:
11:0b:e8:e5:7a:25:0f:3d:d2:0f:17:75:38:df:d7:
3f:d2:b8:da:c2:f6:2f:c8:59:28:76:05:bc:dc:1a:
f3:27:76:30:a1:f6:95:2f:d5:9b:f5:80:91:d5:fc:
88:30:5f:78:be:37:90:f9:80:21:12:9f:cf:c4:66:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:B0:14:B3:54:CC:E8:C9:13:26:29:0B:5D:9B:FD:EF:16:A3:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNOwFLNUzOjJEyYpC12b_e8Wo0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:68:2e:d8:07:d9:c7:03:fc:ca:66:b5:7d:c1:13:d4:85:a0:
fd:36:44:da:76:38:c3:0f:c3:ba:d2:7f:69:c4:ca:13:74:6f:
91:c3:10:55:75:e6:93:82:ab:b2:1a:ab:59:e0:11:30:59:d9:
35:8a:f6:f0:a6:4f:0c:72:0f:d1:c0:a6:b1:be:fe:05:4a:47:
77:61:cb:fc:b3:f6:e5:3f:78:13:8c:32:04:ba:40:60:28:99:
7e:8a:74:98:a3:ef:e2:d8:a2:c6:af:ef:08:3a:21:df:b2:a6:
77:d8:31:46:61:06:a4:bd:6e:1a:64:fb:f3:e4:65:2e:b4:b6:
99:56:12:03:7a:de:62:1b:9b:12:ae:a1:fc:c7:df:c6:31:45:
77:22:56:1b:f5:d3:a0:44:8b:da:df:9f:e2:c9:37:3d:04:cc:
1a:69:b4:74:f9:d5:2d:c0:42:9b:1f:ed:58:6d:70:75:53:64:
cb:d4:b7:cd:ec:32:b4:ec:98:19:a7:40:96:de:cd:39:ca:21:
7e:4a:f4:20:b2:7c:e0:a3:07:01:fc:26:0c:81:a3:b3:82:0e:
36:d0:50:0d:9b:ef:ba:e7:f1:f8:33:07:75:f6:c9:f6:54:ca:
46:67:5a:78:22:05:76:e2:b5:da:42:bb:8e:7a:36:30:45:e7:
52:64:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:48 2025 by rpki-client