Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNfxkr2NoZnD9FTsOLP5Qed361E.roa
File: eNfxkr2NoZnD9FTsOLP5Qed361E.roa (raw, json)
Hash identifier: t6hZ/por6SpSWp3+CKs3wXrvls2IYi/t/y/M1bGv46M=
Subject key identifier: 78:D7:F1:92:BD:8D:A1:99:C3:F4:54:EC:38:B3:F9:41:E7:77:EB:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182DA4A28D24F14BF224D73042BC40902C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNfxkr2NoZnD9FTsOLP5Qed361E.roa
Signing time: Fri 26 Aug 2022 13:14:29 +0000
ROA not before: Fri 26 Aug 2022 13:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:da:4a:28:d2:4f:14:bf:22:4d:73:04:2b:c4:09:02:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 13:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78d7f192bd8da199c3f454ec38b3f941e777eb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:21:7c:c9:c8:51:24:af:3a:0e:13:51:30:
95:52:86:d3:ff:41:05:2d:c2:c8:0c:a8:7c:01:68:
15:0a:b0:96:87:c1:db:0d:dc:9c:30:2f:61:e9:4d:
b3:d0:9c:50:b9:39:2c:91:df:0c:b1:a9:fd:a1:a6:
73:00:7f:8e:24:dc:c5:ef:0b:24:cc:a6:af:b0:38:
81:a3:41:25:99:fa:2c:2e:9a:17:28:53:fb:40:a5:
c7:bb:b5:c9:41:38:b9:f0:0e:92:cd:a3:b2:b6:25:
6f:54:1b:8a:e3:21:41:45:c5:05:95:ba:fa:61:c1:
92:fc:fb:3b:f2:f1:fd:fb:14:50:2a:d9:2c:31:e9:
06:e5:23:4d:6c:5a:83:17:18:ec:c3:45:d5:eb:0d:
66:e2:d3:6a:49:b6:3f:98:87:b8:e2:86:a5:3c:0f:
f9:e3:67:24:82:e8:27:d3:02:69:b7:b7:d7:ce:db:
48:d3:02:52:23:72:9f:e1:8d:fc:c7:dc:11:3c:82:
32:da:64:ab:16:c7:d2:79:a5:00:91:fe:97:13:b8:
21:3a:4f:51:a7:7a:b2:16:ea:40:66:df:ea:e6:ea:
5a:db:6a:c5:d5:06:ed:ea:ba:18:9a:56:c2:6a:07:
23:5f:72:92:c3:38:ce:e2:2f:f4:01:11:3e:9b:c2:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D7:F1:92:BD:8D:A1:99:C3:F4:54:EC:38:B3:F9:41:E7:77:EB:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNfxkr2NoZnD9FTsOLP5Qed361E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:5c:77:59:22:ad:c1:5e:15:d4:65:b1:0f:2a:77:35:1b:1b:
92:ba:8b:8f:82:de:c3:c7:6c:37:2c:22:36:c2:95:12:ac:57:
82:08:68:86:85:7f:e9:8a:73:37:14:ad:d1:ac:86:c2:3c:1d:
83:ab:ba:cd:29:1b:ac:4d:4d:54:a8:ca:2f:2f:18:ff:48:2e:
68:98:45:f6:99:4d:c7:ed:97:cd:c2:33:67:9f:91:00:75:43:
6b:4f:e3:a8:b9:61:f8:80:b6:1b:9f:47:d5:60:12:19:f8:c5:
5f:ef:d6:25:ae:99:1f:37:d9:29:97:17:29:3f:a7:d3:0d:cb:
a9:3a:85:3c:a0:cd:de:44:42:2c:12:29:a6:b3:d3:11:da:32:
44:5d:23:7c:2a:5c:0c:ff:0b:de:d5:c2:32:ff:15:90:9a:15:
48:45:ba:a6:4e:18:5d:50:a8:c0:ce:cc:b6:89:94:71:6d:69:
cd:5f:3c:90:d4:34:09:a7:72:4c:70:64:8e:c2:3e:ba:0d:bc:
23:2d:0e:78:4d:c1:36:db:ba:c3:56:66:88:66:35:96:3f:b3:
fa:5d:be:0a:d5:f3:75:b6:12:3a:30:18:44:f8:41:cd:9b:75:
e2:bd:e3:fb:83:16:f2:52:8a:9e:67:41:c0:68:a1:28:09:28:
19:b5:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:24:45 2025 by rpki-client