Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNht_VO5exLrFywPKBu6vCLVrmk.roa
File: eNht_VO5exLrFywPKBu6vCLVrmk.roa (raw, json)
Hash identifier: OoK6eHLylrDrHeZTCbo3DNCpJ72ImNDYDQalow4KbBM=
Subject key identifier: 78:D8:6D:FD:53:B9:7B:12:EB:17:2C:0F:28:1B:BA:BC:22:D5:AE:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018547AB38A7E29392347E125E1C0757088E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNht_VO5exLrFywPKBu6vCLVrmk.roa
Signing time: Sun 25 Dec 2022 05:04:41 +0000
ROA not before: Sun 25 Dec 2022 05:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:47aa:f3f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:47:ab:38:a7:e2:93:92:34:7e:12:5e:1c:07:57:08:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 05:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78d86dfd53b97b12eb172c0f281bbabc22d5ae69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:77:d8:d9:b8:c9:80:12:75:68:aa:e6:f8:
f4:74:5c:9f:1f:c5:51:e3:68:05:22:c7:8d:7a:b6:
90:fd:e4:eb:fd:40:58:1c:5b:86:71:cb:5d:95:2d:
86:75:b5:eb:4e:39:67:4f:86:f2:0f:83:0e:52:5b:
07:c2:37:aa:28:9c:65:f2:05:3b:21:34:81:e8:ce:
b3:57:9b:bb:fe:53:8c:4e:b2:96:5c:57:e9:8e:a3:
c7:6a:00:46:f4:f3:61:1b:81:4a:90:13:e6:5d:fd:
c8:42:6c:8e:3c:0e:ee:a0:40:1b:fa:5a:59:5d:35:
f1:4c:63:5d:51:b5:92:62:32:a9:3e:8b:8a:4c:9f:
11:ab:c1:fe:71:4b:14:5c:71:9c:3b:1f:38:6e:d7:
2e:fe:d6:c2:dc:d9:23:43:97:90:11:75:2e:de:4b:
22:ca:05:a2:5a:19:04:c2:c2:74:cf:37:75:3f:05:
90:24:5e:a9:77:1c:d6:c5:11:a7:4b:f2:1b:f6:a3:
d1:19:f4:bb:6f:d6:6e:cb:1f:46:9f:49:32:e3:4f:
e2:c3:7c:74:3a:8e:06:2f:a2:dc:85:2f:a2:bc:37:
89:db:58:29:5b:99:ee:89:b7:e6:20:2b:7b:3e:80:
90:cb:13:50:e1:01:c8:56:d9:4b:d2:60:50:77:6f:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D8:6D:FD:53:B9:7B:12:EB:17:2C:0F:28:1B:BA:BC:22:D5:AE:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNht_VO5exLrFywPKBu6vCLVrmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:f6:57:9b:7f:03:2f:4b:ac:bd:99:c5:ad:26:e5:ad:b6:76:
13:51:9c:90:e3:57:9a:43:76:41:43:37:67:6b:ca:24:b6:a0:
f0:1c:02:a4:c1:53:6c:4c:26:f5:00:2b:30:a0:d2:81:ae:ca:
84:c6:43:72:33:1b:17:4e:48:fd:b3:19:0c:69:a2:ce:11:21:
48:21:73:79:11:15:f6:5a:78:29:bd:c9:92:ee:f4:00:77:31:
54:26:4e:2a:b7:3a:09:b4:cf:e6:05:8a:80:ff:12:07:f2:a2:
15:cd:27:57:5a:85:85:da:88:c9:2f:f8:14:44:84:82:44:54:
a4:66:84:0e:3a:43:0d:65:d3:89:31:4f:86:1d:b8:e6:67:b7:
10:23:c8:ed:2d:a2:ff:dc:1f:ec:da:df:04:c1:42:0f:a8:d0:
ed:df:c8:86:7b:1e:7e:5e:4c:21:5a:6c:a6:da:9a:f1:1d:43:
28:55:91:e1:b2:51:84:a2:ac:8d:51:8e:5a:a7:91:7b:df:ec:
82:cb:c6:f5:bc:aa:76:05:aa:a8:f2:ae:fa:5a:de:6a:f9:36:
87:23:71:35:a8:c9:cd:f2:63:11:6c:e0:49:0d:97:5a:92:dc:
6a:70:3b:0c:1d:0b:60:5f:0b:12:79:d9:01:6b:a3:41:3a:13:
8d:d0:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:30 2025 by rpki-client