Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNtb9G9FFSo4EVFZAbcg2u54rBg.roa
File: eNtb9G9FFSo4EVFZAbcg2u54rBg.roa (raw, json)
Hash identifier: EIhMkWUhtswmjHrFpAOQi3oogH1UL4xVTu9RqQPgXLQ=
Subject key identifier: 78:DB:5B:F4:6F:45:15:2A:38:11:51:59:01:B7:20:DA:EE:78:AC:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183EEB0DD878120B88860830148AFECB33B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNtb9G9FFSo4EVFZAbcg2u54rBg.roa
Signing time: Wed 19 Oct 2022 05:21:51 +0000
ROA not before: Wed 19 Oct 2022 05:21:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ee:b0:dd:87:81:20:b8:88:60:83:01:48:af:ec:b3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 19 05:21:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78db5bf46f45152a3811515901b720daee78ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:e0:86:b2:14:04:8a:ab:01:52:f7:7e:ad:
35:5d:2a:a3:e6:5d:24:c9:78:65:6c:66:ad:b0:be:
a7:75:b5:72:b3:25:21:bf:19:f5:46:79:92:b1:ae:
37:0a:d7:31:0c:f4:45:47:d0:a2:e3:5e:97:99:5c:
e6:cb:23:16:66:b3:e6:96:0f:82:7d:8a:c3:a8:74:
b3:7b:41:fb:25:9b:58:43:60:f3:63:87:fa:9a:51:
00:89:4c:fb:81:cf:ba:e2:a1:fe:95:0e:c7:77:91:
c7:ff:45:8e:eb:6c:d1:1c:e3:f1:7f:a5:c6:20:c4:
58:3d:57:c2:42:0d:a4:a3:40:8d:ab:b8:5e:9a:09:
a1:ac:65:fb:54:4f:68:0a:2f:f2:70:24:c0:3f:54:
04:d0:42:48:04:46:4a:20:6c:d8:ff:c8:67:3a:75:
09:95:f1:4b:e0:b5:70:b2:7e:8d:a3:86:62:16:fc:
3a:19:1f:1b:25:5f:d2:48:01:06:ec:b9:3a:4d:68:
95:e0:72:fc:bb:23:6b:f5:3b:fc:8e:59:d9:b6:48:
ef:ca:e4:3f:cf:b4:10:9b:47:c1:0f:0a:db:16:79:
86:4d:17:a2:ce:12:18:17:31:66:ba:5b:4c:3b:95:
1c:ca:db:82:fa:7a:a8:da:44:cc:00:28:07:75:12:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:5B:F4:6F:45:15:2A:38:11:51:59:01:B7:20:DA:EE:78:AC:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNtb9G9FFSo4EVFZAbcg2u54rBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:b3:f5:d6:d4:a5:ca:db:0f:1e:3c:ad:fa:1e:c5:ee:7a:ee:
9b:78:9e:ee:51:2d:d1:81:3d:0a:df:ed:c3:19:bf:f2:90:b3:
0c:1d:bd:71:12:b1:7e:fc:30:e8:aa:81:f8:fc:ab:e7:1c:3f:
42:4f:20:4c:14:57:49:7e:98:48:09:4c:3c:7e:48:07:4b:a5:
a6:05:6d:86:14:a9:51:d2:af:26:a5:5d:80:ac:96:ed:4c:8e:
8b:7b:62:b7:9a:27:dd:52:79:51:0e:ef:53:f5:58:f7:56:4d:
56:d1:35:2c:c5:45:f7:4a:63:a9:7c:1a:c9:29:32:80:3e:9d:
81:b0:21:5d:19:b8:5b:30:cf:ab:9d:85:41:ed:d9:7d:8f:a2:
d8:5a:aa:a7:fb:38:7b:9d:38:20:9e:55:dc:22:97:3b:cc:57:
09:7a:63:81:3a:39:36:10:e7:1b:cb:79:1a:46:b3:2e:4c:94:
6d:3d:e6:e7:5c:40:07:8d:49:b4:b1:b7:a2:42:93:4f:5a:e8:
0e:bd:c7:22:68:d2:c7:10:53:5a:46:21:9f:9f:92:3d:c6:40:
d1:7b:96:78:05:b6:9f:de:d5:5a:f8:e8:1c:b7:a3:be:eb:44:
7d:b8:bf:10:49:71:b2:6b:b5:93:de:17:b3:03:8c:50:43:40:
5e:91:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:54 2025 by rpki-client