Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ePIj21P5j3NWuAoIQ3Lt2c52uSc.roa
File: ePIj21P5j3NWuAoIQ3Lt2c52uSc.roa (raw, json)
Hash identifier: NA348V1PZh2HgC718oCVG8mwTlge58BJoDJpEUlmOxY=
Subject key identifier: 78:F2:23:DB:53:F9:8F:73:56:B8:0A:08:43:72:ED:D9:CE:76:B9:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01824F74608868B0000D4525B2FF0F31D5FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ePIj21P5j3NWuAoIQ3Lt2c52uSc.roa
Signing time: Sat 30 Jul 2022 14:13:23 +0000
ROA not before: Sat 30 Jul 2022 14:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4f:74:60:88:68:b0:00:0d:45:25:b2:ff:0f:31:d5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 14:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78f223db53f98f7356b80a084372edd9ce76b927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:a4:0f:3d:f8:28:bd:e5:44:64:bb:0b:20:
fd:a3:2e:eb:a5:07:5c:8e:04:07:1e:52:f9:ab:97:
98:a0:57:82:30:4f:63:0e:eb:4c:e7:0a:c4:e8:83:
d9:b5:d7:e9:01:97:d0:ff:9b:58:77:00:f0:9e:ad:
2d:22:72:6d:a2:d3:5c:e9:f6:f8:bb:aa:83:4a:3a:
4e:e1:15:ed:ad:60:03:10:6d:6d:ee:cd:d8:9b:fc:
10:c5:a3:f4:bf:3f:c8:92:4d:9f:34:37:68:f6:92:
a6:34:e0:c9:d7:5e:16:99:04:fa:8b:04:19:56:02:
80:44:e9:a1:39:da:cc:d3:5b:21:eb:49:f5:6a:40:
b3:e3:a1:d2:b4:b4:fe:b0:8f:3c:f4:9d:55:fc:91:
f8:39:7b:93:34:1c:2b:79:9b:3b:ab:85:ef:8c:49:
24:46:ff:5e:25:5e:9a:bd:14:1d:79:f7:36:03:df:
f0:a1:fd:c1:94:02:23:f5:12:c5:46:d5:50:e7:35:
48:1e:17:28:b8:f2:05:a7:73:31:d1:ff:ee:99:bf:
1a:aa:a7:95:aa:99:4b:3b:7c:56:58:76:de:72:57:
ec:89:9d:fc:ec:60:34:82:07:50:eb:d5:bc:7e:78:
69:76:08:45:1e:cb:03:0f:5a:db:7b:a9:49:db:ad:
5d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:23:DB:53:F9:8F:73:56:B8:0A:08:43:72:ED:D9:CE:76:B9:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ePIj21P5j3NWuAoIQ3Lt2c52uSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:95:2d:b8:34:d1:68:41:49:b0:7a:78:90:b8:9e:71:89:1c:
65:8b:c5:90:56:5a:24:ce:d1:d7:0e:1f:16:1d:68:e6:fb:c4:
1b:14:b9:b9:98:74:09:fc:3a:29:88:48:94:c7:41:8b:69:50:
d1:dc:aa:b9:58:42:41:04:9d:75:db:63:ec:d0:00:e8:aa:a1:
e6:48:54:92:77:9b:72:9e:0a:0b:2e:0d:1e:7f:59:4a:46:25:
d4:c1:89:b8:3e:78:5a:2f:47:bd:e4:7e:ed:64:5b:f0:75:81:
c5:60:e6:84:4b:f5:81:75:72:33:c6:7b:aa:8d:4c:85:c8:b9:
c2:e6:92:09:6c:51:09:ed:17:e8:9d:4d:34:47:d9:91:e2:fe:
ec:c1:c3:b1:9a:76:ce:4d:0c:1c:b3:c8:00:97:b4:c1:d9:22:
a2:45:83:55:5b:e1:3f:e3:dd:c0:6f:19:51:5c:98:9b:96:26:
d1:d7:80:c9:4a:ac:d8:1a:91:41:e8:b6:6c:f0:b2:15:85:8c:
1c:b7:36:d7:15:81:16:78:35:fc:56:43:2d:c3:04:9d:29:5c:
cb:6a:d2:37:ef:a3:75:d0:72:a9:ec:46:a1:11:ff:14:a7:0d:
93:56:f7:83:89:d9:4c:df:42:50:cc:fe:cc:72:f4:67:58:5c:
3c:ad:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:57 2025 by rpki-client