Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ePKSlP08WhsKsHrmUc9Z2eTStzI.roa
File: ePKSlP08WhsKsHrmUc9Z2eTStzI.roa (raw, json)
Hash identifier: CAq/X0BM5rJkLW+rl1FxeCnh9sBSXJ+ntr0nnvczW2c=
Subject key identifier: 78:F2:92:94:FD:3C:5A:1B:0A:B0:7A:E6:51:CF:59:D9:E4:D2:B7:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018272031EDC09051FB4DE0E4F3980A75042
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ePKSlP08WhsKsHrmUc9Z2eTStzI.roa
Signing time: Sat 06 Aug 2022 07:16:23 +0000
ROA not before: Sat 06 Aug 2022 07:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:72:03:1e:dc:09:05:1f:b4:de:0e:4f:39:80:a7:50:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 07:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78f29294fd3c5a1b0ab07ae651cf59d9e4d2b732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:42:37:e1:31:14:e5:65:bc:e8:69:9c:98:bd:
66:30:9c:eb:40:69:86:9b:77:9c:4e:66:69:92:18:
64:dc:bd:1e:be:0a:9b:60:ad:61:11:33:2b:a5:78:
c3:37:31:e1:a1:09:e6:ca:17:0f:8f:16:c9:9d:47:
42:fb:cf:b8:8b:02:d8:db:30:b0:58:5f:bf:db:64:
8d:87:2c:5a:fb:77:d2:5f:fe:57:5e:9f:31:65:77:
53:e5:50:41:eb:41:02:03:86:8f:48:bb:25:87:ff:
e2:0b:cc:b8:b2:79:95:fc:9a:22:20:db:13:02:d6:
3c:8f:63:2e:fc:06:a6:57:78:7d:62:c9:f3:83:b9:
54:43:c3:30:2d:5e:5d:64:17:5e:12:60:7c:0b:74:
a7:3d:85:94:2a:b8:10:77:20:2c:6d:49:18:1b:09:
a4:e3:68:4c:8b:1d:91:f1:26:29:3d:ff:01:27:09:
b4:81:03:fa:13:c9:13:8b:6d:16:69:01:ac:69:02:
0c:21:7f:d0:2c:e1:ba:a9:4d:72:95:8b:ac:43:0a:
d4:bf:ef:0a:fa:2d:5e:9e:f6:e7:ee:66:c4:8a:8e:
f5:6e:6d:3c:37:a2:05:75:fa:93:71:ba:91:1e:8a:
74:0f:64:2d:2c:5b:3d:77:d3:5c:b8:06:7c:1d:e1:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:92:94:FD:3C:5A:1B:0A:B0:7A:E6:51:CF:59:D9:E4:D2:B7:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ePKSlP08WhsKsHrmUc9Z2eTStzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:1b:55:d8:d0:34:67:c5:84:71:b0:90:1c:60:3a:f4:f8:5a:
17:16:42:42:02:13:e4:03:e7:c3:b5:bc:60:69:5d:81:48:11:
d1:f4:6c:b0:4b:1f:cd:b7:0e:af:71:1f:1f:2a:3e:5d:0c:85:
59:1c:63:ef:e6:40:2d:08:3e:3a:2f:22:d4:74:14:c0:8a:26:
ee:05:f8:b2:be:dc:ca:7e:0f:13:23:d8:07:09:22:04:d2:74:
45:46:0b:87:9e:26:05:08:d9:46:fc:fb:e0:56:ee:7a:d1:0a:
56:80:ba:c0:12:56:61:35:ef:5f:bf:89:4a:72:1d:15:76:e0:
e5:83:06:43:f8:93:fa:a5:17:04:45:b5:8d:a4:f7:bd:5c:08:
cd:e6:f7:b7:fa:e9:96:0a:a5:be:09:c0:10:56:b9:93:b6:09:
7d:dc:07:8f:e5:9a:c4:08:87:33:1e:3a:c5:94:db:ad:bc:d9:
cc:f6:e8:ad:8f:92:7c:7b:33:6a:ec:9e:e2:13:63:2d:51:bf:
1e:33:81:26:61:85:7b:21:f2:87:65:a7:d4:e3:b3:c5:94:e2:
76:5e:5d:9c:47:9f:41:6e:9a:9d:6c:f3:fc:b5:2c:8e:e5:be:
fd:2b:6c:08:06:51:89:4d:57:9f:12:e8:25:87:39:97:fe:2a:
b4:67:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:43:11 2025 by rpki-client