Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRY_LG_Bx1F5ToxgAeahgWVBwVM.roa
File: eRY_LG_Bx1F5ToxgAeahgWVBwVM.roa (raw, json)
Hash identifier: xEWJWnNRnq6K9zKNXoOD8Vv9ISSzVBh62IVYIKbKMZ8=
Subject key identifier: 79:16:3F:2C:6F:C1:C7:51:79:4E:8C:60:01:E6:A1:81:65:41:C1:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018991E676F607BCD4350372A0BEAAD4BC3E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRY_LG_Bx1F5ToxgAeahgWVBwVM.roa
Signing time: Wed 26 Jul 2023 11:12:27 +0000
ROA not before: Wed 26 Jul 2023 11:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:e6:76:f6:07:bc:d4:35:03:72:a0:be:aa:d4:bc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 11:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79163f2c6fc1c751794e8c6001e6a1816541c153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:11:15:b2:b0:50:67:46:f3:89:cb:ad:ee:37:
14:2f:74:13:c6:07:e2:a6:48:3c:20:e9:a7:f7:8e:
76:ad:ca:f3:7b:08:cd:dc:ad:2f:fd:86:da:ea:86:
75:05:be:76:5d:fd:c2:25:71:e6:66:59:dd:4a:2d:
55:e4:bb:d3:d6:cf:ba:e3:c8:e7:a6:36:f6:35:29:
4c:f8:2e:d7:ed:0a:4a:02:df:91:fe:13:52:78:44:
c9:8e:7b:3b:da:81:d0:20:5a:07:05:e6:fe:65:73:
e4:7d:d2:2d:07:fe:a7:5f:7e:47:43:38:16:d3:d0:
c4:1c:04:1e:5b:37:40:c6:b3:08:ee:c0:bd:4f:fb:
44:27:47:5f:df:74:91:57:8e:14:9f:a4:ae:67:0e:
2a:2e:0a:6f:f0:ed:4f:c4:56:21:de:86:f5:d4:66:
82:ff:8d:62:e6:b9:3d:a3:04:67:45:48:75:cb:0c:
86:dc:33:bb:8d:7b:05:28:77:eb:2d:5a:cc:7a:47:
b4:4f:cb:1b:3b:41:db:ca:42:98:c7:6b:43:ba:30:
0f:43:71:a5:76:8a:bb:72:c2:82:fa:e3:c3:70:8d:
31:a5:be:8a:e6:82:8a:3f:41:10:a6:cb:a0:b3:b6:
d7:36:2e:3e:86:b8:3f:48:4b:4b:4e:5f:4c:90:ca:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:16:3F:2C:6F:C1:C7:51:79:4E:8C:60:01:E6:A1:81:65:41:C1:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRY_LG_Bx1F5ToxgAeahgWVBwVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:e2:e0:51:4b:76:36:54:7c:96:4f:4f:bb:13:5b:3b:9f:0d:
4c:33:fe:2f:d4:a2:2d:9f:9c:de:f2:83:3a:68:28:d1:55:ee:
e5:48:14:16:4a:ac:39:5c:ac:84:50:20:82:ae:c5:0f:0b:4f:
af:59:fa:30:cd:d8:90:e4:fb:ae:ad:c1:44:75:04:c0:16:3d:
ee:25:57:02:f4:78:b8:75:92:99:1b:0b:09:f0:bc:c6:8e:d0:
22:0e:b5:9c:57:fc:89:18:46:70:ed:3e:7b:d6:9e:00:b6:11:
68:44:7d:27:8a:58:3b:16:40:e2:4e:e5:da:51:2a:bf:5e:19:
0e:e3:a9:e9:d8:e8:0c:e8:40:8a:0f:ae:9a:b3:14:90:c2:31:
f7:19:c1:a5:3d:f4:86:87:f5:be:c6:2d:a1:46:3e:16:7f:ff:
06:ae:a2:4b:97:53:16:5f:5a:87:b9:de:c4:7f:ee:0a:9a:3f:
72:bf:06:a3:81:bc:47:31:3f:2f:7b:22:20:80:04:0d:ff:c6:
50:98:27:8e:41:18:78:7b:24:3d:cc:2e:1e:03:c7:2b:96:1d:
39:46:66:27:d3:2c:b1:52:53:da:50:89:76:fb:aa:cf:4b:bf:
f2:fd:c7:60:d4:ce:97:86:f9:8c:1e:3a:fb:11:12:60:b0:e9:
1c:c8:27:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:24:35 2025 by rpki-client