Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eSpze32x2wVmCETVm-sfrnyoZEU.roa
File: eSpze32x2wVmCETVm-sfrnyoZEU.roa (raw, json)
Hash identifier: YXQpe3QTME57/II0QJF36ecjIdk9DXCsS6YbyFQp3/8=
Subject key identifier: 79:2A:73:7B:7D:B1:DB:05:66:08:44:D5:9B:EB:1F:AE:7C:A8:64:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899FDADAC56143C315F1603440FDBF4F29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eSpze32x2wVmCETVm-sfrnyoZEU.roa
Signing time: Sat 29 Jul 2023 04:14:27 +0000
ROA not before: Sat 29 Jul 2023 04:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9f:da:da:c5:61:43:c3:15:f1:60:34:40:fd:bf:4f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 04:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=792a737b7db1db05660844d59beb1fae7ca86445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:55:c8:46:97:84:bd:eb:9d:40:6c:af:af:
b7:01:0e:cf:dc:3b:99:10:e1:bb:a4:54:58:9d:69:
35:06:19:7d:35:58:2b:af:aa:00:a7:82:3e:e9:d1:
38:23:5a:da:a8:92:fc:cf:36:f0:64:95:01:fd:b4:
82:75:f7:d3:ff:43:be:d2:c3:32:4a:a9:e0:d4:ef:
43:27:48:1e:52:50:13:4d:e2:6d:e1:7f:a4:8c:5c:
ca:5e:a5:4b:32:10:a1:98:e1:a7:f1:5a:73:dd:77:
f9:f7:5a:8b:10:e0:2e:61:bd:6d:35:16:55:85:95:
29:a9:e5:f2:86:14:5b:b7:d0:78:30:63:25:d0:35:
54:c0:1b:91:3e:eb:39:61:b3:db:f6:bb:c0:c5:56:
77:d5:93:35:51:bc:e5:59:0b:a6:c3:c3:1b:d0:61:
af:9e:82:e9:e8:1d:36:d6:29:ce:89:46:d0:ca:80:
0c:15:30:8b:6e:17:b2:da:79:f5:c0:89:ad:a2:4f:
c6:24:d7:81:8f:c5:2e:2c:0b:65:68:7a:b6:1b:d3:
0b:e2:51:09:69:97:68:8d:9e:9b:03:78:6d:ef:76:
0e:b0:18:c9:c2:9e:54:da:b6:b6:be:41:e7:a2:b8:
e4:67:43:be:57:fc:23:ec:38:32:39:d2:7c:d7:5d:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2A:73:7B:7D:B1:DB:05:66:08:44:D5:9B:EB:1F:AE:7C:A8:64:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eSpze32x2wVmCETVm-sfrnyoZEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:e4:8a:4a:4d:b2:56:32:16:bd:6c:38:c3:a3:9c:17:8e:47:
63:c2:1b:1e:4e:d7:a4:cd:6e:88:94:74:61:95:d1:ce:49:8b:
93:62:4e:87:fe:f2:ed:3a:4b:96:f3:41:ff:c1:61:4a:33:ec:
22:de:47:b3:2d:78:e0:c4:65:0d:df:f5:25:ba:c4:5f:5d:e3:
78:95:07:d1:29:30:41:72:f8:c0:08:0d:c4:5a:0c:69:2b:74:
3a:4c:8e:f4:db:b4:db:1e:12:ae:cd:ff:8c:16:d4:3e:c9:7e:
2d:ff:59:0b:b5:a7:4a:72:08:4a:c3:89:e4:5a:60:06:e6:f7:
32:4b:de:1e:5d:15:f3:6f:97:6b:48:5c:79:2f:58:ca:1a:da:
d7:d2:63:06:99:c8:8a:6f:9e:f8:9d:1d:ad:59:bb:e7:f2:02:
24:f5:c3:19:e9:52:02:28:05:49:7d:47:4c:3a:e8:94:3d:92:
e7:6e:28:89:81:97:79:6b:0b:36:18:82:08:57:1c:98:48:a1:
a8:85:c7:e6:5f:5a:f7:44:50:48:e5:e3:fb:b8:6a:ca:d5:ff:
77:0e:50:93:65:8f:03:9c:68:18:78:18:4c:29:b9:8b:87:c7:
e9:c3:c4:95:1e:a3:e6:45:95:a1:73:03:e2:f2:af:e7:2b:a0:
b8:3c:ca:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:00:19 2025 by rpki-client