Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eTxJTx4DeFdjoe6Lx2dhYNgsEIs.roa
File: eTxJTx4DeFdjoe6Lx2dhYNgsEIs.roa (raw, json)
Hash identifier: AbWXQPrmavyQRGO7RjLG+Q2EyrDOWtl9uxOxdR/Kdvk=
Subject key identifier: 79:3C:49:4F:1E:03:78:57:63:A1:EE:8B:C7:67:61:60:D8:2C:10:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855C0EA6DFCCACD4C0B9D4A456A5F09689
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eTxJTx4DeFdjoe6Lx2dhYNgsEIs.roa
Signing time: Thu 29 Dec 2022 04:05:42 +0000
ROA not before: Thu 29 Dec 2022 04:05:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:5c0e:13eb/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5c:0e:a6:df:cc:ac:d4:c0:b9:d4:a4:56:a5:f0:96:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 04:05:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=793c494f1e03785763a1ee8bc7676160d82c108b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:1a:a7:89:82:6d:af:07:fa:a4:02:7b:f5:
6e:b7:c7:d1:92:7b:2b:98:bd:d6:1c:78:e4:17:43:
e7:bb:94:30:66:96:6e:b3:59:5a:08:27:be:6b:c3:
83:ea:61:1c:fd:0b:f9:f8:4f:e9:e5:2d:30:6e:a2:
e4:91:af:3a:b0:bc:de:24:ea:b5:53:a0:8c:79:b9:
be:9d:b6:3c:5f:74:0d:0d:da:72:af:56:d0:7b:00:
1d:89:43:30:b2:93:3e:1f:ce:96:8b:99:f5:ae:20:
67:a8:81:a5:1d:3e:e9:a6:3c:84:b4:c4:42:59:bf:
53:80:9b:11:13:4f:a1:f3:20:f6:cc:aa:a6:30:c8:
83:7e:6e:39:74:5f:31:33:9f:b2:0d:78:9f:9c:f8:
a3:2f:7c:cd:35:61:18:47:23:ab:72:8a:03:24:59:
c9:21:43:35:98:98:b1:82:cc:6e:d9:43:0a:85:57:
0b:1d:45:06:0f:d5:74:d7:bc:3c:5b:1a:9f:4b:9d:
f6:3d:8e:92:4a:2f:d4:50:6d:83:4d:3c:c9:be:53:
9c:cf:11:1e:4d:aa:89:bf:cf:a4:8b:99:0a:23:99:
59:a9:46:cf:59:a5:be:63:47:5d:81:87:5c:c8:14:
64:10:af:52:54:d0:40:5a:ed:e6:19:71:b6:82:09:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3C:49:4F:1E:03:78:57:63:A1:EE:8B:C7:67:61:60:D8:2C:10:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eTxJTx4DeFdjoe6Lx2dhYNgsEIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:5c:3f:40:a3:be:7d:e8:06:87:94:ac:b9:52:57:12:b3:32:
4a:0a:10:25:86:ca:c7:cb:4b:52:0f:70:1d:7d:8a:01:b5:21:
9b:ff:8d:9a:f1:ae:14:da:87:d1:dd:ed:1f:c9:b2:2e:5e:eb:
0f:5e:5a:6e:98:f5:ca:47:b2:98:bc:0f:0d:9a:f5:5c:4e:81:
df:bf:1b:d1:5d:94:b6:1e:51:0e:a1:3a:bb:5e:09:d4:db:f1:
b8:1a:ed:2b:27:84:15:d9:a4:82:f8:4e:0f:33:33:87:5a:51:
d0:cb:63:c7:a7:c8:de:cf:6f:ea:4c:82:32:07:58:12:de:22:
03:36:11:c0:57:9b:7d:cb:1f:79:30:c2:a7:bd:9d:56:a5:5d:
38:3e:08:8a:c0:4a:f3:c9:61:b4:9c:36:14:c6:d0:75:75:b8:
69:18:10:26:71:d6:03:b1:9c:6a:4c:6c:52:50:d3:6d:16:31:
54:e2:27:76:ca:b3:ed:60:ea:b8:93:b1:14:76:57:68:55:86:
62:4d:85:c4:96:ad:14:57:f9:a1:fa:03:12:54:b0:6b:f5:7f:
8b:ce:0d:9c:01:cd:3d:62:f9:68:70:f0:3f:4b:e6:1b:08:b2:
7c:4f:3e:27:2e:4d:9f:f5:e4:60:12:b7:e8:33:9f:f9:6c:a8:
e4:93:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:08:06 2025 by rpki-client