Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eUj2LZUdAfZEBBu4JvHMTsWBzuc.roa
File: eUj2LZUdAfZEBBu4JvHMTsWBzuc.roa (raw, json)
Hash identifier: +JtJEnSpUBXKDupQrlxjPmzSE1ughVP+kGImVjr58ps=
Subject key identifier: 79:48:F6:2D:95:1D:01:F6:44:04:1B:B8:26:F1:CC:4E:C5:81:CE:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CBD70ADFBA93215AB03166F7F9744C1D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eUj2LZUdAfZEBBu4JvHMTsWBzuc.roa
Signing time: Fri 10 Mar 2023 14:05:13 +0000
ROA not before: Fri 10 Mar 2023 14:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:cbd6:2ccc/128 maxlen: 128
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:d7:0a:df:ba:93:21:5a:b0:31:66:f7:f9:74:4c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 14:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7948f62d951d01f644041bb826f1cc4ec581cee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:a3:4a:b7:c2:34:d8:44:c5:4d:c4:35:ba:
74:4d:d4:be:56:d4:81:b5:e3:c4:7e:5a:d4:1c:6e:
d3:b8:a7:8a:05:d0:1b:7b:a6:fb:29:1f:0d:89:a2:
aa:f3:8b:68:7a:f2:02:7f:ce:7e:c0:8f:07:e8:29:
4d:3b:d9:82:22:12:c2:e6:9b:b0:65:5f:de:fd:dc:
7c:a8:dd:b6:13:e7:81:30:5b:26:60:9b:7d:04:c4:
ed:73:57:6e:36:53:b4:2d:ab:ff:cc:2c:65:e4:e4:
1e:79:68:ce:ec:2a:3f:d5:0b:67:ea:a1:5f:00:82:
9b:0d:8d:6b:27:bf:d2:b6:c4:1c:fb:c1:97:90:ff:
90:79:51:d0:ef:63:55:26:eb:4e:28:76:b3:91:53:
49:41:f4:78:5f:23:e6:3b:fe:95:91:7e:30:8f:62:
17:2b:41:96:d0:4a:90:36:8b:38:e9:7c:03:45:a6:
72:13:a7:f4:7d:52:ac:2e:8f:78:4a:69:2c:45:a1:
af:31:2a:f3:1c:bd:39:42:12:65:fc:02:e8:b9:a2:
5f:6c:83:f9:0b:35:3d:86:c9:29:83:e3:ed:a8:39:
00:0b:aa:69:ac:ca:c0:a8:5a:30:75:44:bc:b2:e5:
94:a9:83:18:83:6d:70:3a:76:dd:87:08:03:a2:13:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:48:F6:2D:95:1D:01:F6:44:04:1B:B8:26:F1:CC:4E:C5:81:CE:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eUj2LZUdAfZEBBu4JvHMTsWBzuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:d4:77:fd:cb:cd:c8:05:67:17:c2:e1:f5:c9:c8:1e:0b:14:
44:32:a4:f8:bf:d4:83:f6:04:f9:01:4e:f2:2c:75:16:7a:7f:
50:8f:68:06:b2:35:2e:8a:69:e6:0b:63:6c:3b:92:0a:9d:ff:
60:49:f6:b5:f9:1a:5d:45:dd:7a:a4:87:5c:de:55:ec:3b:c6:
25:ea:e5:b8:0e:2f:66:06:71:6c:74:32:2e:9b:88:b5:0b:5e:
c1:93:b0:64:a6:48:e0:04:04:64:39:52:70:55:cb:4a:1f:4a:
11:80:14:af:88:dd:cb:4b:f7:73:02:2a:71:09:dd:09:02:85:
cc:88:81:3b:51:91:76:c5:1d:16:3d:12:84:08:7b:7a:c8:92:
e1:6e:c1:d0:48:41:83:c0:d7:38:91:16:03:cc:6e:84:9a:dd:
a3:30:e6:52:41:4e:5c:da:80:ba:7c:02:6e:64:d4:95:92:63:
54:e3:ee:56:5d:a8:f6:bf:1b:01:01:81:c6:9b:62:88:74:b2:
f0:ad:ab:09:d3:e9:2b:08:ba:34:4b:36:80:0e:ca:92:2b:6e:
81:2c:f8:f1:90:dd:b5:2f:ce:db:80:7b:bc:a1:50:8b:83:ba:
8c:6f:13:8a:4b:13:a5:fb:4b:6a:14:64:8e:1f:90:fa:1a:7f:
a9:7b:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:31:39 2025 by rpki-client