Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eWFT6wosvpvrzOB_XdHJVFc03OA.roa
File: eWFT6wosvpvrzOB_XdHJVFc03OA.roa (raw, json)
Hash identifier: f1RhHDhiw9UMnFEyV+wrgREzCZzvUkeuGMb/v/o9HnE=
Subject key identifier: 79:61:53:EB:0A:2C:BE:9B:EB:CC:E0:7F:5D:D1:C9:54:57:34:DC:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D5EB3D825DF5F7E407298A95A29C4BD3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eWFT6wosvpvrzOB_XdHJVFc03OA.roa
Signing time: Mon 19 Jun 2023 23:09:03 +0000
ROA not before: Mon 19 Jun 2023 23:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:eb:3d:82:5d:f5:f7:e4:07:29:8a:95:a2:9c:4b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 23:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=796153eb0a2cbe9bebcce07f5dd1c9545734dce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:6a:a1:b7:d1:db:3d:6b:42:0a:75:33:78:
4b:66:28:37:b1:7a:cb:0c:41:88:2c:3f:7d:90:a9:
51:0c:0e:00:0c:0c:d2:05:d8:0b:eb:17:b1:30:72:
17:29:a2:43:c7:ca:33:30:f7:b0:f7:2e:33:14:ee:
a1:83:14:c1:f8:e7:d4:99:de:88:65:e4:3c:60:fa:
a3:ea:28:4f:0d:26:89:f2:fa:76:2c:6a:03:06:16:
9d:96:a4:31:b3:29:79:c9:39:44:7f:e8:87:df:c8:
a5:7b:ee:64:be:70:7f:4d:4d:98:b7:1b:d3:40:c8:
df:00:c8:9a:4e:db:0d:5a:a0:92:bf:81:07:d1:f0:
83:79:09:27:28:cd:22:ad:77:9c:75:c1:4b:31:8e:
f8:01:44:c5:c4:44:3c:53:50:92:a4:14:43:a6:19:
c1:d0:56:f3:e8:9c:0b:6b:13:91:63:d9:0e:5d:0e:
0d:d2:48:56:0f:11:4d:fe:fe:d3:f8:5b:1a:8f:7c:
73:1a:71:7e:73:26:0d:9d:04:21:ff:50:b3:d0:d2:
2d:1e:ae:fc:c8:53:ca:b0:ca:ff:fa:14:59:90:42:
26:93:52:00:5c:37:fb:f2:6e:92:f1:37:ab:1f:6c:
35:89:ab:c4:50:ad:89:c6:47:0b:32:63:4e:25:88:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:61:53:EB:0A:2C:BE:9B:EB:CC:E0:7F:5D:D1:C9:54:57:34:DC:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eWFT6wosvpvrzOB_XdHJVFc03OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:e7:19:f4:67:83:63:cc:76:a7:86:0d:f0:39:8a:74:2d:cb:
43:d3:ef:64:e6:80:66:7c:ce:03:2d:d3:46:87:12:5e:ce:00:
3d:4e:86:73:08:ee:ae:6a:94:90:d1:41:5c:29:2e:da:65:9b:
dd:05:95:ab:28:23:73:9d:d7:93:69:0b:68:e5:26:28:c3:e5:
2c:13:ce:44:35:d0:29:45:56:20:4c:77:fb:18:23:cc:19:a2:
df:64:a9:eb:cf:42:49:c9:46:2d:71:52:74:4e:ff:b3:8d:d4:
1b:d3:0b:4a:73:3d:ff:86:3c:87:40:55:f0:76:ee:ff:12:aa:
a5:14:2c:da:05:1a:27:8b:d2:61:f3:1e:af:0c:a3:d4:d7:f8:
d4:51:00:c3:6b:c8:e8:bf:0d:f9:d7:04:f7:b0:58:31:b7:17:
58:16:3c:93:01:1f:11:6f:1b:85:58:16:00:9c:aa:e0:a8:24:
12:b2:b2:22:95:a3:10:63:b6:1e:7b:c3:e6:5c:c3:65:ed:8e:
73:19:c6:79:4c:ab:4a:72:d6:96:8b:ea:6a:78:52:52:0e:a5:
ec:59:7d:b0:b0:e0:80:ef:14:10:af:7f:b0:b1:62:68:67:5f:
08:f6:3c:3f:29:44:45:08:c7:e4:db:a2:ff:f2:4f:6e:8c:57:
c3:d2:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:11 2025 by rpki-client