Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eWkL7VpCavTp85UOvI8aBo0HAE4.roa
File: eWkL7VpCavTp85UOvI8aBo0HAE4.roa (raw, json)
Hash identifier: TzxlyS9uYwuStrGbK2vTZF3lC1AgvCZHRwMENS9rc6w=
Subject key identifier: 79:69:0B:ED:5A:42:6A:F4:E9:F3:95:0E:BC:8F:1A:06:8D:07:00:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856C97223EA564F03C9B0FC00CD8ABE648
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eWkL7VpCavTp85UOvI8aBo0HAE4.roa
Signing time: Sun 01 Jan 2023 09:08:42 +0000
ROA not before: Sun 01 Jan 2023 09:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:97:22:3e:a5:64:f0:3c:9b:0f:c0:0c:d8:ab:e6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 09:08:42 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79690bed5a426af4e9f3950ebc8f1a068d07004e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:78:8c:a1:9f:0e:c8:57:3b:92:bf:c1:5b:
83:22:f0:ef:9f:55:2b:d1:b8:26:8d:84:0f:5a:ee:
f8:f2:3f:63:84:49:5f:e1:bb:3d:f2:ad:1d:69:7b:
fd:76:22:be:b3:9d:b5:13:b4:3b:cb:3c:f6:e5:27:
70:4b:cd:da:22:a8:8c:40:81:26:b1:04:1c:43:08:
f8:22:5b:be:c2:e1:bd:75:91:1e:e1:86:69:5f:3a:
53:4f:d5:60:f7:7c:df:ec:30:21:b7:d9:9a:9b:b1:
ec:c6:f2:80:a2:53:a1:dc:01:7b:2f:37:22:71:df:
97:b3:72:a7:40:69:f8:3e:b4:50:e3:17:dd:63:b1:
ef:db:f1:e8:1c:8c:e6:77:68:91:f2:0d:00:e2:c0:
4a:4f:1c:61:1e:23:3e:86:1c:c1:8c:1f:33:b8:ba:
b6:54:16:e6:e5:39:72:7f:80:af:45:cb:ca:02:81:
7e:55:7b:1c:56:77:05:07:39:c9:f8:8c:46:c7:71:
54:60:e7:08:21:bd:f3:6b:91:9b:b1:d3:89:fd:22:
f1:43:31:8c:14:50:38:b2:04:61:ca:f6:36:a2:29:
d8:93:0e:cb:72:91:ec:6b:c1:24:fa:d8:b8:2a:06:
18:1f:a9:8b:b8:5a:f9:8f:21:c0:8f:8f:ad:40:12:
ed:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:0B:ED:5A:42:6A:F4:E9:F3:95:0E:BC:8F:1A:06:8D:07:00:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eWkL7VpCavTp85UOvI8aBo0HAE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:8c:65:d1:07:b9:bb:f3:1d:dd:a8:8b:35:b3:c7:f0:b8:1b:
fb:b2:f6:12:e2:07:9d:4c:92:7f:9c:a5:db:af:89:d5:60:b3:
41:01:bd:12:ef:b3:27:b2:3c:f8:45:51:87:5d:c5:e0:78:ef:
76:63:23:2b:a9:7b:f3:cf:fa:7e:50:8b:11:03:72:12:ae:36:
f4:33:4b:2a:2a:e4:fa:ad:b5:ab:95:43:37:b3:50:a7:d0:e2:
91:9c:16:07:c5:b7:19:fd:d0:cc:ba:0e:dd:87:4b:72:7e:4c:
16:96:49:0c:50:a0:2d:c9:f8:1e:ad:aa:49:76:1c:0b:63:2e:
31:3e:39:9d:fb:cd:59:45:37:05:5c:a9:a1:51:50:22:7c:40:
c2:a2:71:b2:ec:b9:3b:38:40:29:e1:27:c0:8d:09:6a:61:0d:
5e:dd:90:90:e1:00:59:1a:24:2d:61:ab:40:b0:eb:22:2b:00:
8f:fd:96:3a:d0:90:bf:c0:56:11:37:a7:49:0c:ce:72:27:e7:
37:48:fd:88:9d:e9:ef:57:b5:e9:73:30:c8:01:28:8b:9c:2a:
75:56:ac:fb:2e:e4:62:1f:57:68:91:fe:41:77:b2:88:60:62:
0b:8a:f0:f3:3a:d9:84:64:b5:4c:0d:05:8c:de:8b:ba:5c:6c:
4a:51:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:24 2025 by rpki-client