Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eXSqsUWtFbXqoOX5bqQ987vCEvk.roa
File: eXSqsUWtFbXqoOX5bqQ987vCEvk.roa (raw, json)
Hash identifier: U73jWw/vjHvNXrkWKdi5JyDMWxJElGfTmHtkcV7hfr4=
Subject key identifier: 79:74:AA:B1:45:AD:15:B5:EA:A0:E5:F9:6E:A4:3D:F3:BB:C2:12:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E14B6B92C823E25272E0506558635D69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eXSqsUWtFbXqoOX5bqQ987vCEvk.roa
Signing time: Thu 22 Jun 2023 04:09:56 +0000
ROA not before: Thu 22 Jun 2023 04:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e1:4b:6b:92:c8:23:e2:52:72:e0:50:65:58:63:5d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 04:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7974aab145ad15b5eaa0e5f96ea43df3bbc212f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:f1:36:d3:eb:65:6a:41:a9:76:f6:3a:96:
e3:0c:7a:77:11:41:84:e7:30:92:eb:ea:55:1a:d8:
8a:8c:cd:4a:21:7a:bf:f6:24:36:f8:a2:39:d1:78:
bb:19:14:bf:2d:58:ac:6d:f7:14:64:79:15:3f:3b:
d1:a2:5a:ce:dc:44:25:6e:77:d2:e4:ac:20:7c:16:
e5:3d:e5:7e:b8:4e:24:21:cb:55:54:ec:4d:42:ce:
88:b9:d6:d7:03:19:01:a9:82:af:6f:d6:cf:70:c0:
9b:94:e1:f3:c3:4d:f0:b9:9d:6c:6e:72:21:1c:2e:
d2:03:1d:35:8c:93:f4:03:38:95:0d:b8:26:76:e6:
4d:ce:55:dd:43:74:6b:a8:6c:58:5e:64:a5:0b:88:
96:29:30:64:a5:e9:0d:04:57:75:94:36:29:15:35:
40:94:88:86:2c:7b:b8:3e:b8:48:60:30:39:d3:42:
a6:df:a1:12:db:ca:c1:fa:07:f6:18:d6:92:6c:99:
21:ed:72:07:02:0a:dd:03:e2:19:52:a9:2e:2f:be:
16:cd:73:83:c5:eb:87:93:0d:46:db:7f:66:95:f0:
62:5c:6c:8e:3c:23:f3:15:e1:fb:74:e8:8e:fb:62:
6d:5a:b8:c5:dd:48:01:c0:d3:93:4c:8a:33:0f:e7:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:74:AA:B1:45:AD:15:B5:EA:A0:E5:F9:6E:A4:3D:F3:BB:C2:12:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eXSqsUWtFbXqoOX5bqQ987vCEvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:65:32:2c:f0:0a:46:2c:e7:9e:5d:c5:b1:c7:2c:67:b2:b7:
d1:e4:ac:c4:51:d5:1f:f4:b9:1c:58:c0:be:b2:51:a9:aa:2b:
a8:3f:75:84:9b:ee:81:88:08:2c:77:00:b1:26:1c:72:2b:6e:
60:c6:ee:41:ab:f3:52:e6:77:4f:4f:db:61:ae:92:69:66:cf:
7b:9a:87:0c:7d:82:96:28:27:11:02:b5:63:40:a3:bf:58:33:
ee:4a:fb:e1:b5:1b:3c:69:c1:44:62:57:92:a1:e0:f1:e4:df:
b4:38:ee:2a:ad:04:0a:bd:ff:58:fd:93:1e:e3:ae:93:21:2c:
4e:86:8e:aa:aa:f5:f9:b5:f0:09:5c:cf:92:ab:3b:3c:29:8f:
c8:5d:3d:e0:5e:ac:65:d4:81:df:fb:44:dd:e4:1c:86:6a:cb:
16:2d:9a:b5:47:65:e9:7d:d6:fe:05:31:32:11:5b:0b:76:96:
9b:58:be:b8:92:e2:25:f5:dc:54:3f:cd:a0:dd:c4:44:2b:99:
39:2f:ae:1e:ac:de:ed:ef:44:88:d4:a6:b8:3c:29:9a:65:98:
d1:fb:b5:66:d7:98:70:98:b3:8c:96:ea:61:cd:73:fb:de:3a:
b9:0d:a3:37:10:a5:e1:c7:17:8f:fb:e1:d5:dd:75:fc:89:cc:
f6:62:5b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:15:48 2025 by rpki-client