Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZJXNtdfR9ahAfCLNH9KlMQbU7k.roa
File: eZJXNtdfR9ahAfCLNH9KlMQbU7k.roa (raw, json)
Hash identifier: y630IjF6a58Fn+NbZy08ExW7xHyIx+JGblt1whivtPo=
Subject key identifier: 79:92:57:36:D7:5F:47:D6:A1:01:F0:8B:34:7F:4A:94:C4:1B:53:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870E5B7316700B2204D66386F184FEE56A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZJXNtdfR9ahAfCLNH9KlMQbU7k.roa
Signing time: Thu 23 Mar 2023 12:04:46 +0000
ROA not before: Thu 23 Mar 2023 12:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:e5b:1576/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:5b:73:16:70:0b:22:04:d6:63:86:f1:84:fe:e5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 12:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79925736d75f47d6a101f08b347f4a94c41b53b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:dc:78:60:0f:e4:cb:1b:11:29:fb:b3:4b:
f4:3d:46:47:c5:4e:8a:99:2a:64:c5:61:92:e7:d1:
8f:08:fe:bf:ee:93:2e:80:fd:dc:c1:0b:e9:4f:57:
f9:17:19:4a:92:09:12:5e:9a:11:ca:d5:b8:7d:5a:
f0:57:15:b8:73:3a:63:cb:22:ac:18:a7:17:7b:cd:
d9:cc:d9:c3:f0:15:5d:88:b3:22:09:aa:e8:78:35:
40:04:bf:0f:48:3c:99:1d:8c:ac:eb:9e:d4:dd:0f:
38:ee:69:8b:c7:14:31:95:51:14:f6:28:8a:9b:d0:
ef:f1:be:a8:8c:6b:3c:80:7f:3c:67:12:ca:b3:08:
fd:c0:8b:b3:08:33:00:7d:72:98:06:52:a4:4f:8f:
49:8b:01:83:22:cb:8b:1c:fe:a0:a5:89:56:12:c4:
e6:06:19:3b:4c:39:ed:dd:c5:2d:b2:8a:19:85:ff:
9e:75:ff:2d:30:d3:bf:6a:ea:67:43:03:4a:b0:a6:
36:51:1b:0d:05:8c:82:bf:bb:b7:12:f6:a4:5f:2c:
fb:68:6a:1d:0f:a1:f0:1d:ab:2d:42:57:09:26:6e:
ea:9c:d8:8f:87:b1:dc:a0:dd:88:4c:78:91:f0:53:
78:97:57:c5:12:0f:6a:24:36:3b:9e:ca:87:dc:e0:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:57:36:D7:5F:47:D6:A1:01:F0:8B:34:7F:4A:94:C4:1B:53:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZJXNtdfR9ahAfCLNH9KlMQbU7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:45:f4:a2:73:cc:42:34:16:a9:de:03:22:20:b0:2b:06:55:
2c:7a:b7:82:da:20:f6:97:ac:ec:b7:55:30:f2:11:f8:f5:aa:
e2:de:e5:66:81:d3:0b:4b:37:91:6e:bb:cb:ef:76:68:f3:4f:
16:a0:93:cc:a1:dd:6f:5d:4a:5e:64:bb:a1:55:c3:59:b2:f4:
2c:61:c1:e2:5b:25:88:95:50:f4:01:14:8e:29:4b:43:18:f5:
0c:8d:bf:1b:c7:1b:1f:42:af:68:7f:da:e4:1b:39:ec:bc:00:
61:d7:35:b5:81:30:26:0f:d0:af:72:f9:c2:a0:fd:71:fc:5a:
32:ff:ff:74:e4:29:eb:40:c4:2c:79:10:34:35:0b:90:0b:1f:
09:71:92:93:bc:7c:39:ef:95:61:95:ce:0a:11:79:92:e5:10:
6c:03:88:97:df:f0:fc:e2:44:3d:91:63:22:97:a8:d5:5c:4f:
74:37:d9:2b:83:be:10:b6:4f:c5:05:8c:b6:61:b6:0b:f0:c9:
15:29:ea:45:a7:b0:dc:26:36:cd:21:1f:69:fc:a8:64:22:c3:
b3:3d:e0:8e:4c:9d:6b:ad:33:4d:db:0c:ae:10:38:39:36:97:
22:c3:8c:92:b5:57:93:dd:16:96:1b:32:99:ec:6a:19:28:9f:
91:d7:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:56:21 2025 by rpki-client