Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZqot9RX8SkoqRMvWcwf4sGgyDs.roa
File: eZqot9RX8SkoqRMvWcwf4sGgyDs.roa (raw, json)
Hash identifier: ldklJRZiStlyIR3ViXiDgW8EV23eGAHL3QCaMaG05xo=
Subject key identifier: 79:9A:A8:B7:D4:57:F1:29:28:A9:13:2F:59:CC:1F:E2:C1:A0:C8:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8CB7DE9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZqot9RX8SkoqRMvWcwf4sGgyDs.roa
Signing time: Tue 14 Jun 2022 19:08:44 +0000
ROA not before: Tue 14 Jun 2022 19:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2360860315 (0x8cb7de9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 19:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=799aa8b7d457f12928a9132f59cc1fe2c1a0c83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:4d:83:a0:5a:e1:af:ec:27:c8:69:13:29:
43:06:a9:a5:cc:96:c8:2b:d3:d7:aa:37:d6:7b:6e:
48:e7:f3:21:b9:0d:46:4e:25:a6:3e:7b:50:fb:77:
3b:75:32:be:f3:a6:c6:ad:55:f7:7c:e8:af:99:27:
9c:d3:7a:20:7c:0a:6a:3f:db:98:b2:19:83:3d:d8:
97:d5:bd:f7:fa:14:be:6d:e3:83:4f:bf:e9:35:0e:
f2:de:1c:9e:1c:99:45:62:0b:cf:06:70:b3:f5:2c:
95:bf:62:a3:8a:96:6e:cf:69:09:e7:5c:30:6b:d7:
af:44:29:5b:46:50:34:1f:65:3f:f2:70:93:bd:91:
a0:0a:af:f2:8e:c9:f7:ad:31:9d:8b:e8:0b:44:73:
d2:58:52:14:b1:1c:a6:20:99:f9:9a:2a:f9:f4:58:
59:fb:d5:b1:66:cd:69:00:2e:7a:f8:97:78:81:53:
1b:c5:fc:40:0b:b3:22:e5:b6:50:49:2f:fc:94:ff:
10:d1:3c:ce:09:f2:f3:8b:60:01:1e:cc:58:f3:8b:
a2:71:91:a2:ca:a7:73:f9:f7:6a:53:50:df:b0:1e:
5f:cd:3d:b6:77:ad:75:12:88:ec:4d:6d:e8:9d:42:
6e:31:b0:94:c1:90:1b:47:91:85:b0:6b:d4:d6:8c:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9A:A8:B7:D4:57:F1:29:28:A9:13:2F:59:CC:1F:E2:C1:A0:C8:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZqot9RX8SkoqRMvWcwf4sGgyDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:a0:53:04:6b:36:59:50:6e:3b:d2:8d:cd:0d:be:d9:ba:2e:
c3:05:ed:f8:32:7d:e4:f6:de:fa:a1:97:80:8b:2a:3d:c6:c4:
6e:e6:aa:f2:d5:9c:ad:51:9b:9e:2b:e0:d8:0c:c6:62:66:78:
f9:24:e6:a8:dc:52:88:a7:87:34:ce:0a:69:8f:e9:84:13:6a:
8d:0a:d0:55:fc:6f:b2:2b:b8:c3:c1:28:1e:1e:a2:ee:5f:a3:
5d:13:2a:8e:cb:16:15:70:fe:d8:b5:d8:8c:80:91:14:f5:22:
6d:77:5d:fa:4d:14:35:5b:8c:24:84:a1:8b:c9:85:46:7e:53:
08:29:01:37:ad:7f:25:0a:af:4e:46:46:8f:ab:1e:6d:2b:3a:
64:9d:e6:48:9a:7d:c9:66:33:f3:4a:5c:9d:45:74:f4:e0:75:
e1:2d:45:f4:6d:54:42:61:73:39:ce:c2:7d:9b:71:76:a2:fa:
c5:f2:b4:09:6d:79:2e:ac:04:0a:8f:15:18:19:a9:f5:fc:d9:
ce:6e:6f:ff:d5:eb:85:06:a9:9b:1f:63:b0:52:6a:15:00:09:
0e:ca:23:0d:e8:8e:43:b9:91:06:21:7d:6f:6b:88:e2:42:8f:
7c:6d:24:40:b5:87:d8:55:d3:65:ae:65:40:ca:93:69:b3:15:
60:9a:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:17:08 2025 by rpki-client