Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egFJOuNXnaNrX3VBZ3GfzjKnsJ0.roa
File: egFJOuNXnaNrX3VBZ3GfzjKnsJ0.roa (raw, json)
Hash identifier: f3Vxdg+wvLiPqu/nAL/iLkXbOFoI7Cx/U9gx8gJokVQ=
Subject key identifier: 7A:01:49:3A:E3:57:9D:A3:6B:5F:75:41:67:71:9F:CE:32:A7:B0:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C42867484A2CB799EA131540B8D13554
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egFJOuNXnaNrX3VBZ3GfzjKnsJ0.roa
Signing time: Wed 18 Jan 2023 09:14:20 +0000
ROA not before: Wed 18 Jan 2023 09:14:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:28:67:48:4a:2c:b7:99:ea:13:15:40:b8:d1:35:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 09:14:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a01493ae3579da36b5f754167719fce32a7b09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:2b:53:64:21:86:e3:d8:77:b0:2d:e9:bf:
07:52:37:d8:e1:3d:39:c9:44:e6:64:6c:6a:bb:8c:
73:d6:df:8b:c0:45:ce:c2:33:3e:80:c2:fb:3a:a3:
ef:37:f5:c5:d4:7c:09:0d:dc:e3:a7:46:6c:dc:65:
d6:1b:f3:cd:9a:40:4d:2e:47:7e:96:f4:45:f2:a1:
ed:e7:91:f7:e8:bd:59:94:8d:40:71:cd:60:c0:8b:
30:ed:3c:0d:11:3f:63:23:ad:50:2c:f0:83:9f:c1:
50:79:7b:65:0a:17:68:cd:1c:e5:79:d7:c5:f2:d2:
34:42:4c:18:eb:fb:83:f3:18:89:29:82:f6:d9:2d:
5f:c2:00:ad:ed:9c:e0:f9:72:51:7c:05:62:b7:a7:
41:02:b2:db:ef:2f:86:f2:7e:53:6e:e3:42:66:33:
53:a6:2c:d9:1b:39:1c:09:92:81:5b:ef:6a:3e:8f:
dd:62:63:09:f3:f2:2f:95:9d:c6:4b:d9:0b:5b:86:
39:d6:7e:b3:ab:e7:f7:42:ae:b4:e1:f5:bf:36:c5:
dd:f6:21:d9:21:9f:df:18:0d:7c:1a:47:13:ad:d1:
b8:ec:a5:aa:e9:ba:53:9a:fb:93:8d:1b:e9:0d:72:
0e:c5:7f:1d:3f:00:4f:89:6b:17:22:82:83:a0:c9:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:01:49:3A:E3:57:9D:A3:6B:5F:75:41:67:71:9F:CE:32:A7:B0:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egFJOuNXnaNrX3VBZ3GfzjKnsJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:47:7e:59:fe:6b:a2:da:66:55:af:65:92:76:36:6b:20:ec:
fa:a6:c5:c4:b5:83:cd:2a:8e:11:14:0a:ec:dd:b2:5c:66:26:
81:db:76:c9:aa:e8:00:75:5f:25:0d:c6:3d:24:1d:c2:6c:f4:
e7:fe:53:8d:fd:c7:7f:0d:84:e3:9c:84:ce:bf:0f:21:a8:8e:
5e:35:24:dc:0e:6b:f4:d7:96:29:0e:44:89:a5:6d:9e:53:62:
70:d4:21:9b:85:40:6a:f6:e4:d7:20:16:99:e9:cb:70:de:aa:
aa:cc:e6:15:c2:3b:9a:73:c6:05:6f:97:0d:c0:94:27:4b:8f:
f6:c7:1d:cf:aa:30:3c:1a:3e:39:15:56:dd:c0:49:d6:35:03:
cc:9b:d7:31:c3:0d:69:ae:a2:8e:6a:42:96:53:92:48:bf:1e:
f7:1f:5d:68:20:8a:23:66:0f:ee:ad:97:65:3b:06:28:15:a3:
fe:b4:94:17:dd:6b:7a:85:0f:12:c5:36:ae:27:96:21:a0:c2:
df:86:ed:aa:d2:e2:ff:12:a8:b0:7a:96:e5:27:f5:22:6b:19:
83:61:10:fe:46:91:61:e9:6b:c0:26:35:87:27:26:95:bf:52:
38:a5:97:b9:0d:54:7d:ff:dd:45:30:dd:c5:f8:99:f1:5e:d1:
be:8a:2c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:01 2025 by rpki-client