Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egRbReHRWW_7fj04aNh8Fov4jUc.roa
File: egRbReHRWW_7fj04aNh8Fov4jUc.roa (raw, json)
Hash identifier: 3AjH8SqL6KTXMSCMUFqpoCZRliELp9w89rYS/E48wQI=
Subject key identifier: 7A:04:5B:45:E1:D1:59:6F:FB:7E:3D:38:68:D8:7C:16:8B:F8:8D:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018526DB280482AF9E14A08761155F404567
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egRbReHRWW_7fj04aNh8Fov4jUc.roa
Signing time: Sun 18 Dec 2022 20:09:34 +0000
ROA not before: Sun 18 Dec 2022 20:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:26:db:28:04:82:af:9e:14:a0:87:61:15:5f:40:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 20:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a045b45e1d1596ffb7e3d3868d87c168bf88d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:1d:59:6f:a7:e5:d9:a9:8b:4d:16:40:63:
e5:96:23:09:58:81:bc:39:72:fc:5d:dd:52:8e:a5:
ca:87:bb:4c:18:ea:97:a7:52:71:a7:a5:47:60:fa:
60:16:65:9f:8b:54:67:b7:06:0a:11:f6:b5:73:f8:
0f:35:1c:5b:4e:a9:46:c4:d3:6a:92:3b:f7:18:34:
5b:4a:c7:e2:f4:b9:52:b6:5e:c9:2a:8f:60:82:10:
65:ed:10:91:90:64:fc:1e:14:1f:45:5e:c2:17:94:
fb:63:79:0c:6a:18:bd:a9:12:cb:56:eb:6b:ec:49:
bd:a7:d8:fd:da:43:59:b4:06:24:b2:3f:34:f4:67:
c1:60:73:d4:5b:f6:96:10:72:b9:87:3f:05:68:52:
c2:f8:8e:53:73:b5:6c:29:e1:d2:b8:81:33:37:88:
a4:81:8e:6d:83:32:22:aa:cb:c5:82:42:3a:e3:f6:
06:c3:20:d1:27:8b:9b:11:25:58:3d:8a:05:f7:de:
12:99:4b:e0:69:3f:2f:08:7a:c6:2b:39:7d:cd:6c:
e9:b9:55:57:49:ac:b4:9d:9c:80:da:86:fe:a7:6c:
af:65:e1:87:1c:a8:50:01:e9:50:ad:8a:9c:e0:01:
08:d2:0d:b1:0d:b1:ba:f0:ba:77:e8:47:b8:c4:1a:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:04:5B:45:E1:D1:59:6F:FB:7E:3D:38:68:D8:7C:16:8B:F8:8D:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egRbReHRWW_7fj04aNh8Fov4jUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:e5:60:b2:c8:ff:cf:4e:ac:18:52:6d:8b:eb:6d:05:d6:59:
ab:fc:bf:f7:59:e1:88:a2:50:af:dc:91:f9:8e:ef:15:b1:94:
81:66:cc:33:d3:a7:47:d1:ec:0f:26:43:80:44:c3:49:40:a6:
ae:86:a1:72:7c:29:f1:96:3e:13:36:8e:4c:f5:41:9c:5d:e7:
59:79:65:04:54:d8:ac:1e:b5:89:fb:96:1e:3d:0a:70:41:a7:
eb:1e:7c:e0:6e:53:d9:34:27:93:7a:ee:7b:cf:a9:50:b1:10:
fd:42:30:e9:f7:bb:91:b6:20:42:f1:3a:8f:84:a2:ec:67:fd:
06:31:0a:43:78:e3:98:1a:e5:21:8a:ef:07:98:ad:49:ef:cb:
ca:34:18:15:12:85:70:03:5d:cf:8d:0f:0e:bf:76:1e:f7:4e:
b1:57:e1:eb:a6:0c:70:be:12:b3:e2:0d:84:f8:02:cd:fa:dd:
df:4e:63:1d:4f:ba:27:eb:01:28:84:c2:40:c3:9f:89:94:0c:
5d:a0:1d:9c:09:82:a6:7b:99:b5:ce:9c:c5:33:12:fb:eb:78:
f1:d7:ff:d4:d5:39:95:0f:6a:14:6b:02:83:dc:af:f6:e8:2d:
b7:ec:a3:5d:7b:97:be:e3:cb:9c:77:50:58:46:65:23:b5:62:
31:c5:56:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:31:45 2025 by rpki-client