Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eh-ol47werkL8ZTbFHDye1RLbBM.roa
File: eh-ol47werkL8ZTbFHDye1RLbBM.roa (raw, json)
Hash identifier: vH4K0ugSsHN4LAvAnIW/QC4Vr0wYmZueO9Hoicbrl4I=
Subject key identifier: 7A:1F:A8:97:8E:F0:7A:B9:0B:F1:94:DB:14:70:F2:7B:54:4B:6C:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E44CAF9F84E5870F56CDA5B14FE993BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eh-ol47werkL8ZTbFHDye1RLbBM.roa
Signing time: Fri 11 Aug 2023 11:12:58 +0000
ROA not before: Fri 11 Aug 2023 11:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:4c:af:9f:84:e5:87:0f:56:cd:a5:b1:4f:e9:93:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 11:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a1fa8978ef07ab90bf194db1470f27b544b6c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:55:92:f0:a3:b1:a3:be:57:42:ad:d4:2c:
b9:3b:a1:16:08:ae:5f:13:c4:ec:42:f7:10:a1:10:
45:f3:37:4b:45:ea:97:24:ff:59:51:d8:8e:f4:87:
b2:7d:51:de:bd:70:02:d7:ce:8c:ba:25:ec:75:07:
d9:22:02:3e:6f:4d:ba:36:93:02:c2:c1:20:d0:c5:
20:c9:55:5d:4a:36:2f:c5:58:27:ab:a2:21:e0:cb:
f3:8c:bb:fd:aa:5e:d2:6d:8f:c9:87:60:de:fe:cb:
a4:9c:6a:45:3c:84:95:bd:c0:8e:71:19:c1:a0:a2:
ec:24:72:f6:f3:3b:2a:47:a3:56:c6:d0:19:3f:72:
df:b8:a5:65:07:f7:22:e1:10:34:9f:4c:fe:aa:95:
e5:43:91:b9:3c:51:df:a2:04:00:9c:0a:c5:b2:5f:
d3:51:8a:01:d4:f4:79:b1:56:75:dd:23:cd:06:80:
e8:0f:72:3f:f5:a9:ba:c4:25:16:fa:7f:c5:b8:52:
a3:e2:ac:4b:3f:fd:fd:6b:bd:bb:90:ce:e3:f0:8e:
25:54:68:e3:c2:a0:7b:20:90:a8:f0:ac:79:02:6b:
a0:1c:e3:6e:ad:04:fe:7a:6b:ea:b6:8a:38:84:85:
0b:bd:d3:cf:ac:64:0e:42:a8:fd:8a:4b:a5:0d:fd:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:A8:97:8E:F0:7A:B9:0B:F1:94:DB:14:70:F2:7B:54:4B:6C:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eh-ol47werkL8ZTbFHDye1RLbBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:48:98:5f:44:3b:2c:24:0b:99:8c:df:fa:51:f2:7f:56:c0:
07:2c:f7:b4:f8:48:2f:48:a0:ea:64:40:4a:2b:b5:db:94:0f:
3c:11:c9:87:04:90:4b:2a:8c:f0:e8:9c:cb:49:c4:62:c6:bb:
39:53:e5:65:79:6e:7f:98:9c:e9:14:ac:0f:56:36:7b:71:e4:
7d:2f:dd:f4:5c:f9:35:27:0d:27:8d:36:93:41:40:b0:8e:d0:
a6:cf:3c:35:9c:71:f4:3e:29:6c:fc:87:20:37:51:f2:68:7c:
82:25:da:a3:bf:14:f8:54:cc:22:22:1d:01:32:d4:76:e3:b6:
5c:21:03:a2:bd:25:cf:f3:a2:16:05:53:1b:14:ed:2c:1d:95:
62:38:0e:a5:f4:88:ef:15:13:09:93:34:d5:33:1b:6c:f6:c7:
99:23:b6:d6:8e:79:d9:fc:60:76:e7:6e:a6:34:82:cc:a1:fc:
8c:a5:9f:4d:28:22:c4:a8:30:8e:b9:c5:86:75:e3:a8:75:6e:
e9:8c:5f:3e:49:9e:ef:50:94:e2:3b:94:a1:b8:c7:0a:ae:54:
f9:d3:f3:7b:a7:38:54:f7:14:40:40:32:68:15:22:f4:9d:a2:
f0:c5:e5:24:ca:b6:35:69:03:8a:bf:6e:56:af:48:9e:3e:17:
1d:d4:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:30:32 2025 by rpki-client