Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ehAlQM90xWoSXOEDVtbITfYuE6g.roa
File: ehAlQM90xWoSXOEDVtbITfYuE6g.roa (raw, json)
Hash identifier: oYveoJI6g65opMovJ2kbgEwR9s8MngSr3IuF84FTDf4=
Subject key identifier: 7A:10:25:40:CF:74:C5:6A:12:5C:E1:03:56:D6:C8:4D:F6:2E:13:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018530147D60F8A680F3AE1C9B03BE7A5852
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ehAlQM90xWoSXOEDVtbITfYuE6g.roa
Signing time: Tue 20 Dec 2022 15:08:47 +0000
ROA not before: Tue 20 Dec 2022 15:08:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:14:7d:60:f8:a6:80:f3:ae:1c:9b:03:be:7a:58:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 15:08:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a102540cf74c56a125ce10356d6c84df62e13a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:55:14:47:ac:a1:5c:5b:e4:e5:36:a2:15:
b5:bd:1c:8f:82:4d:46:a0:1f:42:48:da:b1:24:43:
ae:66:21:bc:c0:32:2c:be:f5:3e:14:c8:6c:be:02:
57:98:8e:4c:cd:f0:33:e2:9b:47:3a:d6:9d:4b:88:
58:ee:94:b7:b8:de:19:40:62:14:90:58:b7:b1:8e:
50:22:84:86:b4:2c:3f:8f:a9:26:29:ff:d3:03:40:
99:ed:5c:13:6e:5c:76:9e:9e:5f:49:b3:93:12:9a:
40:d9:24:68:69:8a:43:46:00:ac:08:15:92:ec:e2:
7d:20:24:ce:e2:1b:1f:cf:77:12:7d:d2:14:84:c5:
9c:59:94:0b:a3:8d:a5:b5:5d:5e:46:9a:79:f5:82:
71:c3:c4:9e:60:74:30:57:63:ca:18:58:8f:d1:5f:
0a:0f:a3:96:14:19:5f:a5:0f:21:ca:c6:f8:81:14:
64:03:11:13:25:bf:d4:b2:b8:3e:e0:23:e6:92:b6:
46:41:b5:0b:28:dd:cc:d2:0a:da:86:08:d7:1c:83:
de:7b:c2:ec:77:57:53:35:57:82:32:f5:c3:3a:84:
06:22:a3:85:f2:17:70:a6:a8:6e:57:f7:bf:3a:0b:
4c:12:ae:9e:17:ae:89:2b:38:c0:72:42:70:13:11:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:10:25:40:CF:74:C5:6A:12:5C:E1:03:56:D6:C8:4D:F6:2E:13:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ehAlQM90xWoSXOEDVtbITfYuE6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:8f:20:3e:aa:2a:ae:ac:17:85:52:f5:e5:bb:2d:48:27:61:
ee:0e:53:cf:c5:ea:2a:38:40:5a:99:10:5b:fa:a1:23:a6:f7:
40:76:5e:a5:95:71:df:a6:af:6a:1c:e8:95:99:5e:55:3f:06:
12:5b:11:7c:ab:f1:26:53:b1:4e:10:20:8f:f3:54:55:c7:3d:
8b:c6:67:87:64:f4:37:ab:8c:dd:a9:55:b2:6d:af:24:e6:e4:
49:92:61:83:62:09:ad:2c:bd:75:c0:e5:19:71:66:5c:8a:4c:
f7:c5:1a:7b:e8:af:f2:16:e4:88:aa:f7:c2:d6:7b:13:88:13:
a2:78:25:10:3a:1e:8e:6f:bd:4b:73:d6:51:fa:82:af:94:f3:
02:89:9d:3c:ed:bd:2f:c0:ef:11:fa:6f:0d:8f:7d:8e:9c:16:
64:12:27:46:9a:79:aa:ac:64:f8:cf:2d:3c:1e:cf:f0:2d:c7:
f2:23:1e:9f:71:c3:de:a4:f7:c3:ba:c0:7e:28:57:81:e3:b7:
1a:59:76:69:1f:5c:27:1c:87:d6:52:52:b2:46:19:c4:5e:71:
c6:87:d2:93:5c:11:4a:d5:eb:4a:67:cf:81:fd:63:6d:50:7a:
fd:08:9d:8c:24:22:20:a6:b4:35:26:48:7e:2f:44:a9:15:e1:
57:f2:bf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:09 2025 by rpki-client