Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ehl8uw0idBq3881a4RxafxK6oSw.roa
File: ehl8uw0idBq3881a4RxafxK6oSw.roa (raw, json)
Hash identifier: 8SLyxEthz2dU8bE2QzqldZ7axfbo8ca6LtghazYRy/k=
Subject key identifier: 7A:19:7C:BB:0D:22:74:1A:B7:F3:CD:5A:E1:1C:5A:7F:12:BA:A1:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C11C445C60BD0A3FEA2F723AAD94B556
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ehl8uw0idBq3881a4RxafxK6oSw.roa
Signing time: Wed 08 Mar 2023 12:05:00 +0000
ROA not before: Wed 08 Mar 2023 12:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:c11b:894e/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:1c:44:5c:60:bd:0a:3f:ea:2f:72:3a:ad:94:b5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 12:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a197cbb0d22741ab7f3cd5ae11c5a7f12baa12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:d8:06:9a:4c:30:3b:d8:2e:97:eb:f5:ef:
7e:9a:67:dd:e3:c0:a8:dc:a3:42:1e:ec:c8:66:69:
2f:9e:25:72:aa:52:f5:39:e4:be:85:3e:75:2c:9d:
b4:c4:f3:75:31:c1:7e:8c:48:8f:2e:18:10:b8:f8:
8d:b2:42:9b:80:58:74:bf:ca:c6:be:9b:26:6b:46:
54:c4:15:92:67:05:5b:fc:66:b6:b0:a5:5e:c0:5f:
d5:c0:9b:bb:a1:47:d9:f6:54:21:0f:8a:3a:04:9c:
51:ab:75:33:3f:d7:a5:3a:18:e2:a4:7d:03:b0:45:
e6:44:0b:24:76:96:35:74:23:f0:67:e1:f3:ab:38:
fd:bb:bf:18:5a:b0:cb:3e:64:b3:7c:4b:dd:2d:a0:
a9:92:ce:44:cb:9a:23:83:84:04:e4:ae:6a:8e:fd:
93:1d:89:88:c6:70:97:bb:93:30:04:9b:94:b5:1b:
43:67:29:0e:4a:6c:12:c0:52:a6:dc:10:92:43:ee:
39:43:75:80:c8:17:94:76:80:b0:aa:e3:ee:e9:ae:
a2:06:2b:a8:89:a8:bc:6d:f8:35:87:ea:9d:d9:b0:
ab:85:cf:e3:5c:98:5e:ad:5d:c4:86:f9:cf:cb:b4:
9e:c4:86:52:47:f0:ef:05:0e:cb:e6:a2:5c:49:97:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:19:7C:BB:0D:22:74:1A:B7:F3:CD:5A:E1:1C:5A:7F:12:BA:A1:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ehl8uw0idBq3881a4RxafxK6oSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:ee:ff:c8:b0:35:1b:4e:56:23:a9:6b:a8:4a:e8:5a:a2:ff:
d7:9f:77:20:1b:ed:6a:4b:6a:b7:79:e0:dd:42:04:c9:17:1a:
39:22:fa:73:a5:66:11:8e:2b:96:a0:e2:53:dc:5e:6f:d6:0c:
71:7d:30:d8:04:18:b1:fa:f2:a5:4c:8b:2f:f5:3a:9e:27:de:
be:2f:a3:5b:9a:06:b4:49:10:65:5c:77:c7:e0:f9:91:77:8c:
27:23:09:68:3e:28:2c:55:c9:41:a8:cf:8d:96:d3:77:db:44:
14:ef:0e:61:a0:d0:1c:f3:72:27:53:93:e7:ca:a6:e1:ea:fc:
0a:7f:4e:29:a6:ac:1d:84:a2:47:83:e3:ab:f2:e9:ed:42:56:
e1:50:b2:c4:74:50:b5:93:30:c2:b2:11:76:91:3f:f0:c8:81:
80:3a:e0:cc:04:c4:ac:ce:e0:85:91:9c:48:81:66:b7:2b:02:
05:4c:42:b5:a3:4c:6f:6d:03:36:c6:77:79:45:72:30:56:b5:
06:6d:d8:e6:a5:dd:f8:99:b5:83:ee:84:3c:bb:10:cf:8d:11:
df:26:1e:de:d7:61:40:2c:f7:b4:05:bf:34:80:bc:9a:0e:95:
fe:66:be:76:cd:ae:6e:7f:b3:3c:2c:0c:22:6c:74:a5:fd:9f:
22:87:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:57:03 2025 by rpki-client