Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ei1wxQboAoK7ACoA8UOhBkuU3Vw.roa
File: ei1wxQboAoK7ACoA8UOhBkuU3Vw.roa (raw, json)
Hash identifier: LBvFPisJ0VUxPHI7PCfKk0nJ/4EshnjbAFQWrwHMsjY=
Subject key identifier: 7A:2D:70:C5:06:E8:02:82:BB:00:2A:00:F1:43:A1:06:4B:94:DD:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868AA5EC0A4C54677D1FFE854184DD11AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ei1wxQboAoK7ACoA8UOhBkuU3Vw.roa
Signing time: Sat 25 Feb 2023 22:16:15 +0000
ROA not before: Sat 25 Feb 2023 22:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8a:a5:ec:0a:4c:54:67:7d:1f:fe:85:41:84:dd:11:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 22:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a2d70c506e80282bb002a00f143a1064b94dd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:8f:83:a9:fd:97:06:73:7b:1b:d5:e1:a6:
19:b5:4c:5a:80:68:a5:93:4b:4f:2c:25:e6:6b:1d:
43:3e:5f:06:3c:0b:a3:1c:a9:d8:0f:f0:e3:f5:bd:
e5:78:36:13:ec:5e:1b:d0:59:23:bd:f9:ef:63:bd:
b3:25:c0:23:59:01:99:77:72:2e:6e:ba:f7:a9:94:
dc:1d:0a:e5:72:d7:2d:5a:c9:0e:d3:15:8d:6b:2f:
b2:dc:e6:ae:36:d4:0c:6f:4f:75:41:6e:21:d8:3d:
04:3e:fb:81:16:9e:bd:ef:36:f1:99:73:94:33:7d:
09:8a:10:6b:06:be:26:8a:d8:a6:07:c2:58:6f:b1:
f0:59:42:6b:28:07:9d:1d:ac:6f:7f:22:e7:93:22:
dc:f9:43:95:38:f7:73:2e:34:2c:5b:a7:79:c4:b6:
5f:95:18:83:35:1b:2e:1f:0b:49:1b:9f:37:1c:92:
ce:dc:e9:f9:7f:f5:7e:f4:b3:14:3d:78:69:b8:b3:
f1:b5:94:20:d6:fb:ba:82:5b:88:d3:ef:14:e8:a1:
9c:1f:88:cc:b5:e7:ba:b1:94:b7:3b:74:20:98:2a:
f0:2e:c5:d6:62:c5:fe:49:cc:e1:c7:03:9e:fe:9a:
c2:0b:a4:fa:43:1e:d9:d6:31:a3:02:f2:ad:dc:e5:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2D:70:C5:06:E8:02:82:BB:00:2A:00:F1:43:A1:06:4B:94:DD:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ei1wxQboAoK7ACoA8UOhBkuU3Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:49:ec:81:43:65:f0:71:00:77:11:db:9a:85:a0:fa:f1:e7:
27:9b:2f:c1:e6:82:df:1c:31:b4:5c:e8:5e:ef:74:8f:4b:d4:
60:61:5f:76:57:3d:33:0e:28:ca:4e:34:09:af:a8:3e:d7:ba:
4f:64:ef:41:e4:10:84:69:17:26:49:16:6c:15:ee:be:88:24:
cf:64:a0:65:f6:62:d8:9f:bc:41:93:be:ef:29:b0:84:7a:2c:
80:f2:54:4b:b2:8b:72:5c:ce:71:3f:97:a4:d8:da:9b:d0:dc:
eb:8e:99:46:b6:e1:d9:75:fe:ea:34:e1:0c:55:41:58:6d:72:
00:21:25:c0:14:de:c1:4d:c3:0f:f8:98:63:bb:73:fa:20:19:
33:aa:f0:06:05:ab:da:6a:19:82:bb:28:30:c6:4b:48:43:64:
7e:73:1e:4e:ad:97:7b:4b:7c:24:bd:01:20:55:63:88:c6:ff:
56:d9:af:a9:fa:90:f9:22:5c:76:f3:01:3a:38:8e:8c:5d:47:
1f:f0:3f:7b:5e:dd:fb:9a:aa:22:33:18:f0:57:56:eb:6d:67:
cb:82:09:97:cc:59:4f:ba:92:fd:55:f6:53:f4:b6:ee:bf:40:
13:6d:e6:b9:c8:f3:4b:cd:9a:c8:9b:e9:fa:e2:ce:8a:83:2c:
4e:1d:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:26:42 2025 by rpki-client