Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ei65Sx75yJwbT9_iCYs2QWktccM.roa
File: ei65Sx75yJwbT9_iCYs2QWktccM.roa (raw, json)
Hash identifier: 3VyzvTnVl/g2vNgRYp7zqwoy9kNyFV22grsrgvoZxaE=
Subject key identifier: 7A:2E:B9:4B:1E:F9:C8:9C:1B:4F:DF:E2:09:8B:36:41:69:2D:71:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3380477946041E1EC3E2D75E27FC23E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ei65Sx75yJwbT9_iCYs2QWktccM.roa
Signing time: Sat 26 Aug 2023 20:19:19 +0000
ROA not before: Sat 26 Aug 2023 20:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:80:47:79:46:04:1e:1e:c3:e2:d7:5e:27:fc:23:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 20:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a2eb94b1ef9c89c1b4fdfe2098b3641692d71c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:b7:92:45:e4:59:39:28:3d:5e:ec:05:44:
b2:d9:c9:74:98:10:20:b5:07:23:a6:09:b5:56:41:
80:c2:1c:1d:0d:6e:fb:c2:fa:9f:98:d7:9f:bf:f1:
5c:fa:22:7d:aa:41:1a:d0:fd:9f:f5:76:94:3e:ee:
f1:94:0b:38:d1:33:9e:b5:1e:f1:a6:22:02:7d:bf:
ff:df:e3:df:e4:66:b4:cc:a5:c3:55:6e:74:7d:71:
93:65:7e:8e:33:e6:bc:cb:25:39:22:50:30:6d:30:
84:6b:d7:78:2e:6d:f5:a1:6d:42:4a:d4:3e:31:4a:
25:75:35:8d:d8:94:bc:40:59:34:8d:a7:8f:9b:35:
73:bf:0a:03:a0:cd:34:fb:6d:70:5f:9a:b2:a4:37:
b3:ac:b8:d8:7e:3d:af:e1:cc:c8:a2:9a:6e:be:ab:
da:d5:3e:a2:ca:d3:e4:3c:85:8f:00:44:2a:27:ad:
b8:5f:da:4c:ae:f5:e0:5b:7d:56:f3:02:0e:04:8c:
23:99:0a:f7:19:c5:73:00:1e:ce:12:df:37:d8:52:
97:ce:c6:93:c5:39:1a:53:4b:99:2e:cd:02:c7:44:
75:bb:67:af:57:d1:70:3c:a2:ef:8d:61:b0:ed:73:
b9:f7:ef:83:a2:93:1e:35:11:0e:3e:ca:b3:40:0b:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2E:B9:4B:1E:F9:C8:9C:1B:4F:DF:E2:09:8B:36:41:69:2D:71:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ei65Sx75yJwbT9_iCYs2QWktccM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:05:c9:88:3d:51:b3:d2:9c:ef:00:0a:24:8b:dd:03:14:01:
47:13:62:b6:5f:ea:58:c6:32:a8:4c:2f:74:ce:48:03:a8:a2:
56:6d:ab:ca:13:b8:e3:7a:8e:bd:64:df:2d:2c:9b:78:fc:9d:
dc:bf:28:61:8e:57:fa:4b:86:11:9d:cb:1d:ce:7b:b2:6d:53:
09:45:ab:6d:ea:9f:d2:17:e0:ac:a3:82:33:4b:46:a6:5c:4c:
c4:06:d4:d6:32:52:41:76:96:19:38:98:56:a1:2f:7e:5e:f9:
91:cd:f6:94:12:b5:ce:20:97:6b:3c:6e:cc:f6:c5:0a:ab:da:
3c:65:ac:9b:62:ed:78:85:3f:4d:22:1d:45:d4:2b:0c:c4:a2:
b0:af:d8:7d:16:d0:19:1f:86:83:be:d7:be:00:85:43:7e:45:
7b:16:41:af:56:a6:5d:0b:e6:49:da:8f:23:5d:bd:cb:eb:b4:
c9:93:4d:f3:b0:d8:42:6c:19:39:5f:e8:dd:f9:4b:49:f1:e9:
fa:c9:9d:a5:ff:ac:d2:ae:26:a4:af:bd:1a:20:6b:1b:c5:52:
97:ab:f9:34:f2:3c:b2:94:f0:0b:24:fc:17:23:68:79:ef:91:
2c:54:07:c3:19:57:d7:68:2a:ce:b9:57:bf:a1:09:3c:2c:20:
47:62:4c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:18:45 2025 by rpki-client