Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eismVLHOjcFAkmMgqeMZR65971c.roa
File: eismVLHOjcFAkmMgqeMZR65971c.roa (raw, json)
Hash identifier: aC10IMnT035ZkAe9aQPOF55o289uYuMmipsQqWrKuAQ=
Subject key identifier: 7A:2B:26:54:B1:CE:8D:C1:40:92:63:20:A9:E3:19:47:AE:7D:EF:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 824211CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eismVLHOjcFAkmMgqeMZR65971c.roa
Signing time: Sun 08 May 2022 17:04:34 +0000
ROA not before: Sun 08 May 2022 17:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a4a1:47ca/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185368013 (0x824211cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 17:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a2b2654b1ce8dc140926320a9e31947ae7def57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:ab:8b:bc:ea:3d:70:52:ab:cc:b3:cb:10:
c3:03:5b:a7:d1:00:65:e0:d9:fd:ce:00:28:75:de:
fe:31:9b:af:e1:75:89:85:00:0e:db:a5:68:90:f2:
35:98:de:9f:61:57:9d:07:b7:b1:1e:25:12:43:d1:
12:c0:0c:8f:44:78:74:3f:ee:2b:1a:8f:52:0e:80:
66:52:55:0d:26:ee:db:f4:30:68:6b:f2:65:22:18:
2f:29:96:9b:bd:5c:1f:fb:c4:7b:36:c8:19:9e:f2:
2d:81:f6:71:55:97:17:e1:b4:39:da:4d:8b:cd:3b:
0e:c5:6b:55:dd:f2:4b:76:1b:66:a2:f9:e5:f7:aa:
71:68:05:65:23:53:07:1a:ff:62:94:68:b3:87:1f:
e1:b9:ac:16:a0:af:17:5e:4b:46:48:c2:02:a4:84:
e7:19:6b:08:4c:1e:25:d8:ac:9e:23:f2:79:8a:08:
eb:83:15:99:9e:b5:7a:fc:0b:9f:c0:c1:c0:98:0a:
de:7e:00:3b:0a:14:b0:70:87:67:d8:f9:60:2c:7b:
ea:2c:b9:12:bc:94:4a:27:3a:7f:ea:74:e8:e6:49:
9c:3f:0c:76:7f:66:2a:52:bd:be:f8:f6:ad:12:12:
e7:10:25:32:41:00:09:71:63:cf:b9:6a:e8:d0:34:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2B:26:54:B1:CE:8D:C1:40:92:63:20:A9:E3:19:47:AE:7D:EF:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eismVLHOjcFAkmMgqeMZR65971c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:51:86:be:12:d5:7a:81:ae:97:45:8b:9b:91:d0:41:ab:5b:
41:e6:8e:96:a9:b6:f3:95:dc:bb:8f:67:7f:89:27:08:c3:62:
2e:f5:7b:e3:77:87:7a:5d:d6:d1:55:b2:02:9a:76:de:1d:62:
c2:f3:59:94:87:01:a8:47:6e:e4:95:19:3f:1e:2d:8b:4e:21:
02:20:48:5c:49:60:8f:95:58:d0:3a:1b:97:e7:18:a7:17:26:
cc:57:4f:76:ac:31:05:aa:24:ba:6b:0c:ad:8a:79:4e:77:0b:
28:17:29:35:65:55:ed:72:30:b1:51:a6:00:d2:3e:3f:43:76:
ca:fe:5e:b5:b7:8a:39:da:28:e3:53:ae:c0:c4:3a:bc:45:6b:
9f:19:bf:e3:bf:4f:01:0b:1e:bc:a4:6c:33:bb:09:f9:eb:21:
39:99:d5:e0:5d:0f:ca:d0:1d:70:19:b0:97:08:3c:b9:04:5f:
4f:24:40:85:e0:b8:7e:b1:5a:93:78:26:bd:9b:30:29:1d:4c:
36:38:f5:ad:e2:b1:a2:87:d6:59:ca:b1:c3:89:58:d4:88:3b:
3c:94:63:80:9d:eb:f1:20:b5:89:27:1f:3b:07:32:fc:3d:23:
af:c9:ff:2a:83:da:4c:a1:0b:b4:e1:02:64:9b:f9:cb:54:bd:
c7:cf:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:14:59 2025 by rpki-client