Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ejN0ultWrkHwYxqegFP2QhYaxKs.roa
File: ejN0ultWrkHwYxqegFP2QhYaxKs.roa (raw, json)
Hash identifier: urUI90qfkZD+f8s839INF5LclhQVAYY4UHt0MdXZpQg=
Subject key identifier: 7A:33:74:BA:5B:56:AE:41:F0:63:1A:9E:80:53:F6:42:16:1A:C4:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183EFEBCDDDE5CC4BAC9EB165370D21803D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ejN0ultWrkHwYxqegFP2QhYaxKs.roa
Signing time: Wed 19 Oct 2022 11:05:51 +0000
ROA not before: Wed 19 Oct 2022 11:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:efeb:d2c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:eb:cd:dd:e5:cc:4b:ac:9e:b1:65:37:0d:21:80:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 19 11:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a3374ba5b56ae41f0631a9e8053f642161ac4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:5a:b0:8b:53:11:a0:44:c4:b9:c2:d7:95:
ad:91:cb:72:38:4e:c1:46:8b:1a:d6:28:55:0c:11:
dd:df:0b:ea:9b:b7:8e:cb:9f:28:d5:00:e8:a6:5b:
f1:ff:9a:f8:74:0c:d5:70:ab:ee:e4:22:76:b1:d2:
07:da:df:20:7c:0b:58:9b:96:fd:e3:ec:d3:ae:0f:
02:bf:39:7a:77:99:1d:2c:0d:fc:ef:fb:3d:02:2e:
6c:9c:7f:cf:a4:d6:9f:1f:42:9e:c9:b0:6c:c0:b9:
82:45:34:93:8f:ba:a3:8a:c2:b8:85:db:05:66:77:
c1:a4:e1:da:33:ec:ba:72:e8:40:2b:36:33:b4:e8:
96:74:5a:0e:e9:a2:5e:3f:14:43:e2:2e:eb:2e:0d:
ad:e6:fa:7f:cc:e2:68:55:99:cb:ba:f2:07:b4:d9:
51:5b:5d:09:12:8f:db:5b:71:6c:ae:9f:55:2f:20:
76:0e:11:9c:58:51:ee:36:d4:97:ec:19:89:c4:60:
d0:45:96:80:b7:9c:13:c4:90:7c:20:a7:d0:61:05:
fe:00:ff:8d:3d:40:6c:45:fd:43:36:72:56:33:00:
85:27:64:ff:bf:27:bd:65:3e:59:e4:93:a0:26:2f:
96:ce:d0:61:9a:98:88:a0:07:cf:b5:8a:90:99:af:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:33:74:BA:5B:56:AE:41:F0:63:1A:9E:80:53:F6:42:16:1A:C4:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ejN0ultWrkHwYxqegFP2QhYaxKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:40:a7:3b:cc:67:e4:bb:ad:e5:09:84:cb:5c:31:1d:f2:32:
7d:e8:2d:61:cd:19:40:b8:6f:97:de:f9:e6:60:42:ee:7d:b7:
e6:39:73:15:3e:06:03:63:c0:35:94:be:23:fe:f2:a6:3b:0f:
9c:cb:c2:1a:4f:c6:e1:56:0e:6d:72:a5:12:37:db:a4:72:0e:
59:64:f6:cb:65:05:d4:9b:1d:86:ee:53:99:a9:47:8a:eb:7c:
ed:6b:47:18:23:ea:c4:de:74:6a:ef:27:b1:6f:04:9b:9f:af:
de:ca:b7:6e:1e:5a:39:1c:c5:6e:43:d7:c7:8b:50:35:49:06:
44:dc:cb:2c:59:52:73:ed:77:73:01:ca:99:97:26:8e:12:af:
fa:81:a2:79:78:c2:79:a3:ce:44:a6:a2:f4:a2:c9:31:34:57:
ba:ee:7c:2f:b2:b5:00:7b:e6:f1:64:0b:d9:7e:99:f2:e1:4b:
04:fa:e5:9d:e2:2f:51:d0:43:08:08:b5:b4:c1:8c:33:4e:5b:
d1:a1:d4:d5:4a:ce:82:aa:f4:5b:75:f2:51:e6:26:68:ca:25:
80:9c:2b:8a:3d:7d:97:21:c3:58:8c:15:ec:5c:ae:66:7d:97:
d6:5f:5e:28:79:90:e0:96:14:0f:30:31:9c:52:29:f6:ea:12:
55:ca:92:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:56 2025 by rpki-client