Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ekwqewWrmAEmMiarOPM0iJfYH6w.roa
File: ekwqewWrmAEmMiarOPM0iJfYH6w.roa (raw, json)
Hash identifier: pQR0sz4OLugb3N756TcT4hBxk+neg7U/Zozi6B9m4Nc=
Subject key identifier: 7A:4C:2A:7B:05:AB:98:01:26:32:26:AB:38:F3:34:88:97:D8:1F:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F325059F25F62125F07F76B6BD8FEBB3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ekwqewWrmAEmMiarOPM0iJfYH6w.roa
Signing time: Thu 08 Dec 2022 19:10:00 +0000
ROA not before: Thu 08 Dec 2022 19:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f3:25:05:9f:25:f6:21:25:f0:7f:76:b6:bd:8f:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 19:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a4c2a7b05ab9801263226ab38f3348897d81fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:56:bb:75:3f:f1:e0:d4:6e:d3:dd:0c:84:
8d:5b:a2:f5:98:9c:53:6f:e5:7d:d9:d4:a5:14:0e:
d8:dc:6b:ce:f8:c7:85:40:d8:f8:d0:1e:85:76:71:
da:b8:b1:69:68:8c:93:91:2d:e8:b6:73:75:67:b2:
7a:a1:8c:c5:13:f0:31:38:f6:27:8a:d3:c9:ca:af:
0f:1a:22:09:62:d7:7d:19:b1:16:5d:af:39:63:a8:
03:88:e7:cd:d0:c7:cd:4d:78:de:03:0b:6b:bb:de:
a3:df:db:eb:3b:a2:2c:d9:6f:b5:e9:ed:80:00:f4:
f5:5d:c1:ff:f7:7e:9a:3a:7a:13:72:e1:8f:76:af:
8b:46:74:0c:60:c9:1c:dd:c6:0e:9f:c3:f7:44:ba:
d2:f7:b2:90:36:cc:dd:61:f9:68:2f:c7:e2:7b:b8:
ac:a9:0a:22:51:6c:6d:88:3b:ca:45:b4:a5:04:d9:
d1:b8:37:ca:b3:80:29:f0:36:e1:dc:5d:f6:bb:62:
e5:fa:47:88:a8:e7:51:40:0a:01:d8:95:38:80:26:
11:6c:d9:c3:3e:0f:f5:79:8b:ed:0f:57:77:25:99:
65:29:01:c0:47:f8:98:87:e9:d1:25:79:ae:8a:e4:
e2:31:7c:bb:ae:71:66:d7:c0:d3:03:ab:0f:d7:7b:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:2A:7B:05:AB:98:01:26:32:26:AB:38:F3:34:88:97:D8:1F:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ekwqewWrmAEmMiarOPM0iJfYH6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:58:80:0b:96:01:01:19:49:4a:f0:96:7c:c6:f7:4b:9d:2e:
14:6f:ed:23:ec:1f:4d:c5:95:51:d7:d0:65:f4:a5:e3:21:27:
e7:6c:56:63:65:46:ce:1b:3b:92:71:f1:4a:83:8c:0f:44:de:
82:6d:8b:03:2b:3e:93:f1:b2:e8:a6:43:40:f7:1e:19:07:f2:
0c:52:42:ea:d6:01:57:7a:7e:db:52:eb:d5:d0:e8:41:07:d6:
6a:57:3a:3a:fe:8b:eb:88:9d:14:50:ac:8a:b2:8f:47:1b:eb:
4a:7e:33:8e:b1:40:c0:a1:b8:90:42:d6:04:f0:78:e3:31:80:
53:d1:9a:41:8e:07:10:67:70:d2:d8:21:ee:67:7a:fe:9e:6c:
89:9c:1d:95:5f:01:89:fc:75:7c:0e:83:38:d5:98:25:d1:d0:
8b:88:c8:38:81:e6:76:91:85:e2:1d:a6:a7:36:e3:e9:29:4b:
78:f7:bd:27:a8:f4:6a:23:27:56:35:69:a6:eb:ff:b8:57:92:
d6:ce:5d:58:be:da:63:e8:4c:67:9e:e3:b3:ad:42:08:4d:75:
77:5c:ea:fc:4e:86:52:dc:a7:3c:f8:ef:2f:e1:16:c6:89:fb:
10:6f:43:79:8e:71:7e:f3:81:be:de:fd:a6:45:c9:ca:94:48:
0e:b3:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:21 2025 by rpki-client