Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/elpNetjHKI53I_EIQrpCywXl3Tg.roa
File: elpNetjHKI53I_EIQrpCywXl3Tg.roa (raw, json)
Hash identifier: 6NcUMP/I5jtbzKqF4+3Ejxzgv26Lr5vdwzYBxylfhw8=
Subject key identifier: 7A:5A:4D:7A:D8:C7:28:8E:77:23:F1:08:42:BA:42:CB:05:E5:DD:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018971819C9338ADF264DF43047233020E69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/elpNetjHKI53I_EIQrpCywXl3Tg.roa
Signing time: Thu 20 Jul 2023 04:14:26 +0000
ROA not before: Thu 20 Jul 2023 04:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:71:81:9c:93:38:ad:f2:64:df:43:04:72:33:02:0e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 04:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a5a4d7ad8c7288e7723f10842ba42cb05e5dd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ed:7d:c8:e2:1f:a7:ae:9e:34:60:73:81:5e:
90:13:f5:13:14:9e:7e:b7:bf:4a:6e:30:d6:5d:44:
00:b1:d4:a6:12:24:06:77:22:3d:27:4d:2d:53:33:
87:ac:98:81:bb:ff:a3:be:9d:7e:56:df:7a:60:86:
85:22:cd:67:7a:98:7d:86:04:e5:64:c9:d5:d0:a1:
53:77:78:2f:5a:02:52:0a:78:56:bf:f0:06:ea:34:
87:8b:50:bf:b3:9d:3a:34:53:2f:5c:91:8f:b9:7a:
9c:52:33:fb:62:64:f2:11:8d:9c:7d:50:56:36:ab:
fe:96:b7:2d:da:aa:21:3b:0f:a4:da:03:e0:8f:ff:
f8:9e:e0:43:ad:c0:fe:fa:d9:d0:0e:47:72:79:b3:
70:37:34:32:56:65:65:a8:45:38:ee:34:a7:2b:64:
72:2c:76:4b:8d:e7:22:92:0f:ff:92:d0:93:37:d8:
61:05:a0:f2:d4:2a:ec:92:ee:e9:35:7f:1f:e4:e3:
b3:70:8c:6b:35:58:9a:d7:86:12:17:17:2f:cb:ad:
95:c6:39:47:67:38:82:49:52:39:30:a7:9b:40:8f:
a4:67:b4:e2:25:be:c5:83:6b:f7:17:58:d6:f6:e2:
d4:d2:7f:d0:63:5e:2e:c8:98:12:a3:47:51:01:bb:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5A:4D:7A:D8:C7:28:8E:77:23:F1:08:42:BA:42:CB:05:E5:DD:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/elpNetjHKI53I_EIQrpCywXl3Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:88:ae:e9:eb:e7:fc:54:33:83:34:43:cd:03:40:3f:6c:2e:
0f:06:35:af:b8:12:07:0c:a1:09:1f:f4:d1:b1:47:f9:b9:cb:
47:f4:bf:13:bb:34:33:c9:d2:f8:17:6a:76:6d:ec:2e:eb:f7:
23:04:ab:3f:e6:b1:89:61:3d:3b:9e:77:31:1d:ab:b6:05:47:
06:06:2d:57:ea:cc:8d:cb:de:5c:ce:88:3f:e8:02:59:16:66:
cd:82:0b:93:27:7f:32:9a:f2:56:ea:31:fc:ff:f8:e4:ad:16:
a3:98:54:cb:65:26:94:3b:0f:06:c7:05:0b:6b:46:ab:9e:3f:
a2:28:d4:b0:c8:98:d4:de:80:62:7e:41:b2:c8:18:82:54:61:
20:6f:56:0b:91:45:cd:ac:9a:c6:fa:bf:bd:01:ac:03:29:1b:
a4:af:19:5e:28:a8:e6:c7:e0:2e:b5:87:6e:cb:e4:4f:32:59:
a8:70:53:7a:68:2a:c9:76:7b:03:26:fe:6c:ea:59:a2:a0:99:
66:bd:5b:18:fa:09:1a:60:34:66:39:44:a0:89:f1:f9:b9:11:
dc:ed:26:98:33:60:86:c5:2e:50:d8:15:2e:0d:c9:67:e7:13:
d4:79:20:98:7f:6d:18:4c:53:c2:7f:7a:7b:90:aa:a7:0e:f4:
b5:cf:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:12:13 2025 by rpki-client