Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/elyBCzMBFjNuIK6wZQGRtX6zFHM.roa
File: elyBCzMBFjNuIK6wZQGRtX6zFHM.roa (raw, json)
Hash identifier: cYKYeCljfggVB0RKLXlk1BUFiUWhSUS2tAm601ejZj4=
Subject key identifier: 7A:5C:81:0B:33:01:16:33:6E:20:AE:B0:65:01:91:B5:7E:B3:14:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 90E197CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/elyBCzMBFjNuIK6wZQGRtX6zFHM.roa
Signing time: Wed 29 Jun 2022 12:10:02 +0000
ROA not before: Wed 29 Jun 2022 12:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2430703563 (0x90e197cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 29 12:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a5c810b330116336e20aeb0650191b57eb31473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:85:aa:78:4f:8b:b0:e3:09:4e:d5:d6:b5:
08:e6:4f:73:08:9b:a0:3b:78:78:7c:4e:0d:99:33:
16:eb:4d:01:a5:81:9f:53:46:48:31:18:cd:24:03:
08:db:b2:c0:13:fa:21:95:c4:af:fd:07:ae:59:69:
2c:7b:6b:f9:ca:14:76:54:4c:93:df:e9:ec:cf:9a:
3d:7c:a2:ff:d8:90:a0:03:b1:ea:03:8d:a4:2e:91:
5f:ed:f7:9c:de:76:4a:77:47:56:de:8b:9f:2a:48:
3b:6f:b4:a0:a0:e1:23:be:7b:53:16:2f:0a:80:7a:
0f:6f:26:35:7b:97:bb:ab:1e:0c:67:e1:e5:c0:45:
52:59:4b:85:d1:71:96:9c:52:ee:d4:b4:f0:83:14:
7e:32:ff:36:ea:01:10:aa:88:fb:db:d7:77:49:3b:
2f:f2:ec:34:bb:59:1e:7f:90:39:60:60:a4:ad:f7:
2b:97:b6:5a:e4:b5:03:d3:7f:a4:8f:82:80:14:26:
4d:5c:30:50:27:3b:8a:3d:5d:26:a8:37:be:14:af:
33:85:41:ff:d7:30:08:f7:5e:dd:96:eb:d1:d1:61:
ef:ee:a6:50:a1:3d:82:82:d5:cc:46:a9:42:81:45:
5f:df:e2:fb:18:7c:6d:79:37:1d:71:87:67:b7:79:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:81:0B:33:01:16:33:6E:20:AE:B0:65:01:91:B5:7E:B3:14:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/elyBCzMBFjNuIK6wZQGRtX6zFHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:56:19:9c:09:f0:0f:c5:6c:8a:c7:d0:7e:f0:6e:95:eb:ce:
d3:0d:9e:4a:62:f8:c7:86:c0:66:96:48:ab:2c:03:4f:03:32:
ab:b6:ca:2f:40:2e:19:36:d8:60:3d:0a:5e:a4:30:a5:02:2a:
75:ac:3b:60:d5:b8:4d:8f:0e:fa:1c:65:de:5a:50:4f:f4:42:
2b:8b:5d:da:06:3a:84:76:bc:fb:6b:ab:2b:ce:bf:35:4d:f7:
d8:b9:40:e7:2f:bd:a0:aa:ee:4e:12:a3:a5:b2:27:cc:b0:47:
ac:e1:47:0d:2d:76:ae:81:83:81:69:e9:f2:cb:ef:af:9f:ef:
97:74:7d:e3:ed:ce:e1:f5:27:ba:f1:1c:ab:3f:fa:2d:28:92:
40:85:cf:5c:5a:31:31:49:c4:34:e0:cd:d4:93:5b:07:2e:f0:
20:98:65:4b:f7:0a:93:6d:fe:8b:00:79:55:ac:31:ac:b9:55:
c6:c2:69:d4:67:8d:a2:cb:38:19:a0:6d:a3:aa:47:fb:81:de:
52:d5:b2:73:4a:80:b7:db:ee:c5:fe:f2:35:b9:8c:df:8c:b4:
c7:72:cd:29:71:a2:7b:ac:9f:37:52:ca:07:41:e7:c5:48:cb:
8c:97:71:3e:93:69:31:64:86:00:09:48:49:69:28:ac:ce:f5:
8b:df:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:14:29 2025 by rpki-client