Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/emKun8t_lb2ERdg9y5xFSziQGMg.roa
File: emKun8t_lb2ERdg9y5xFSziQGMg.roa (raw, json)
Hash identifier: GtVarvjVUCEzVZIsEvl8G5sM43vce4VVee6oW+x7BdE=
Subject key identifier: 7A:62:AE:9F:CB:7F:95:BD:84:45:D8:3D:CB:9C:45:4B:38:90:18:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 86BC127C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/emKun8t_lb2ERdg9y5xFSziQGMg.roa
Signing time: Tue 24 May 2022 01:12:29 +0000
ROA not before: Tue 24 May 2022 01:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260472444 (0x86bc127c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 01:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a62ae9fcb7f95bd8445d83dcb9c454b389018c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:a4:ce:f0:8a:6a:3a:df:b4:45:07:e0:3a:
0e:70:88:00:d5:d0:d4:c1:48:14:82:31:6e:19:54:
e8:1d:a6:e0:7d:83:02:3c:78:ed:59:ab:11:95:fe:
ce:64:a8:b1:05:23:a1:f1:b3:0e:51:48:fc:66:07:
e1:c3:77:9e:47:49:23:7f:ba:79:21:cb:56:43:f4:
e7:2f:f6:c4:ef:29:93:c0:f8:3c:48:51:0f:d9:67:
9e:80:c9:48:25:97:c7:58:70:5f:9a:ae:03:18:ab:
37:ea:e0:4a:29:f7:81:6d:3f:1d:f0:c6:ba:bb:d1:
fd:64:83:e7:e3:50:e2:ed:98:61:2e:85:a0:84:2d:
53:72:cb:d4:f1:ec:40:00:fc:a4:eb:2d:e1:5d:23:
4c:df:7c:37:5c:16:91:44:5e:60:99:6c:e7:5d:7c:
60:a1:2d:35:e5:86:78:cf:27:a0:6c:58:0a:f8:8c:
46:dd:86:cf:a1:e5:ea:41:bc:9a:79:47:34:48:91:
81:fa:c1:20:28:9e:68:de:4b:8d:9f:2a:ef:92:f5:
1c:0a:ed:12:9a:2d:06:cb:86:ee:a8:3b:60:70:d2:
7b:cc:79:16:90:11:45:dc:4f:6b:4a:cc:35:c7:69:
0a:61:1a:12:0e:e4:4e:69:57:0d:f9:17:cd:d1:4c:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:AE:9F:CB:7F:95:BD:84:45:D8:3D:CB:9C:45:4B:38:90:18:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/emKun8t_lb2ERdg9y5xFSziQGMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:cf:2f:66:d5:5c:40:11:a3:cc:0d:78:b5:aa:cd:bf:99:e6:
b0:c9:a0:b0:22:64:28:1a:78:1b:93:f8:f4:0b:08:db:5f:14:
06:a0:56:9c:e7:df:c1:96:e1:d2:a5:e2:85:d2:6c:5c:a3:a8:
8b:37:e4:93:f9:89:df:5e:47:a3:7a:12:1a:02:3f:40:b1:91:
60:3e:c4:55:13:ea:61:87:4b:d1:99:54:e4:b4:db:a1:ee:86:
46:0f:b1:80:1c:a6:76:2b:2a:10:37:d9:e0:78:32:37:c8:a6:
6f:72:11:2b:6c:e0:1e:15:77:97:80:1c:85:81:35:60:d3:89:
46:d7:5a:28:f8:e4:4e:96:ea:5d:91:93:31:be:bc:9d:79:e4:
e9:6f:d6:76:61:b4:3f:63:53:8a:c8:61:08:d9:2d:1a:69:a8:
1c:64:05:67:e0:05:ed:d5:2b:33:2d:33:16:1f:b1:aa:f8:05:
c7:c2:ad:29:9f:40:a8:04:f3:48:3f:14:e3:ac:60:c4:dd:e7:
a7:7a:14:92:b3:b0:08:34:b7:2a:da:fb:f4:dc:51:91:72:5f:
08:b4:e2:05:81:13:fc:9b:22:d4:ec:9d:72:0a:e9:0c:88:c3:
32:f0:77:89:4c:52:73:9a:a2:eb:3d:9a:29:dc:c2:9e:fe:f6:
36:69:bc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:08:49 2025 by rpki-client