Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/enNgQLKC-T5GJYCgI8wXT2Z3eH0.roa
File: enNgQLKC-T5GJYCgI8wXT2Z3eH0.roa (raw, json)
Hash identifier: stxBtcUIDN8SwN7ZGN9xjGcZN6Txx2M/RXgvFVLCnEM=
Subject key identifier: 7A:73:60:40:B2:82:F9:3E:46:25:80:A0:23:CC:17:4F:66:77:78:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018306B5D24F10178FC614AE2DFEAC74BB9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/enNgQLKC-T5GJYCgI8wXT2Z3eH0.roa
Signing time: Sun 04 Sep 2022 04:15:22 +0000
ROA not before: Sun 04 Sep 2022 04:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:06:b5:d2:4f:10:17:8f:c6:14:ae:2d:fe:ac:74:bb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 4 04:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a736040b282f93e462580a023cc174f6677787d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:9f:bf:4c:dd:99:ad:b4:04:40:5c:d0:9b:
1f:40:e1:f1:97:27:a2:9f:a2:51:58:93:b9:3d:e3:
95:ad:97:c8:cf:7c:f0:2c:20:4f:e6:af:18:98:74:
0c:77:b2:8b:b8:82:38:19:3c:2a:76:a9:75:d6:a3:
85:0a:cc:56:33:c9:b6:44:57:ad:68:8d:b3:aa:b0:
5f:90:9b:48:27:06:b6:cd:ab:d0:bd:26:55:85:72:
d2:a1:e9:93:7d:c6:1d:53:5f:d2:51:8c:45:40:a1:
d7:cd:0e:68:ec:49:31:17:4c:bb:6f:82:a4:87:5b:
49:4d:e5:34:9f:fb:53:3a:9a:44:c7:1a:69:96:f0:
8b:97:91:d7:21:d3:30:d7:26:81:bc:91:6a:a0:9a:
ef:00:08:25:c3:5c:f9:a1:3c:74:a4:2c:0a:dd:0e:
16:fb:25:80:e7:ed:1d:d6:d6:90:94:8f:0e:c0:a2:
13:6c:ba:45:50:25:f4:d8:09:37:00:7f:ba:62:87:
61:e0:7b:35:f5:96:19:c3:ac:d8:74:c1:18:b3:f6:
d1:f3:bb:76:00:5a:3a:48:87:0e:dd:80:85:52:28:
12:74:52:05:5d:e4:4b:9e:64:67:c9:f4:0f:1a:71:
b1:a3:ed:84:5e:ad:4a:0c:70:b2:5e:90:56:f1:d5:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:73:60:40:B2:82:F9:3E:46:25:80:A0:23:CC:17:4F:66:77:78:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/enNgQLKC-T5GJYCgI8wXT2Z3eH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:45:e2:83:91:1d:c3:77:53:54:63:d3:8a:08:31:a6:8f:84:
41:6c:bb:cd:b8:27:1c:10:d7:91:46:0e:a4:fa:23:17:b1:db:
af:f2:11:2e:34:31:5e:5b:c1:28:c3:40:9e:28:d5:54:55:7c:
59:7c:5e:06:18:84:38:2d:89:5f:62:91:1e:ce:4c:72:40:b5:
35:31:ea:52:19:27:42:c4:e8:7a:9d:48:73:a7:68:5d:20:a0:
a3:07:12:73:ef:cf:e2:46:f7:bc:5f:89:21:2f:14:b6:4e:65:
24:d7:21:ea:a0:e1:c6:17:b7:56:06:dc:e2:0d:ca:01:96:09:
27:e0:60:7b:09:41:81:5f:f1:b3:9f:e3:c3:8f:77:35:81:44:
68:47:69:11:88:a1:5b:7b:90:15:2f:ac:a9:08:52:69:c6:58:
19:f7:1b:e0:3b:f4:44:9f:a7:af:8a:ea:ac:2d:e1:97:38:c4:
c3:05:7b:ea:9e:3c:85:16:6e:2c:f5:88:1f:9b:99:84:e1:72:
ac:74:3d:5a:08:e9:f4:12:40:9e:3e:65:1f:c0:9a:f7:6f:dd:
a1:c2:45:64:58:15:cf:1a:29:c8:fc:8b:49:0e:17:f9:73:c9:
0e:81:3a:a4:aa:1e:44:95:ae:7f:80:90:17:20:94:14:5c:27:
2d:3a:9d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:08 2025 by rpki-client