Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eoOIJZV3rYQdh7685ycEBw7H3CM.roa
File: eoOIJZV3rYQdh7685ycEBw7H3CM.roa (raw, json)
Hash identifier: KylL8kdoUnBSeskqZTql13Ji2RbU3cbQgs5/s4GY9RQ=
Subject key identifier: 7A:83:88:25:95:77:AD:84:1D:87:BE:BC:E7:27:04:07:0E:C7:DC:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881239AC0A0D1379B5EAF1D106B3A5CB10
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eoOIJZV3rYQdh7685ycEBw7H3CM.roa
Signing time: Fri 12 May 2023 23:09:09 +0000
ROA not before: Fri 12 May 2023 23:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:12:39:ac:0a:0d:13:79:b5:ea:f1:d1:06:b3:a5:cb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 23:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a8388259577ad841d87bebce72704070ec7dc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:9c:2a:17:9d:7a:cf:5c:50:c3:8c:48:00:
8c:a1:80:5c:21:43:d1:80:ca:b3:93:82:14:30:d9:
0e:1d:4c:29:27:63:2e:a7:c5:83:30:f4:3f:36:5f:
fe:43:40:8c:e7:52:64:7b:be:ee:01:76:47:85:9d:
ec:fb:19:d9:76:97:bd:8a:22:35:58:33:fd:0d:4a:
8e:51:05:03:39:63:64:fb:34:de:54:38:b3:7c:5e:
0c:15:ee:80:28:67:70:16:a9:ff:dd:3b:44:3c:61:
b6:98:0e:71:60:87:4c:d3:e2:12:7c:42:56:58:0c:
f7:69:ea:68:79:85:ed:24:3a:f8:e1:21:0e:ef:7e:
47:4e:74:e6:49:b6:50:b6:fd:cf:19:6b:d2:52:07:
c7:92:41:8a:7a:31:bb:24:92:cc:da:01:c2:3b:7a:
1d:ba:04:b8:3f:d3:82:51:21:af:bf:28:00:d0:5e:
76:21:dc:a2:c1:64:4c:9a:54:06:91:fd:84:50:00:
e7:00:00:91:42:ae:5e:e9:e0:0d:80:c0:1a:aa:7a:
c5:30:bb:bb:4e:a2:3f:45:0a:61:91:bb:40:7a:05:
d6:83:22:90:79:25:62:bf:e4:d0:b4:be:f1:cf:e1:
b9:05:86:25:f5:08:7d:68:a4:40:f1:d8:5c:66:8b:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:83:88:25:95:77:AD:84:1D:87:BE:BC:E7:27:04:07:0E:C7:DC:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eoOIJZV3rYQdh7685ycEBw7H3CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:62:dd:ff:28:bb:48:63:3f:2a:26:60:48:8d:4f:d7:f3:85:
20:b1:c2:be:09:d1:60:fb:1a:bf:ac:3f:9a:ef:b6:bf:45:14:
7a:88:39:4f:99:6f:b3:2a:85:d1:f8:2e:d7:b2:08:61:29:60:
5a:1f:b8:62:ad:df:aa:18:40:e5:e7:c3:57:dc:c4:ae:fb:34:
c4:7e:95:82:86:db:04:b5:55:45:d8:f9:b3:a0:cd:3f:7d:31:
a3:5c:73:2e:79:bc:13:11:76:98:e3:f2:85:c1:1e:f5:24:40:
69:c7:d0:2b:d6:63:d2:b1:36:6b:e0:5d:32:12:e1:47:b7:7c:
ae:fc:fc:e1:2c:e1:dc:86:06:1c:15:bb:2b:f5:3f:f1:7e:fc:
23:97:72:58:00:5c:87:27:9b:fe:67:76:8d:8f:82:f6:50:f4:
9e:05:93:06:a8:bc:cb:a7:1d:f3:64:a2:60:c9:1c:5b:09:65:
3a:89:67:1d:96:af:bd:db:e6:94:40:f7:2f:d0:ef:b6:43:85:
df:66:40:29:81:86:2f:63:d8:07:e0:22:20:71:e1:1a:44:e6:
cc:49:d9:a4:05:5e:dc:9c:c0:7a:9b:ea:58:7c:6d:db:58:14:
44:d2:49:f2:d3:d9:3a:fd:b6:6d:1d:66:f7:8f:a4:2f:bc:45:
9f:77:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:54:18 2025 by rpki-client