Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/epb_t5_Y5DolxUXcAsldERz2RM4.roa
File: epb_t5_Y5DolxUXcAsldERz2RM4.roa (raw, json)
Hash identifier: a7YzNDcIQORqAMrq65kcATVrw3/ne8WP1M23phyP2fQ=
Subject key identifier: 7A:96:FF:B7:9F:D8:E4:3A:25:C5:45:DC:02:C9:5D:11:1C:F6:44:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186342A88D8B1C7322637C9AA644C048D9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/epb_t5_Y5DolxUXcAsldERz2RM4.roa
Signing time: Thu 09 Feb 2023 03:14:08 +0000
ROA not before: Thu 09 Feb 2023 03:14:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:34:2a:88:d8:b1:c7:32:26:37:c9:aa:64:4c:04:8d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 03:14:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a96ffb79fd8e43a25c545dc02c95d111cf644ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:64:8d:94:a3:7f:50:8f:b4:f0:ec:ed:a6:a2:
4d:6b:11:84:c0:7a:c1:39:74:09:3c:12:be:da:64:
8c:b9:91:9a:33:4f:e8:40:24:74:84:30:93:9a:d0:
04:98:e7:ee:e6:16:ec:98:bb:b8:79:5a:ad:17:50:
32:bf:2c:52:b7:9d:78:a9:e2:82:49:2f:10:bd:38:
b4:18:d5:4d:85:47:be:8a:79:92:83:58:a2:b2:06:
8e:43:18:29:6e:44:cd:5f:0f:f3:5d:66:26:5c:c0:
f1:8b:44:91:ac:ad:1d:13:ef:ac:28:91:14:71:90:
e5:08:bb:92:41:d0:6b:02:26:f8:ef:29:a7:77:19:
2d:d1:a0:17:e8:71:78:c4:c8:cd:9c:f8:86:cc:77:
94:7d:b4:a1:a0:c8:65:d9:88:0c:40:bc:12:95:74:
21:81:c4:87:08:4e:33:a5:25:db:44:91:31:59:d2:
05:bf:dc:01:26:e0:96:16:8c:9b:4e:f4:da:94:97:
07:19:9f:30:c5:e9:b5:bd:b5:9c:ba:14:1f:46:e9:
75:e4:a0:cc:01:48:18:78:c4:dd:64:b4:69:37:00:
b3:17:6f:92:62:6c:ff:ba:65:8f:82:d3:72:bc:57:
65:ba:21:59:95:d5:9e:cf:64:aa:3b:d1:4c:29:b6:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:96:FF:B7:9F:D8:E4:3A:25:C5:45:DC:02:C9:5D:11:1C:F6:44:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/epb_t5_Y5DolxUXcAsldERz2RM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:8c:cd:9f:50:f2:31:c7:e8:5f:8c:81:28:8f:60:f8:f4:cc:
ff:9c:26:81:ab:25:3a:53:82:91:ed:81:2d:87:59:e8:0a:07:
be:19:21:8c:94:5c:e2:99:54:5c:57:d6:a4:93:60:e2:e7:fe:
46:6c:6f:8e:03:f7:eb:33:0c:e3:d1:db:25:eb:57:64:a6:e4:
bf:e6:26:6d:df:ab:42:f3:d0:f1:41:d9:84:65:c4:1c:36:84:
5a:b7:a6:55:7c:54:de:71:0a:64:59:c4:73:4f:d2:da:06:21:
9a:99:02:97:dc:38:9b:93:56:e2:e7:5d:23:21:47:ae:34:89:
fd:0f:2e:9d:e6:df:2c:c0:fb:4e:6e:54:15:10:9c:97:be:99:
0a:62:b2:46:69:44:ab:1c:9d:4e:d8:db:4e:1a:48:1b:53:de:
4f:ee:3d:e7:e1:ac:79:98:71:76:df:c9:c6:40:cc:14:0c:61:
63:0c:94:90:60:99:82:58:4c:1b:73:f3:0f:71:91:ec:1e:59:
6a:75:a8:bc:41:88:35:c9:f3:41:fb:e1:e0:1c:2b:ba:19:55:
b4:3d:9d:23:c4:f5:dd:68:db:49:df:dd:28:d3:ad:77:ca:fd:
27:fc:b3:0f:1f:ee:1e:a2:ef:7d:99:9d:d7:5b:21:a7:74:08:
b2:f2:6a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:22 2025 by rpki-client