Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/esuTv000Jn7ySs3XJedZR1eFU5M.roa
File: esuTv000Jn7ySs3XJedZR1eFU5M.roa (raw, json)
Hash identifier: TfiHEUDV62xNvN+NlZd1rA6Gf9MFfWEcktEhNLDYK0g=
Subject key identifier: 7A:CB:93:BF:4D:34:26:7E:F2:4A:CD:D7:25:E7:59:47:57:85:53:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01837610FEB4AB50063A09E2F179808DF245
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/esuTv000Jn7ySs3XJedZR1eFU5M.roa
Signing time: Sun 25 Sep 2022 19:12:48 +0000
ROA not before: Sun 25 Sep 2022 19:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:76:10:fe:b4:ab:50:06:3a:09:e2:f1:79:80:8d:f2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 25 19:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7acb93bf4d34267ef24acdd725e7594757855393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:44:b1:52:50:a8:55:b7:c3:e0:09:22:65:
af:e0:31:0c:e6:d2:53:8c:f3:6a:57:d0:71:4c:69:
b3:37:61:b7:8e:cc:a8:4f:89:9f:6e:f2:03:90:19:
f3:17:c4:2b:e2:7f:cc:dd:28:8f:86:87:c6:1c:d4:
23:e8:bc:fe:77:e2:9b:54:fe:30:68:06:a1:cd:9e:
a7:68:94:85:6a:3d:f8:19:18:cf:6c:fc:b9:84:7d:
6f:c0:9f:01:b2:93:38:6b:f9:32:50:5c:85:03:ed:
bb:04:75:c1:0e:1d:26:97:c7:7d:78:08:d0:72:b3:
1f:e4:08:7e:25:88:34:6f:40:a3:1f:6f:8e:8f:88:
8a:bb:66:4e:a8:e4:82:6a:34:5f:c0:ca:30:fa:19:
79:fb:04:7e:7c:00:a4:15:bc:45:ee:4c:ca:8a:13:
42:14:c9:8e:7f:9b:d8:76:4b:dc:bb:74:c5:f5:50:
9e:16:15:d7:ab:70:5b:98:54:70:a6:75:85:43:09:
9d:f1:39:53:69:fb:87:69:1e:a1:54:3d:ea:08:a6:
47:dc:74:50:42:80:4e:51:af:64:2e:3d:7c:d1:89:
f1:9c:da:6a:ca:ba:fc:f3:ed:3a:40:83:10:39:a8:
c2:02:84:bd:6e:de:9a:fc:a4:31:21:a2:41:5e:32:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CB:93:BF:4D:34:26:7E:F2:4A:CD:D7:25:E7:59:47:57:85:53:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/esuTv000Jn7ySs3XJedZR1eFU5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:29:18:ac:c4:c7:8e:55:25:32:be:df:2d:8d:35:bb:8a:fe:
26:14:f4:0f:88:94:cf:aa:1d:4f:50:b8:7b:fb:c2:46:02:21:
49:ae:be:87:d0:a0:1f:00:5b:2f:a7:3d:37:b4:39:42:2a:d3:
fb:cf:05:18:3e:53:78:90:13:1b:c4:b5:a9:7f:a7:cf:92:cb:
b8:92:a0:db:45:3e:5e:7e:ef:f3:17:c0:fd:55:5b:be:0c:63:
0e:38:bb:21:56:33:01:8d:63:06:31:52:2c:0c:8e:d2:16:b2:
36:90:dc:12:10:f8:00:65:a6:61:3c:7b:34:ea:52:8a:61:fd:
58:94:a7:fa:3e:50:03:8d:36:48:bc:cc:c0:5c:08:2d:85:d9:
30:d8:80:7e:31:cf:5e:fb:96:e2:3d:df:67:85:f9:da:36:69:
ac:0a:a2:d4:2c:8b:fc:bd:64:b7:7e:ab:21:78:54:dd:8d:9d:
3f:82:bc:bf:71:7f:d2:46:76:9f:af:2e:15:82:9b:2b:65:27:
f6:89:fa:98:74:7f:3a:05:11:0d:4e:f1:b8:35:7a:d4:51:50:
3a:ed:1e:27:01:a9:f2:92:0a:a9:74:b2:fc:08:e2:f9:2f:8b:
24:17:55:67:e7:b0:d3:69:db:fd:56:80:93:50:0e:e7:bd:0a:
87:3f:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:26:12 2025 by rpki-client