Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/et8gKfLFDS6jkh_1SECi59uGFFY.roa
File: et8gKfLFDS6jkh_1SECi59uGFFY.roa (raw, json)
Hash identifier: cHkyWT3KAyw4YcWo2HcpMhuFDjfca2eLVmi1f2S6XeY=
Subject key identifier: 7A:DF:20:29:F2:C5:0D:2E:A3:92:1F:F5:48:40:A2:E7:DB:86:14:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183576574C945236CF80DF36CB4E6D4D445
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/et8gKfLFDS6jkh_1SECi59uGFFY.roa
Signing time: Mon 19 Sep 2022 20:16:50 +0000
ROA not before: Mon 19 Sep 2022 20:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:57:65:74:c9:45:23:6c:f8:0d:f3:6c:b4:e6:d4:d4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 19 20:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7adf2029f2c50d2ea3921ff54840a2e7db861456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:2a:a5:5b:bb:b4:3b:cd:66:b0:76:24:6e:
bf:e5:2b:30:7c:6a:6a:f4:b2:92:e7:b2:38:e6:37:
43:4d:87:d8:5a:db:00:ab:75:42:e6:b8:e1:74:76:
28:e2:d5:57:5b:af:92:95:cd:42:7f:8b:2d:86:95:
b1:6c:60:24:74:d5:dc:d4:e3:a8:04:27:be:ad:33:
27:db:35:9c:c9:e9:61:61:07:92:c7:36:9a:56:6c:
37:a5:5b:57:1e:d6:9e:3a:d2:4b:79:bd:05:1d:90:
ae:60:15:36:c6:43:16:01:8b:e4:59:c7:f3:25:c7:
ca:03:b4:f3:48:1b:7a:27:08:ce:6f:20:68:3a:a0:
68:fa:4d:83:b4:ab:e1:d3:0d:d3:c2:0d:54:e2:45:
46:b2:e5:ea:2c:bd:12:77:1c:91:a8:07:26:43:a8:
10:b8:49:1e:e4:15:0b:5f:a6:51:ca:5c:1a:a6:98:
c1:3c:9d:72:ec:6c:3e:ae:91:69:bc:0f:dc:8c:4a:
4d:2c:f9:a2:8e:b2:1d:e6:55:a3:0b:e1:eb:af:cf:
6c:52:14:cb:ca:3d:bc:5e:26:0f:59:ab:3c:89:90:
61:4d:00:79:01:95:23:8b:01:ce:14:b3:e3:f0:57:
56:9c:60:c7:bc:f6:0e:b8:1d:5b:56:be:b5:62:33:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DF:20:29:F2:C5:0D:2E:A3:92:1F:F5:48:40:A2:E7:DB:86:14:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/et8gKfLFDS6jkh_1SECi59uGFFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:23:7e:29:13:02:bf:18:3f:4b:10:dd:1d:f1:08:07:8c:dd:
a3:94:19:80:fd:fb:4a:4b:88:05:1f:2e:36:bb:89:e3:86:d7:
01:7e:3c:33:59:51:49:69:c4:3d:86:67:a2:db:f6:2f:65:c4:
17:da:47:71:a8:85:75:93:1c:d6:2a:c0:b5:f0:31:51:4f:c5:
43:f6:18:33:e7:36:76:57:c3:ca:f5:b4:ec:fd:c5:b6:be:ba:
fd:96:80:d0:67:60:43:0d:63:b2:0c:86:2b:ed:41:19:6a:6a:
9a:4b:84:f8:23:67:3a:8b:69:b2:ea:09:27:e6:be:57:7a:a0:
67:86:9c:c2:03:96:d2:5d:cb:39:89:93:31:8b:6e:2f:fe:89:
71:93:82:d7:0f:6d:ac:2f:ba:6b:c0:87:a3:6e:8f:29:02:9b:
10:d2:19:4e:09:d0:26:f7:f0:ba:cb:cd:36:1b:47:97:8e:f9:
84:a0:33:fb:8e:c7:7c:f3:30:4e:18:21:96:70:56:c1:31:e1:
42:3a:35:c7:42:9d:ee:30:9c:91:7e:91:b2:81:87:b3:fd:f3:
6c:18:60:69:1f:c3:0a:d9:1b:d6:fc:a7:61:ae:a0:df:24:12:
df:e9:a9:24:b9:a4:2f:00:73:ba:b5:bf:b2:ac:13:11:37:a0:
15:0b:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:24:37 2025 by rpki-client