Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/euDHV47CELtubkQExoRq8vnlN5M.roa
File: euDHV47CELtubkQExoRq8vnlN5M.roa (raw, json)
Hash identifier: h7g1uKRtgJ8TNcadUXV+nUCrj4HzMp8ICESGe+DO9TM=
Subject key identifier: 7A:E0:C7:57:8E:C2:10:BB:6E:6E:44:04:C6:84:6A:F2:F9:E5:37:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F9C16504818651194223C8174AE06CEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/euDHV47CELtubkQExoRq8vnlN5M.roa
Signing time: Tue 15 Aug 2023 15:12:28 +0000
ROA not before: Tue 15 Aug 2023 15:12:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:c1:65:04:81:86:51:19:42:23:c8:17:4a:e0:6c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 15:12:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ae0c7578ec210bb6e6e4404c6846af2f9e53793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:c4:01:e4:0d:48:da:56:57:2e:4a:70:c9:
41:8d:e0:1d:f5:ec:a9:80:92:e0:4a:87:0b:55:39:
c5:ae:50:4c:6e:62:a0:d1:b5:0f:c4:84:45:f0:08:
03:72:ed:fc:dc:e3:8b:32:5f:cf:67:c1:7e:99:2b:
42:f6:98:48:9b:ec:79:17:12:39:0a:8a:f3:4b:ab:
f6:12:d6:09:68:ac:fd:5a:58:f8:d7:b7:f0:d4:bf:
46:37:ee:98:a3:f6:e5:7e:c1:be:66:90:e5:8b:69:
3c:41:09:0d:51:7f:79:bd:4a:c7:c5:d4:81:48:e2:
77:b8:d4:79:e9:e4:ac:98:dd:da:68:46:f0:70:da:
36:fd:0c:b7:7b:ac:1d:b6:69:38:20:40:21:94:c4:
76:d7:94:ae:af:83:ed:7b:ad:26:bf:72:6f:28:13:
6c:d6:42:e1:f9:35:49:4f:93:db:4d:16:4a:45:64:
0a:44:ff:43:6b:67:ab:c0:d5:02:5a:00:e6:ee:12:
60:31:42:cb:af:a3:fc:db:e1:08:61:81:44:ab:ad:
d6:ed:c4:97:0f:eb:1a:66:18:59:29:41:3e:c3:5c:
75:d4:42:99:37:7d:d9:31:d2:9b:40:1b:5a:6b:c5:
db:73:70:6b:95:a1:6f:9e:52:14:6a:65:79:e7:12:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E0:C7:57:8E:C2:10:BB:6E:6E:44:04:C6:84:6A:F2:F9:E5:37:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/euDHV47CELtubkQExoRq8vnlN5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:fb:4b:76:dd:0b:cd:dc:fc:73:ff:3d:e0:85:7d:52:10:1b:
ea:06:6e:09:75:80:32:6a:04:91:fb:a7:87:e0:78:92:e9:42:
5c:f3:39:62:0c:7a:bb:f4:3e:fe:ac:23:aa:87:9a:9b:05:df:
d8:25:77:77:33:fd:fa:e2:b0:46:1b:9f:94:c1:b1:a9:94:b8:
2e:74:b1:75:5c:c6:46:53:1a:05:50:46:03:83:d1:9f:59:33:
c8:72:7a:40:ee:cc:7d:83:8f:64:17:bf:cd:28:f0:20:10:d2:
5e:ef:75:83:da:4c:07:a8:86:7e:97:55:45:99:23:64:7b:4b:
2a:f3:d4:6b:b6:2a:65:71:54:bf:0b:57:e1:12:56:67:8f:76:
e2:6a:6c:ce:2f:c8:6a:a1:12:16:c7:3e:c5:cc:77:99:21:cd:
15:5d:7f:83:b2:e5:d5:27:ac:2f:69:c7:55:5a:29:3d:ed:64:
ce:11:03:5d:b8:a3:81:56:d9:1d:a5:84:c2:fb:e4:b1:1c:3d:
8d:08:aa:23:43:64:86:da:68:c0:2d:3b:5f:e4:de:d9:b4:87:
be:f4:a9:19:32:af:17:fb:bc:7c:1e:a9:7a:62:32:7b:18:6e:
f3:e8:d7:7f:74:a3:f0:60:d6:68:66:85:7f:e6:95:70:18:a0:
d4:bc:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:24:57 2025 by rpki-client