Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ev4yMKppbXKXzZDe8A3UbBFcTuM.roa
File: ev4yMKppbXKXzZDe8A3UbBFcTuM.roa (raw, json)
Hash identifier: F7JmZ1J4ex11aPeqhuwLwJt6vlevAkt7sGxC+5D+IxU=
Subject key identifier: 7A:FE:32:30:AA:69:6D:72:97:CD:90:DE:F0:0D:D4:6C:11:5C:4E:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855341886292507132C90E6DA614EEBDD6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ev4yMKppbXKXzZDe8A3UbBFcTuM.roa
Signing time: Tue 27 Dec 2022 11:04:41 +0000
ROA not before: Tue 27 Dec 2022 11:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:5341:1742/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:41:88:62:92:50:71:32:c9:0e:6d:a6:14:ee:bd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 11:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7afe3230aa696d7297cd90def00dd46c115c4ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:84:53:01:65:fd:19:81:c6:94:15:c3:80:
91:1d:4c:e3:d7:48:5b:01:8d:65:38:97:f4:a6:f0:
fd:95:f7:8a:60:81:34:bc:a8:60:23:65:91:85:5e:
63:cf:59:2d:dd:ac:a9:b2:85:65:9c:87:87:28:e0:
52:e0:d3:ed:bc:a0:d3:52:26:06:28:db:24:8b:f2:
71:8a:c9:3b:86:da:6b:60:b5:9d:16:00:04:a5:08:
de:97:86:da:a6:82:77:e1:00:32:1d:36:f6:03:e1:
d2:2b:dd:24:66:41:60:42:56:5f:ce:f6:11:e4:ac:
04:42:7b:d7:8f:4d:99:fb:6a:0c:ad:cf:38:fe:c0:
20:2f:a6:ee:90:f9:fe:5e:79:ca:ad:dc:e0:50:0a:
44:9c:f6:cf:94:02:6b:7a:bd:22:1c:63:4c:fd:1b:
61:d9:12:a5:85:c9:a5:be:5e:37:11:a7:db:66:d6:
db:6f:c0:47:96:db:f4:0a:e8:d0:50:b5:a4:8f:28:
00:75:3b:f7:49:bf:a4:10:b6:98:43:3e:15:7b:cd:
5d:0e:f3:f7:d4:e8:9f:da:a7:67:d7:a6:6c:06:63:
2c:6d:0d:dc:4f:79:ac:69:59:42:1b:f5:a4:ef:36:
6b:63:88:e3:ae:4c:ed:77:01:33:53:a0:25:1e:69:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FE:32:30:AA:69:6D:72:97:CD:90:DE:F0:0D:D4:6C:11:5C:4E:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ev4yMKppbXKXzZDe8A3UbBFcTuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:33:02:41:72:39:82:9c:79:18:3a:ed:7e:9b:b5:e4:0a:e6:
7c:11:05:43:f1:03:c0:91:36:83:28:f2:9b:87:87:b4:3d:7a:
aa:e1:76:79:2d:af:f1:be:ed:e6:b2:dd:df:85:b5:a1:d2:81:
41:b8:0b:f3:7c:fe:c4:7a:36:35:ac:4b:fd:61:c6:fe:b6:79:
5b:53:06:1b:52:a9:7a:8d:05:13:1f:d3:f4:f2:47:69:21:95:
5d:20:b3:60:64:88:b3:5b:29:b5:e4:08:88:c4:c7:d8:aa:48:
c2:2f:fd:2f:60:d8:67:6c:97:49:71:a1:11:b8:f7:0c:11:27:
5e:27:33:51:db:97:d7:58:79:62:80:e3:0c:d2:37:be:b5:6f:
e2:d8:67:b6:d5:a2:c7:0c:0b:00:b2:14:e9:b4:6f:02:e6:37:
7d:f5:26:ec:1f:e8:37:e3:a4:2e:98:bb:63:ae:1f:1d:34:bc:
42:98:4c:3f:bc:31:6c:f8:04:2c:ea:7c:c7:e7:8d:aa:af:87:
e2:7e:c9:55:d8:47:d1:24:23:ba:b5:89:a7:3c:0a:a7:82:a3:
fa:52:f6:f8:93:14:0b:b3:b1:72:27:c4:a0:d8:ea:8f:8e:01:
67:a8:bf:71:fd:45:09:af:5d:bf:24:70:e0:34:75:d5:42:b4:
54:d5:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:54:02 2025 by rpki-client