Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/evKnC6AXkaaWMPvpAlS8IlFFgCo.roa
File: evKnC6AXkaaWMPvpAlS8IlFFgCo.roa (raw, json)
Hash identifier: qILuQVc4wyYWgr9T4+X5dZCOgDpKLTqXLR+IW/9NESY=
Subject key identifier: 7A:F2:A7:0B:A0:17:91:A6:96:30:FB:E9:02:54:BC:22:51:45:80:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B661522C85D58A00D9862324D871B8AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/evKnC6AXkaaWMPvpAlS8IlFFgCo.roa
Signing time: Wed 02 Aug 2023 13:12:58 +0000
ROA not before: Wed 02 Aug 2023 13:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:61:52:2c:85:d5:8a:00:d9:86:23:24:d8:71:b8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 13:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7af2a70ba01791a69630fbe90254bc225145802a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:df:01:8b:f7:03:5e:ac:2e:98:11:18:93:
5e:90:90:c7:06:9b:78:99:81:ed:c9:41:a9:54:81:
1f:05:67:a1:32:fa:4f:47:14:b1:c9:5d:45:21:78:
4c:92:26:b3:71:17:90:1b:95:62:0e:14:92:c8:a0:
b6:f6:92:62:5e:ac:7a:34:02:70:a1:3f:f6:59:4f:
5f:73:aa:3b:1d:90:ab:66:50:bf:76:7a:39:d4:45:
f9:47:de:bc:22:4d:55:7d:34:b2:d5:85:61:54:26:
96:00:c8:e6:54:02:5c:eb:53:48:21:51:a2:d9:08:
87:eb:f3:10:31:af:85:ec:02:5b:e0:e4:4a:77:89:
63:9b:94:88:7a:d3:3b:2e:26:2c:31:8f:7a:34:8f:
7c:e1:d0:44:f8:57:f3:81:be:ae:7c:cd:6a:c8:0d:
ec:02:5a:f5:94:c5:33:a0:96:60:11:3d:36:17:0d:
af:c6:c8:ae:0f:09:5a:48:e1:ee:aa:c9:00:54:90:
5a:54:b7:b0:c9:4e:78:40:39:2e:09:d1:6c:57:63:
5b:66:d7:a5:50:ff:a7:fa:c1:17:ae:c1:61:08:a7:
4c:a6:46:f3:f6:d8:f4:69:d6:76:05:65:ee:30:7f:
f1:64:50:54:aa:84:82:f0:2a:3a:22:5c:25:aa:5c:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F2:A7:0B:A0:17:91:A6:96:30:FB:E9:02:54:BC:22:51:45:80:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/evKnC6AXkaaWMPvpAlS8IlFFgCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:a6:25:02:19:65:84:17:bf:9a:0d:ba:c4:3f:36:14:e3:6c:
f6:7d:a6:c9:86:fb:98:30:9a:e8:85:ea:ab:cb:78:ba:93:ec:
1f:cf:b9:ed:83:7e:1b:1d:45:49:8e:06:89:80:b5:ab:29:6b:
39:06:b5:af:de:70:6b:16:ef:17:02:32:0f:7a:41:ee:d3:dc:
d4:e7:7d:b5:92:67:df:14:34:9f:ac:2f:f7:f1:93:42:6a:ba:
23:dc:b7:31:f6:f2:d1:6b:09:e7:6f:5a:28:6f:7e:27:60:09:
fe:03:2f:a6:9c:7c:c3:e1:28:c4:de:a4:78:47:74:e9:82:e5:
1b:d9:d5:e7:27:c1:ee:55:f4:ae:8d:10:68:9b:97:14:45:be:
5d:d9:20:8a:62:38:9e:43:03:94:bb:cd:d4:61:fc:a9:ac:c5:
ae:46:f0:c7:09:4e:30:cf:b8:6d:5b:c5:e9:b6:b4:21:69:4a:
1a:ba:f1:88:d5:10:4e:79:1f:03:3e:ec:fa:7d:c1:95:a5:ce:
ad:1a:75:72:f7:ec:58:1d:01:34:59:ba:0a:e8:0c:73:6d:71:
ea:7b:bf:bd:02:a2:bc:da:26:6a:c3:e3:56:e7:9c:aa:de:53:
60:e3:64:fd:01:ee:27:df:8f:42:89:c5:16:69:08:a7:5b:67:
2c:7c:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:04:16 2025 by rpki-client