Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ew6J4ZL_x3nN4vO6Ap9TzwCqXfw.roa
File: ew6J4ZL_x3nN4vO6Ap9TzwCqXfw.roa (raw, json)
Hash identifier: QxIN/wZspBcV0+lbOWmz5Yk6OB5dPiHczEaf7AfDxsg=
Subject key identifier: 7B:0E:89:E1:92:FF:C7:79:CD:E2:F3:BA:02:9F:53:CF:00:AA:5D:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B20F0801692062883506F56775EADFA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ew6J4ZL_x3nN4vO6Ap9TzwCqXfw.roa
Signing time: Tue 01 Aug 2023 17:04:36 +0000
ROA not before: Tue 01 Aug 2023 17:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:b20e:c901/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b2:0f:08:01:69:20:62:88:35:06:f5:67:75:ea:df:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 17:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b0e89e192ffc779cde2f3ba029f53cf00aa5dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:d6:56:b3:6e:9d:68:fd:18:99:d3:1d:66:
20:5c:32:f2:ea:24:b9:ae:80:3d:b0:56:8f:a3:39:
65:bf:e2:58:7b:d0:7b:bd:38:96:fb:77:6e:d8:ad:
f7:34:48:82:96:ea:d0:a7:9a:83:a9:34:d5:1a:70:
a7:92:e1:f1:f2:ba:ab:3d:81:88:fc:98:bb:3e:6a:
fc:00:93:0f:43:0c:bb:72:39:6c:95:f8:7e:55:3e:
bf:dd:3e:a4:e5:5b:a1:e6:6a:17:7c:98:bf:1c:91:
c2:ae:e9:34:76:97:bc:9b:bb:78:c7:76:60:57:08:
73:2f:38:5f:34:2b:59:f5:4e:fe:b1:de:5c:ca:9f:
f4:aa:a9:77:ef:c2:66:50:4c:39:88:36:59:4d:08:
e0:b6:df:84:a7:91:02:95:9f:6e:6c:3f:3e:77:6a:
b9:f7:c2:f4:8f:44:52:b4:2a:5a:0c:4c:2f:80:72:
c7:98:09:0c:3b:25:af:72:19:11:1c:46:76:dc:89:
63:da:51:31:6f:35:05:6e:3c:c2:f9:e2:82:e0:75:
de:ad:4c:cc:7e:62:e8:b5:56:37:2e:09:74:fd:45:
75:dc:46:87:ff:fe:d5:cf:25:43:3a:ff:0a:1f:12:
2c:6a:79:30:50:22:b5:e1:73:ab:02:59:b9:83:3a:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:89:E1:92:FF:C7:79:CD:E2:F3:BA:02:9F:53:CF:00:AA:5D:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ew6J4ZL_x3nN4vO6Ap9TzwCqXfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:4b:0f:64:82:b9:f2:6e:66:ef:50:91:ac:79:3e:87:0a:b3:
f1:49:46:2b:3b:5f:c7:dc:4e:68:c9:b7:40:63:0b:4d:99:0c:
7f:3b:30:6b:6a:c1:c2:ed:5a:79:75:6c:5a:6f:5f:b9:af:6b:
0b:f2:0f:9d:c2:1f:55:22:d0:6a:ec:2d:23:40:ab:b9:11:9e:
a3:fd:05:e8:9b:27:01:f4:ad:10:4d:a0:62:07:7f:8f:79:e8:
82:74:c6:c0:3f:23:d4:86:74:ef:5f:92:23:cd:23:3f:cd:af:
13:9b:06:17:71:87:09:d9:e1:53:3e:c1:91:3a:3a:c7:dc:1b:
93:15:f1:d0:f2:47:9d:24:5d:f9:c7:16:7a:1f:77:79:d3:b7:
2c:0e:75:12:48:04:33:08:47:8a:0a:a3:62:6e:c5:42:e0:0a:
3c:ee:5d:d2:45:65:8b:76:64:f1:67:cd:1b:70:42:15:8c:9b:
9c:6b:93:c9:73:ad:e8:fb:7f:6e:6d:3a:cb:97:5f:8a:d0:72:
2f:34:7e:ba:1e:7b:ce:b6:95:bd:77:c1:a8:f5:64:cb:48:d9:
3f:21:71:b4:a2:13:c6:af:bb:42:15:7a:60:23:30:46:e4:4c:
1f:6e:b0:66:3f:ca:e7:d4:71:32:47:c6:f9:df:bd:62:b7:cb:
fd:e9:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:58 2025 by rpki-client