Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ewsybhXyZYsR8ig6QMY3Rm8fHJM.roa
File: ewsybhXyZYsR8ig6QMY3Rm8fHJM.roa (raw, json)
Hash identifier: 72BMkyteZeHgSVcQT6aIwpNHwMBzlAGK7BTD+Q/U5oA=
Subject key identifier: 7B:0B:32:6E:15:F2:65:8B:11:F2:28:3A:40:C6:37:46:6F:1F:1C:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EBA161CD2FFEFE903088D311F3CCA9B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ewsybhXyZYsR8ig6QMY3Rm8fHJM.roa
Signing time: Thu 16 Mar 2023 18:14:27 +0000
ROA not before: Thu 16 Mar 2023 18:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:a1:61:cd:2f:fe:fe:90:30:88:d3:11:f3:cc:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 18:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b0b326e15f2658b11f2283a40c637466f1f1c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:c2:ee:d6:43:4d:6b:0b:09:0f:09:2c:5c:
cd:e0:c9:e7:a0:50:c7:2c:e6:18:09:d7:c2:96:1e:
94:d2:36:07:2b:04:8f:d0:fa:03:bc:51:80:04:86:
17:2f:5e:11:b1:ce:09:f6:c7:93:63:8c:ac:57:71:
27:b4:b5:29:8a:74:2d:c2:1f:f8:37:87:76:dc:fa:
82:b0:fc:0a:32:5f:47:e4:e6:38:b8:45:d1:a3:98:
20:1e:0d:ee:61:c0:d8:a1:d7:58:06:16:44:1b:bd:
20:12:66:d1:c1:bf:15:8f:17:8b:53:17:86:e4:2f:
53:21:92:4e:c9:d4:d2:e6:45:4d:66:ca:ff:e3:0a:
3a:66:9c:bd:94:97:06:7c:08:73:1f:ab:cf:f8:8b:
74:08:09:f4:76:6f:25:77:8e:25:56:b7:6b:a6:a2:
0b:98:86:54:db:24:b9:56:77:ff:65:35:65:cc:6e:
cc:b5:9d:23:22:55:15:7e:45:2f:56:a6:22:ee:ab:
db:34:d9:a6:7a:05:fd:10:eb:e8:7e:b9:95:e3:6a:
3c:11:b9:9e:ce:6b:31:ac:af:9b:b1:f9:96:eb:c4:
a2:f0:75:0e:fa:f2:f9:75:b0:e7:d6:e2:83:65:68:
47:99:c2:a7:55:5b:ed:e1:03:13:b0:47:8f:01:16:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0B:32:6E:15:F2:65:8B:11:F2:28:3A:40:C6:37:46:6F:1F:1C:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ewsybhXyZYsR8ig6QMY3Rm8fHJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:f4:d2:f8:c1:c6:c6:93:7d:db:32:ce:74:aa:b8:5f:14:4f:
32:e9:19:77:84:f0:54:d5:f1:a7:4b:ee:c4:b9:83:91:44:d0:
9a:9b:10:81:95:4a:be:9a:72:cf:20:c7:f5:06:5b:6c:84:5b:
88:f9:e7:6a:07:93:85:3c:6a:93:9a:31:e2:eb:0c:6e:c3:db:
33:ae:8e:e5:ef:af:0b:54:58:ad:56:9a:90:1a:cb:f4:b4:3d:
ff:03:5e:d5:ec:9c:49:34:6a:c8:43:31:89:4e:83:42:17:70:
cb:5b:2c:4b:8a:74:63:42:d7:8f:b7:58:1b:0a:fd:33:47:17:
fa:d8:f3:c9:31:87:f1:32:00:84:ac:d1:ac:fe:16:61:15:c0:
83:40:31:f4:60:8e:04:34:94:6d:76:9d:46:5e:35:8f:64:64:
20:40:0b:3b:4d:f9:ab:e3:7e:c0:df:d4:a2:e1:71:b6:86:fe:
29:ec:42:74:2f:c1:9c:75:3b:d4:fe:57:45:e2:eb:64:f6:78:
b7:69:5f:06:ab:55:61:23:88:f1:3a:3a:14:2f:25:35:1f:a1:
67:0d:ee:06:c4:90:f1:31:66:34:d1:df:85:c4:62:26:33:8b:
e8:dd:2b:20:75:ec:1a:3b:b7:5c:26:51:80:25:c3:95:3a:20:
45:33:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:22 2025 by rpki-client