Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2EW31YH1ax5DFFgbT8HgYuh7rCg.roa
File: 2EW31YH1ax5DFFgbT8HgYuh7rCg.roa (raw, json)
Hash identifier: 3OCKu8K/CelVJ+1Eams9UL6x3/X0MPMu7pZoNc3L+ms=
Subject key identifier: D8:45:B7:D5:81:F5:6B:1E:43:14:58:1B:4F:C1:E0:62:E8:7B:AC:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BDEAECD41BDFB4D9069B8A93D3CFED97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2EW31YH1ax5DFFgbT8HgYuh7rCg.roa
Signing time: Mon 28 Nov 2022 11:06:40 +0000
ROA not before: Mon 28 Nov 2022 11:06:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:ea:ec:d4:1b:df:b4:d9:06:9b:8a:93:d3:cf:ed:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 28 11:06:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d845b7d581f56b1e4314581b4fc1e062e87bac28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:bf:0d:6a:82:c7:df:fd:c1:c3:0b:39:f3:
74:24:50:41:43:60:24:9e:57:d5:7e:c3:c8:ee:0a:
b6:d4:4c:36:3e:84:23:32:0c:a1:6e:7f:a7:a2:4b:
7a:cd:d6:dc:ad:f7:3e:e4:15:95:69:90:a0:eb:cb:
13:c9:e0:e8:d0:9e:3e:7b:ac:90:7a:06:92:1b:11:
d8:5c:9a:e9:15:8e:c8:fe:ea:f1:58:25:f4:93:5b:
6b:8c:b5:f2:79:00:b3:59:cf:b0:f6:ba:22:19:73:
00:66:eb:d4:80:e1:87:d8:8a:c6:56:10:38:eb:ec:
03:e0:2d:14:8f:b4:cd:c9:69:a3:32:88:7a:9a:33:
1d:b4:6b:4b:a1:be:ff:a2:9d:7a:82:d4:ff:90:de:
a4:d7:ab:47:ba:e5:4e:eb:ee:3f:aa:e1:74:83:72:
17:a7:c0:d6:b1:38:91:e1:b9:d6:b3:98:ca:20:a0:
6d:78:f4:9d:4c:f2:40:2f:06:b8:94:ef:a6:1b:f8:
21:88:06:70:a0:f0:f9:27:dd:e5:a0:b3:d6:73:32:
9a:dc:87:71:09:98:da:39:ae:96:c3:25:89:e8:78:
89:d4:05:c8:0b:15:54:ae:15:bf:ad:3b:5f:ab:d7:
de:f0:3d:3d:6b:dd:80:87:c0:95:b8:e5:2a:18:f2:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:45:B7:D5:81:F5:6B:1E:43:14:58:1B:4F:C1:E0:62:E8:7B:AC:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2EW31YH1ax5DFFgbT8HgYuh7rCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:98:75:61:22:87:d5:9a:47:cc:39:e5:b5:d1:50:fa:49:23:
3c:05:ac:44:b3:72:25:06:d2:4f:7f:4c:0e:71:2c:2f:4a:ef:
1f:5e:e8:79:9d:db:cb:03:7d:d5:c9:bb:f5:6e:d7:ac:f6:1e:
ee:c4:3f:dc:dc:ff:2b:bb:bc:d8:47:eb:dd:fd:e9:a5:70:fa:
91:2a:d3:e9:8e:a0:4c:b5:32:22:11:7e:7b:92:02:fb:af:1e:
2a:7d:a1:89:a4:1f:e2:e7:7a:ec:9c:45:3d:0c:a7:c1:c8:7e:
06:7c:d6:99:8f:98:38:e7:55:35:46:78:a6:fa:cf:17:6c:a5:
60:de:24:14:c0:8d:d6:71:b7:fe:40:68:35:8a:83:05:a8:d1:
db:75:9d:a2:b1:3c:b3:1b:2b:27:d3:b4:84:13:76:e4:d5:61:
64:6b:d8:25:ad:33:9c:34:ac:03:a7:29:e6:e3:c9:6f:2d:c8:
71:78:f9:a6:b7:4f:ad:05:b5:30:02:d0:d0:58:a5:3a:4d:d5:
ac:cb:c6:1a:7e:7d:ea:3b:82:46:43:93:a0:23:42:fb:b6:79:
a0:c2:25:b2:9e:cb:ce:6f:36:5e:73:45:d0:56:e4:db:ce:40:
3e:4a:de:4b:34:e7:54:bd:42:7b:48:61:ab:08:98:06:c9:e4:
37:61:3f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:19 2025 by rpki-client