Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E0BD1W1djNHl-rhPo_Fl4KZTLxc.roa
File: E0BD1W1djNHl-rhPo_Fl4KZTLxc.roa (raw, json)
Hash identifier: uF8FP4Vb7G7riV8NYDIJyQ1/5Sc0PTcxKqCaDA77Cjc=
Subject key identifier: 13:40:43:D5:6D:5D:8C:D1:E5:FA:B8:4F:A3:F1:65:E0:A6:53:2F:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A5438012D60EF1A83E1053B4C67CA245
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E0BD1W1djNHl-rhPo_Fl4KZTLxc.roa
Signing time: Fri 03 Mar 2023 02:18:29 +0000
ROA not before: Fri 03 Mar 2023 02:18:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a5:43:80:12:d6:0e:f1:a8:3e:10:53:b4:c6:7c:a2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 02:18:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=134043d56d5d8cd1e5fab84fa3f165e0a6532f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:ab:2b:ea:a2:5e:2d:dd:42:d8:81:cc:f2:
5f:6c:b1:3f:89:9e:58:78:44:99:78:16:b1:e1:0d:
b1:31:98:c4:1c:2f:88:f7:b1:5e:25:a0:c6:ac:f3:
7a:0a:4e:07:6b:76:7d:94:58:1a:fe:8e:89:67:bb:
23:f1:55:98:3a:45:dd:26:1d:94:3d:6c:93:7a:a9:
08:4f:98:38:eb:c8:8c:d1:25:0b:f9:50:d7:74:1c:
56:8a:fe:6b:fa:0f:80:96:ef:03:b7:3d:79:1f:8c:
c4:43:67:47:bd:34:b9:ef:83:88:fe:eb:65:76:37:
6b:f6:2c:99:ab:a3:68:35:dd:f5:61:a9:64:19:6e:
ca:19:83:c7:eb:f6:54:9e:9c:76:13:c1:33:82:f2:
99:49:39:1d:81:73:4a:af:0b:21:b2:0a:75:64:83:
73:dd:5c:af:63:5c:93:d6:7a:c2:0b:4e:81:42:e5:
cc:fa:dc:dd:fa:5b:0e:96:19:4b:76:4a:1a:70:b0:
4d:23:49:73:96:17:5f:21:ca:f9:a3:c5:19:d1:b3:
40:f8:32:7f:6a:67:8a:35:e2:40:95:08:30:b9:72:
a7:7d:08:1e:d9:12:db:6c:3d:82:a5:90:2d:0f:42:
51:42:66:9e:4c:01:a1:14:44:61:4f:83:5a:c4:f3:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:40:43:D5:6D:5D:8C:D1:E5:FA:B8:4F:A3:F1:65:E0:A6:53:2F:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E0BD1W1djNHl-rhPo_Fl4KZTLxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:70:a1:a8:be:44:a3:5d:2a:6f:3e:21:a3:b7:d5:a4:b5:88:
c8:f0:78:21:f1:fd:a3:d2:e8:c6:18:d9:75:d7:bd:4a:96:64:
45:e1:2a:9f:a6:c0:b8:49:1f:e2:5c:75:0d:84:a2:d3:59:f8:
aa:5a:8b:a3:e9:18:ab:de:f3:2a:d7:7d:30:91:cd:e0:1d:6a:
ce:10:a5:fc:fa:73:a8:e8:70:d4:78:07:0b:66:b4:ab:55:3f:
6e:10:d1:83:1f:12:27:ea:7a:63:6f:a3:d5:0e:60:fe:28:ad:
5b:63:3d:e4:38:63:cd:08:0f:57:06:b4:c7:47:c8:ee:a2:0d:
0b:1c:14:5c:40:eb:0e:38:01:18:b3:6e:77:b4:ba:5e:db:0c:
15:3a:a8:53:3d:86:2a:ea:b7:ea:58:3b:fd:08:cc:4f:ec:e6:
1a:d7:a7:2f:8d:c7:87:60:2d:30:e8:e1:82:25:49:c0:af:a3:
ad:54:88:a2:da:d5:fe:d2:57:fe:30:50:61:8f:7d:1e:2d:3d:
de:78:60:84:b6:3b:7a:3c:87:0c:d1:5e:06:b4:31:21:33:6d:
aa:9d:e9:66:bf:04:00:a3:fe:a7:b0:9c:6f:e9:fe:0d:10:3f:
5b:e6:01:46:55:5a:7e:cb:38:52:05:3d:02:31:d0:a5:62:b6:
b4:e1:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:08:14 2025 by rpki-client