Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E8mGBfc47hloC2jUblD-O586IKY.roa
File: E8mGBfc47hloC2jUblD-O586IKY.roa (raw, json)
Hash identifier: 7xQFmf7dDr98yRPj8v+9zBoUk3ms8gWhPngUcgBCL+M=
Subject key identifier: 13:C9:86:05:F7:38:EE:19:68:0B:68:D4:6E:50:FE:3B:9F:3A:20:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854BF9858C205AB7A842CFB5910EAB34E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E8mGBfc47hloC2jUblD-O586IKY.roa
Signing time: Mon 26 Dec 2022 01:08:41 +0000
ROA not before: Mon 26 Dec 2022 01:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4b:f9:85:8c:20:5a:b7:a8:42:cf:b5:91:0e:ab:34:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 01:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13c98605f738ee19680b68d46e50fe3b9f3a20a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:d2:13:89:e0:2d:5e:f7:bc:61:7a:5c:83:
e8:6c:e7:d2:8d:1e:11:04:a6:0c:89:da:37:64:bc:
7d:19:90:6e:57:cb:85:47:a1:8c:d6:32:38:1e:2f:
52:4c:24:a6:f1:07:5f:ec:1f:fe:2d:03:a1:29:57:
52:04:53:40:91:cd:d4:c3:92:9b:c9:2c:05:3a:a8:
c7:d1:ac:17:36:02:08:ca:c0:f0:a1:e2:ea:94:d1:
d4:9d:58:7f:28:d3:ad:cd:6f:33:8f:e1:d6:89:95:
b0:e1:95:99:3d:ac:27:17:97:a3:68:a3:6d:5f:21:
14:03:11:4b:75:d6:c5:b9:8b:cb:37:f2:9f:9d:51:
d4:7d:bf:a5:59:3a:12:31:85:e7:69:42:ef:07:8d:
6d:67:36:66:64:db:c0:ae:f1:1a:94:f8:27:ce:75:
b1:f7:c1:19:ef:7e:eb:e9:2f:85:47:f9:e9:61:f1:
19:71:4f:49:62:e5:bf:56:1c:63:bf:30:6b:65:8d:
22:6d:72:05:5e:54:8e:6a:b2:49:32:40:26:52:f3:
d7:d6:e5:8f:62:60:8b:4a:6e:b2:d4:7c:54:12:1c:
ae:2d:89:19:70:44:28:a5:36:a3:e9:56:69:71:75:
99:d8:dc:18:f4:14:4f:21:1c:6f:5c:93:7f:a9:d3:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:86:05:F7:38:EE:19:68:0B:68:D4:6E:50:FE:3B:9F:3A:20:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E8mGBfc47hloC2jUblD-O586IKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:fe:48:3e:5f:37:5b:b8:1f:b7:3b:26:93:19:b2:94:dc:91:
2d:d0:37:97:6a:f4:78:00:91:56:cd:3e:67:8f:1a:f5:3a:25:
f9:25:37:e1:56:2b:20:3a:5f:b3:72:de:0c:51:2b:59:c3:31:
fb:6d:c8:17:e2:00:38:79:f1:68:59:12:09:e5:3a:d9:ee:8e:
c6:1b:8c:a0:4d:b7:21:9e:ca:44:8a:0e:5c:ff:ef:de:2c:03:
9b:cd:9e:4a:11:60:d2:0f:5b:fa:d3:8f:f9:bd:35:dd:d6:71:
d1:56:3f:ee:5d:af:c0:ca:fc:5e:81:00:55:71:ed:f3:61:12:
f3:45:9b:c9:53:53:31:1c:65:aa:fb:7d:ad:86:71:94:ce:a3:
cf:50:e3:dd:27:8b:d8:53:44:cb:fc:64:42:5d:3f:19:eb:b2:
11:16:e0:0a:b3:78:48:a5:39:0b:e8:49:4a:cf:11:7d:9b:ed:
00:e0:a6:95:e0:23:2d:97:7f:6c:c8:36:10:ee:bf:8b:1c:3d:
90:1f:22:4b:58:93:d0:26:5f:7d:da:df:b7:37:ec:86:31:0b:
71:30:ee:cf:58:3a:1b:59:80:9c:65:2b:52:79:cd:f6:e7:53:
d4:7c:8d:5e:ed:14:25:2f:45:ac:36:f5:a7:ca:01:1b:04:56:
dd:3e:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:47:32 2025 by rpki-client