Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAfFRxv-JIkps3VdQQeD1EkL4Rg.roa
File: EAfFRxv-JIkps3VdQQeD1EkL4Rg.roa (raw, json)
Hash identifier: MrFbpI/1+czDYAsHYVBvCbB4nZJjXAWG4D4dP2n/Huo=
Subject key identifier: 10:07:C5:47:1B:FE:24:89:29:B3:75:5D:41:07:83:D4:49:0B:E1:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A37863EEEECF5E4C10C3FACFC277411A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAfFRxv-JIkps3VdQQeD1EkL4Rg.roa
Signing time: Sun 27 Aug 2023 15:04:19 +0000
ROA not before: Sun 27 Aug 2023 15:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:3786:2480/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:37:86:3e:ee:ec:f5:e4:c1:0c:3f:ac:fc:27:74:11:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 15:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1007c5471bfe248929b3755d410783d4490be118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:bd:9a:64:e6:bc:9a:50:ea:f2:f7:fc:04:
ff:8a:e6:f0:97:3b:1a:d9:e9:41:0b:04:e2:2f:f8:
a0:d5:40:e1:e6:08:7d:12:91:4d:8e:1e:64:ec:f8:
f0:2a:23:dd:6e:e3:a2:52:1f:94:7d:6e:e6:3f:85:
2e:ff:47:bc:52:98:81:a3:bb:98:62:2f:7b:fb:e6:
80:ba:34:cb:ab:7c:0e:5c:e4:74:99:e8:8b:e8:86:
0f:a9:35:d2:19:eb:e1:cf:e4:03:76:83:dc:78:13:
57:8e:e8:25:3e:f0:1c:ff:16:d6:b2:26:6a:4d:69:
75:49:ed:c3:c5:c1:3b:6a:e5:1d:45:99:0d:9a:4c:
be:4e:76:f8:0d:e8:93:05:2d:e8:f5:f0:2e:46:bd:
95:cb:f5:32:2f:4d:3a:2c:ab:39:49:c3:03:a8:f1:
18:9e:c2:74:5c:28:a6:88:91:09:bc:76:d9:d3:78:
39:ec:d7:07:11:89:cd:3f:17:e1:60:12:44:db:54:
96:44:13:b3:7e:a1:86:98:48:ea:13:94:65:6d:d6:
f2:8b:c8:6a:10:6d:6a:ac:4a:0d:32:db:4e:02:2c:
ee:47:de:da:dd:5d:6e:85:d0:77:f5:f9:c9:75:21:
e4:75:dc:6d:bd:ea:10:89:9a:46:84:1c:de:61:ab:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:07:C5:47:1B:FE:24:89:29:B3:75:5D:41:07:83:D4:49:0B:E1:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAfFRxv-JIkps3VdQQeD1EkL4Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:ac:ca:6c:a1:e0:da:01:ec:7b:7d:fd:b0:c6:ab:37:cf:ee:
c3:45:1c:2c:8f:99:14:1e:f6:8f:7b:62:7d:bf:af:9d:c4:46:
1c:ab:b6:fd:9e:5b:c1:f3:8f:56:25:2c:a8:cc:21:12:d9:3f:
ce:59:37:1c:29:15:fd:2c:e2:2c:b5:42:eb:8a:cd:8f:95:72:
1c:2d:30:9a:47:30:9e:0c:d5:fd:c1:ea:2f:31:ff:86:c3:6c:
28:dc:19:75:1f:49:69:4b:52:6d:d7:ec:d5:fc:d4:69:d2:ec:
cd:39:f2:f4:e6:e4:69:dd:bf:69:1f:12:a9:a5:d2:d7:0b:f3:
c7:ad:6f:bc:02:fd:2d:51:7d:c8:0b:c3:7d:5d:ab:fe:3f:c9:
56:a8:58:22:1d:5c:e9:86:7c:33:e3:c4:0c:d9:ea:f5:95:1b:
2e:0e:23:b7:0f:09:09:5d:b7:09:74:28:fc:45:72:c4:55:73:
5c:8a:25:e7:03:21:a4:62:27:88:dc:5f:48:45:97:97:11:cc:
1d:00:69:7f:3d:24:6e:82:77:ac:15:ef:9e:c0:0d:7f:a1:01:
3e:79:f7:1c:ef:7b:5d:f3:13:cf:e9:aa:3a:cf:23:4f:40:2e:
a5:3d:bd:a7:f6:09:a9:53:1d:35:a4:e9:70:04:4f:da:7f:3e:
b3:69:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:22:41 2025 by rpki-client