Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECgeAu5wMmGCPvj5OcLOagVyxfo.roa
File: ECgeAu5wMmGCPvj5OcLOagVyxfo.roa (raw, json)
Hash identifier: qUjHwZJuR2n7tehdzjdHRIzvKaUTLKUjE20ytn2W4LE=
Subject key identifier: 10:28:1E:02:EE:70:32:61:82:3E:F8:F9:39:C2:CE:6A:05:72:C5:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018665EF27978C741940E9D4DFE5E4E17155
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECgeAu5wMmGCPvj5OcLOagVyxfo.roa
Signing time: Sat 18 Feb 2023 19:10:17 +0000
ROA not before: Sat 18 Feb 2023 19:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:65:ef:27:97:8c:74:19:40:e9:d4:df:e5:e4:e1:71:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 19:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10281e02ee703261823ef8f939c2ce6a0572c5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:26:e7:0e:5f:e6:5f:59:7e:1d:c5:0a:21:
34:52:ae:c7:8c:40:41:0d:05:2e:c3:2b:78:34:52:
87:ab:8d:d0:85:99:d1:e8:99:3b:ef:c1:32:81:af:
ce:77:75:35:dd:c3:69:90:fe:2d:d2:ea:cd:5e:bd:
8b:6d:d6:3c:42:62:6a:85:7f:68:a2:9e:5c:ca:f6:
1a:b6:75:d2:d2:43:21:e8:89:bc:01:f5:88:34:14:
9b:64:0d:0f:74:07:96:a9:f6:51:bb:2b:f1:a3:e1:
d6:85:90:76:d4:12:df:d7:a8:0a:f0:92:32:33:10:
84:81:9d:05:ff:ea:87:d5:b3:dc:00:a2:9e:0b:25:
6b:07:0d:d3:3f:69:52:c7:7d:b2:72:a8:dd:d7:92:
c7:e8:d3:c6:3d:bb:76:fb:13:f2:04:b6:28:e7:4b:
90:73:3f:85:7f:43:6e:5e:46:39:63:b9:b0:26:2c:
7e:34:a5:58:40:7a:cd:0b:8b:b4:5c:32:1b:4d:53:
32:82:94:2d:e1:4d:fb:3e:44:8b:07:21:6e:f4:a0:
d9:5c:b7:5a:6f:bc:a2:5e:e8:a7:27:73:d9:9c:15:
86:80:77:81:2d:0f:34:8f:2e:e9:42:b8:39:a1:15:
cc:9c:64:47:36:9f:bf:1d:82:9e:0f:25:87:c6:c9:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:28:1E:02:EE:70:32:61:82:3E:F8:F9:39:C2:CE:6A:05:72:C5:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECgeAu5wMmGCPvj5OcLOagVyxfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:06:6c:8f:a1:8a:85:99:33:d9:01:b0:86:72:3e:e9:d8:e8:
c2:b2:81:5c:44:b7:3e:ff:c4:e8:54:c9:06:93:65:7c:6d:37:
fb:94:8a:07:cb:34:ba:21:ea:5f:eb:87:fd:9a:f2:3e:62:10:
55:99:3a:7d:03:64:6d:24:bf:e8:3d:fa:19:c4:d7:0a:87:06:
47:14:01:b2:39:a4:d9:89:48:2e:d7:b6:d7:d0:ad:0f:46:42:
69:32:af:67:41:e5:78:2a:12:16:d0:63:58:a0:09:2b:26:87:
b4:1a:9f:5b:3a:4e:07:53:2b:a5:de:3f:28:66:31:ff:2f:96:
5e:61:a9:68:29:2e:09:50:3c:12:94:ff:dc:5d:c6:65:45:89:
62:d1:7d:62:3b:09:15:1a:2e:cb:d3:e2:b8:45:fc:0d:cc:0c:
82:e3:26:67:fd:77:e3:b9:f9:8f:dd:b5:41:0f:68:07:ce:ff:
a0:a5:a1:fd:83:7b:57:5d:4f:7d:f3:be:54:68:ee:6a:5d:60:
27:50:3e:90:41:9f:5d:95:eb:f1:f7:d0:a0:a9:2c:ac:99:a8:
bb:69:b1:79:d2:47:7f:1a:e5:02:c0:8b:26:56:76:5c:37:e0:
64:89:0d:63:45:b4:22:f5:73:cb:86:50:d7:da:e2:30:81:51:
9b:0a:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:11:39 2025 by rpki-client