Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EEwx-XIzlHAEcqYY_PksCSzMZdU.roa
File: EEwx-XIzlHAEcqYY_PksCSzMZdU.roa (raw, json)
Hash identifier: XsyrGoIWtXUyvLghId5uKmiNNRahCoX1+IvWmowe+Ng=
Subject key identifier: 10:4C:31:F9:72:33:94:70:04:72:A6:18:FC:F9:2C:09:2C:CC:65:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F3CE1358732F36B31A8997D7E935D296
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EEwx-XIzlHAEcqYY_PksCSzMZdU.roa
Signing time: Thu 20 Oct 2022 05:11:52 +0000
ROA not before: Thu 20 Oct 2022 05:11:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f3:ce:13:58:73:2f:36:b3:1a:89:97:d7:e9:35:d2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 20 05:11:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=104c31f9723394700472a618fcf92c092ccc65d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:4c:0c:28:f5:20:ba:46:30:48:b2:45:26:
e2:47:4d:e8:42:c0:ee:90:6f:25:1c:e7:be:5d:79:
0e:07:4e:7a:9b:f6:47:26:36:6d:03:e0:9e:2a:50:
16:3c:27:e8:56:3b:de:24:f2:0f:05:92:57:ba:87:
2f:7c:59:70:4d:26:63:a3:a7:3c:27:0b:a3:fb:df:
c3:e3:d4:1b:e1:dd:b1:dd:54:89:1f:51:17:3a:1e:
29:c7:e7:7c:65:c2:e6:e8:e4:c5:63:c2:dc:47:72:
7f:64:ec:68:67:45:65:ad:87:24:da:ea:f6:a8:69:
46:c8:df:bd:fe:85:03:02:b6:a5:83:2a:b0:1c:41:
44:d1:ad:cd:43:e0:1b:04:80:7c:3e:10:96:76:ee:
91:ef:9e:93:77:93:c0:e5:e3:8a:df:ce:c7:59:9c:
ab:da:20:fa:f3:d9:15:55:5f:af:20:94:4d:07:d1:
d0:a9:8a:c8:ca:5e:24:a7:53:67:37:05:6b:c3:9d:
46:8c:ae:c0:74:c3:c9:e1:d2:1c:fe:61:ed:04:6f:
be:aa:b8:93:45:e2:aa:f4:4c:c9:f6:72:7c:9f:5a:
12:41:8f:af:98:3d:a3:bd:89:bc:b5:cc:ad:3d:dd:
b1:8b:47:f8:dd:b8:eb:32:b1:8d:cb:a7:bf:e6:0f:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4C:31:F9:72:33:94:70:04:72:A6:18:FC:F9:2C:09:2C:CC:65:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EEwx-XIzlHAEcqYY_PksCSzMZdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:3f:76:23:71:5f:f2:dd:e5:70:f8:3c:ed:d5:86:4f:90:44:
c4:11:49:8c:2f:38:9d:f6:10:9e:0f:31:dd:1d:3f:fe:40:a8:
f2:5e:65:d4:75:04:2b:1a:f0:3e:88:bf:e4:fb:43:9a:1b:63:
fe:c1:c6:e8:ab:fa:3e:18:88:fd:e0:e6:b7:8c:ae:04:5f:92:
f1:12:f4:ae:36:d8:30:45:43:cd:ce:1e:94:ed:f6:ad:cc:82:
3a:7d:45:22:9e:26:a2:fd:b0:5d:c0:1a:8d:b1:73:14:d5:b5:
e7:18:4c:bf:ce:3d:4b:74:52:94:39:59:6e:47:f8:9e:ec:f8:
74:c8:40:17:b3:42:18:13:e6:b4:27:d7:3f:2c:9c:2d:06:49:
27:0e:2f:c2:67:13:11:24:03:43:ef:08:97:00:eb:f2:e1:36:
e7:ed:c4:fd:5b:0c:b3:f1:85:2c:44:81:c2:04:68:05:f6:0a:
9e:4a:7e:6d:15:65:da:2c:3b:f4:6c:4a:9d:77:a1:e2:62:02:
41:29:de:61:19:49:47:0e:b5:28:aa:f6:2b:91:1f:b2:58:82:
24:89:bb:e6:8d:b1:e0:11:f3:48:a8:43:14:eb:d1:40:2c:25:
5b:88:73:d4:50:9a:c3:0f:9f:a9:61:7d:52:82:1f:54:4b:6f:
1f:04:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:22:19 2025 by rpki-client