Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EG1_5O9N1Qm7bj5E-FP1v2tIn-o.roa
File: EG1_5O9N1Qm7bj5E-FP1v2tIn-o.roa (raw, json)
Hash identifier: DqEnI49oQ1Wh+YF9zbvX/8gNytFlukjxfOZ/AaUUaZk=
Subject key identifier: 10:6D:7F:E4:EF:4D:D5:09:BB:6E:3E:44:F8:53:F5:BF:6B:48:9F:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D3FECCBDA4EF045B649618396D4CF8B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EG1_5O9N1Qm7bj5E-FP1v2tIn-o.roa
Signing time: Tue 08 Aug 2023 07:13:58 +0000
ROA not before: Tue 08 Aug 2023 07:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:fe:cc:bd:a4:ef:04:5b:64:96:18:39:6d:4c:f8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 07:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=106d7fe4ef4dd509bb6e3e44f853f5bf6b489fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d7:a2:e9:f2:4c:2c:31:2d:09:93:c2:40:f5:
df:e4:5e:9e:39:23:a7:0b:79:ea:2e:e9:9b:f2:5d:
d3:75:7f:a9:c1:07:a2:d1:4b:eb:a3:b5:3c:19:93:
ad:3d:19:5b:96:3a:42:5b:72:29:89:f4:cd:22:00:
a5:d6:12:23:90:dd:33:b7:a7:55:8e:98:ad:8f:51:
fb:fc:61:cc:64:c5:ac:59:e7:2d:56:81:33:d1:14:
61:97:39:58:81:79:58:fd:8a:c4:83:69:04:b8:f3:
c9:bc:8b:7c:3e:c4:15:cb:d1:62:76:58:22:0c:50:
b7:70:ef:60:23:0f:ae:d5:50:8e:7b:01:94:86:c1:
13:70:24:e1:f5:72:c0:8e:e4:5c:9e:6d:f2:9c:6d:
3a:4e:8f:17:18:35:5f:50:1a:ec:4e:5a:77:8e:bc:
00:d9:f8:3a:90:26:6c:92:1e:b7:3f:16:79:bc:b7:
37:80:66:13:85:92:ba:35:c4:09:f3:66:10:3e:44:
6d:b0:23:23:eb:7a:6a:14:70:a4:bc:b2:ee:75:57:
21:2f:bd:bf:14:d3:71:dc:36:4c:8a:7c:07:db:b6:
47:77:d2:5b:b4:be:ad:fd:62:0f:3a:d0:01:40:e6:
1b:16:7a:73:0c:af:66:28:79:35:47:a5:c6:ac:9c:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6D:7F:E4:EF:4D:D5:09:BB:6E:3E:44:F8:53:F5:BF:6B:48:9F:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EG1_5O9N1Qm7bj5E-FP1v2tIn-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:b5:bb:4c:eb:c2:d0:30:6b:da:43:51:ce:8b:d1:28:06:ed:
23:42:4a:78:1d:48:47:0f:e5:c4:0a:ba:0e:8c:b1:58:98:df:
15:b3:b6:3f:5e:d8:1e:33:28:a7:76:0a:28:50:47:de:ea:7e:
b1:8b:bf:b0:f1:2a:47:5d:49:b2:44:53:96:a9:c7:99:0d:ba:
8b:3b:54:ca:b4:3b:05:42:66:f1:95:99:66:fe:54:02:da:97:
a5:af:e1:30:d8:af:a5:72:cf:1c:83:62:aa:f9:bb:b8:e6:a5:
b0:83:21:37:0d:36:61:ed:25:36:47:bf:e6:85:4f:53:e9:48:
c1:67:8f:22:d9:e4:88:2a:ff:b1:63:3a:ba:3c:71:3b:cd:f5:
31:3a:23:19:e3:4c:eb:27:88:bf:30:30:c7:5d:37:64:da:cd:
ca:1b:1a:fc:d1:03:31:67:d8:a4:c0:d8:b4:47:0e:b9:13:36:
9b:8a:6d:2b:7d:be:3e:5b:10:2b:85:76:8a:ee:e7:35:8d:da:
ac:06:3a:7a:49:bb:6e:36:4e:5b:9e:b4:6d:9a:77:fb:c3:83:
6f:ef:24:7e:02:04:b6:0b:a3:bf:e0:c4:3d:21:af:af:70:a5:
dc:b9:6c:b4:e9:03:45:62:75:c9:e8:84:dc:37:d8:dd:b2:a9:
cb:e0:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:06:52 2025 by rpki-client