Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ESgKQTXnzGFaxCFhx9fX66CqUxE.roa
File: ESgKQTXnzGFaxCFhx9fX66CqUxE.roa (raw, json)
Hash identifier: P0M3osu4AAbrJpDL9QaZR6XG+gW/ICtQtnxhRIb0CKs=
Subject key identifier: 11:28:0A:41:35:E7:CC:61:5A:C4:21:61:C7:D7:D7:EB:A0:AA:53:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01835A2EA70D091CE6F16B20A736D327DC54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ESgKQTXnzGFaxCFhx9fX66CqUxE.roa
Signing time: Tue 20 Sep 2022 09:15:50 +0000
ROA not before: Tue 20 Sep 2022 09:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:2e:a7:0d:09:1c:e6:f1:6b:20:a7:36:d3:27:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 20 09:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11280a4135e7cc615ac42161c7d7d7eba0aa5311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:60:ed:39:43:d6:7c:e2:f0:05:93:7a:c0:c9:
a0:26:95:1d:91:85:46:f3:e2:a6:0f:c9:dc:b1:d8:
80:06:b3:cd:2c:b8:16:27:b5:57:7f:ba:6e:a0:d0:
00:6f:08:f5:bf:44:cf:12:de:0d:32:da:0e:57:88:
53:6d:d2:6f:23:19:ef:ff:aa:1d:7a:e0:7d:36:2a:
6a:31:ba:5d:de:c7:a7:c5:82:d7:57:b4:2d:3c:2d:
56:d1:05:3c:c5:15:32:e9:a1:e0:40:f9:8a:dd:e8:
79:a8:16:11:b3:61:1f:95:c5:3a:f7:f7:86:9d:c1:
40:ba:a2:e8:45:bc:53:0e:89:aa:be:78:21:c1:ed:
e9:da:06:9f:85:87:0f:1c:02:d9:ec:a1:4e:6c:a2:
a0:f5:c5:90:3d:9f:29:93:ec:fd:74:a3:36:ba:9e:
53:8d:79:cf:0a:61:71:c4:1b:9e:88:ad:dd:9a:f2:
f8:57:75:31:26:9e:b8:e8:f5:d0:aa:4b:ce:06:80:
2e:2c:1f:60:51:85:0a:15:a9:b1:d9:0f:38:6b:40:
99:80:f2:15:b7:03:a5:67:e4:b8:d5:62:02:c3:8a:
ff:df:83:7b:59:fd:e9:55:e1:90:6e:7c:80:c9:78:
cc:bc:cc:5d:ca:6e:2a:ef:c2:a4:7a:85:b5:cd:69:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:28:0A:41:35:E7:CC:61:5A:C4:21:61:C7:D7:D7:EB:A0:AA:53:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ESgKQTXnzGFaxCFhx9fX66CqUxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:23:7a:8a:e7:d6:0e:29:1b:48:1b:d8:04:96:73:7c:37:87:
a9:64:25:f2:f5:98:e0:b6:a4:ef:33:77:dd:79:45:6e:34:74:
e2:b1:b0:a6:87:da:20:5e:74:2d:b8:79:ba:68:6f:55:68:50:
70:3f:3e:b0:98:16:9e:89:3a:80:79:7d:39:85:24:e2:22:80:
4c:e9:06:08:7b:df:8e:0d:f0:98:b4:3f:10:f1:65:b5:e3:1a:
f5:5c:7c:cf:b7:53:e9:fd:e4:e1:24:da:bd:bd:42:b5:82:47:
72:02:c9:f1:3e:e7:56:ec:32:3b:9e:bd:c1:39:42:f8:4b:93:
7d:dd:44:15:73:ec:81:37:6a:51:ae:c4:12:3d:18:6c:fe:f6:
e3:15:c4:37:0c:49:55:de:eb:09:dd:c8:eb:a2:60:74:bf:45:
9d:93:9f:4e:28:94:34:94:03:4f:7f:ed:ec:31:65:04:d9:35:
21:b8:ac:91:24:4c:03:85:bf:48:87:bd:3a:1d:59:a9:d4:72:
18:0d:ed:05:5d:e4:b6:56:ac:14:f9:77:fa:1b:d3:ba:c9:1c:
43:f6:f0:dc:5a:c3:40:d0:ae:6d:20:42:65:8c:07:07:77:aa:
e7:44:0b:ab:cc:54:65:81:22:37:78:80:f9:f3:c9:98:15:47:
d7:53:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:23:43 2025 by rpki-client