Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EUxm-UZjUwVoam6sf4PE34XATlk.roa
File: EUxm-UZjUwVoam6sf4PE34XATlk.roa (raw, json)
Hash identifier: Xia4Q8DtvY29RSCYaXgkpBb17Ka6O4T71PldW+MnYpU=
Subject key identifier: 11:4C:66:F9:46:63:53:05:68:6A:6E:AC:7F:83:C4:DF:85:C0:4E:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186413EA292831ABAEA71B33CA9389E0C11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EUxm-UZjUwVoam6sf4PE34XATlk.roa
Signing time: Sat 11 Feb 2023 16:11:08 +0000
ROA not before: Sat 11 Feb 2023 16:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:41:3e:a2:92:83:1a:ba:ea:71:b3:3c:a9:38:9e:0c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 16:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=114c66f946635305686a6eac7f83c4df85c04e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:c9:8a:0a:c7:4f:b5:aa:53:8e:8d:af:5d:
16:68:76:01:4b:cc:41:af:9a:39:08:3d:6e:53:58:
70:a4:6b:1e:20:34:e0:15:ea:50:51:3e:82:53:df:
45:f9:7a:96:46:9d:83:be:20:a4:a2:87:12:e8:1f:
04:85:87:08:7d:02:9b:34:5b:0e:7b:18:e9:be:80:
84:16:bc:b2:58:7b:05:61:36:d2:0e:0b:ee:c2:d5:
41:75:6d:25:eb:d6:03:61:b1:15:87:0f:bc:1a:da:
8a:89:b4:38:a8:65:1a:bd:60:55:ac:f5:47:f6:62:
bd:bf:58:6a:dd:1e:ce:56:0b:00:dd:34:c3:c1:74:
8c:0e:41:17:e8:a2:6f:99:d3:0d:30:1f:a0:0c:83:
25:24:18:42:27:11:70:60:38:b0:4f:a6:5e:27:b4:
0e:eb:06:d1:81:b0:97:27:9f:27:3a:e0:16:0e:ee:
5c:d3:a9:4d:09:cd:db:aa:4f:af:a1:7c:1a:12:fb:
9b:8a:6d:8a:be:8c:4b:a6:2b:3f:31:05:a1:a0:29:
c8:a5:66:2c:34:92:de:fd:10:dc:cb:02:92:37:83:
73:42:1c:87:f7:07:c3:af:7b:77:8b:37:bd:bb:69:
40:f6:59:5c:53:02:80:84:51:14:6b:cd:c5:fe:54:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4C:66:F9:46:63:53:05:68:6A:6E:AC:7F:83:C4:DF:85:C0:4E:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EUxm-UZjUwVoam6sf4PE34XATlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:0a:47:90:b1:c0:7f:7d:29:f0:e4:26:00:e5:91:af:7a:8f:
6f:0d:b2:64:22:eb:89:ec:a0:b7:c3:3c:5a:70:9f:e4:40:7d:
1c:f7:34:9e:c5:29:c2:91:9e:78:19:46:bd:cf:dd:98:fd:e2:
d8:e9:e2:64:10:ef:01:af:a7:0c:42:22:c7:dc:14:0c:99:5f:
e0:27:ab:a2:59:d0:1d:ff:3c:09:e2:d1:fe:28:f6:85:b5:c8:
bb:e8:1c:70:61:9a:0e:ab:02:86:ba:e2:69:9c:ec:78:bd:c5:
98:37:2a:79:13:56:c9:37:18:5b:6f:e8:13:7d:34:a6:80:64:
a2:20:6a:08:1f:19:7c:21:50:df:6d:24:06:9a:9b:b4:eb:d9:
b0:6b:dd:43:ea:9d:44:02:35:58:35:ed:e4:db:bd:f5:e9:13:
24:1d:77:f0:b7:65:57:cf:86:10:32:f7:e9:d3:3f:76:a1:21:
bc:e3:89:a7:a3:08:e5:e6:c6:0a:51:8b:7a:20:51:60:38:04:
5a:ad:cb:29:5b:cd:6c:f5:0d:4c:e5:07:79:32:41:33:74:fe:
99:3b:13:d3:14:ff:5c:e3:1e:9a:26:e0:e6:f7:f1:79:a7:9d:
7b:33:67:9b:0b:e7:90:2d:7d:34:7d:57:da:00:6e:f3:fb:98:
04:66:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:41:43 2025 by rpki-client