Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EYnKkzlHxrD21dzft_FIXNjH9zI.roa
File: EYnKkzlHxrD21dzft_FIXNjH9zI.roa (raw, json)
Hash identifier: mgWrp4Nyd2l7+sDyXqLQzfGdrmXKkkqCZB7k2n6uQ0s=
Subject key identifier: 11:89:CA:93:39:47:C6:B0:F6:D5:DC:DF:B7:F1:48:5C:D8:C7:F7:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A3A7DE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EYnKkzlHxrD21dzft_FIXNjH9zI.roa
Signing time: Sun 10 Apr 2022 20:09:16 +0000
ROA not before: Sun 10 Apr 2022 20:09:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050653668 (0x7a3a7de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 20:09:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1189ca933947c6b0f6d5dcdfb7f1485cd8c7f732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:26:f9:42:43:0d:04:5b:47:29:24:b7:49:
de:00:7b:1d:20:a1:9c:eb:f0:0f:99:26:8d:ed:22:
a5:c6:1a:fc:54:05:6a:32:26:fd:8b:47:d0:72:27:
61:7f:43:f6:c3:e6:e6:79:ce:6b:95:ba:d8:01:1e:
1a:cd:ed:3c:7d:b9:a3:80:78:95:f0:ee:85:81:b6:
0f:4d:d0:bc:e6:37:89:b5:4e:8b:02:46:f2:0c:a8:
06:bd:cd:e1:00:c6:79:f3:38:7b:81:3b:4f:7e:ce:
a7:df:63:1d:64:95:30:d9:c3:98:0c:01:35:9c:ca:
01:24:c4:a6:fb:ca:63:8e:f2:5e:2e:cb:37:68:68:
12:ca:df:0f:4f:ab:95:b2:2b:7b:53:9d:27:15:29:
61:fa:2d:26:55:ab:83:bb:4e:5c:37:e3:8b:61:f8:
17:c1:bb:8f:30:b6:7e:b3:36:e6:23:20:ec:75:f0:
e5:07:1f:4c:1d:23:1e:bf:43:a4:13:bd:4e:15:23:
25:6b:c2:6e:a3:13:6e:df:51:15:0c:39:5f:66:b9:
bb:e8:fe:8a:63:48:15:04:d5:78:1b:4f:f5:3e:f0:
e6:20:42:aa:99:35:0c:ac:e4:a3:4a:20:8d:38:8d:
5f:bd:60:94:c9:6f:1f:d8:35:ef:89:bf:96:1c:ee:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:89:CA:93:39:47:C6:B0:F6:D5:DC:DF:B7:F1:48:5C:D8:C7:F7:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EYnKkzlHxrD21dzft_FIXNjH9zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:53:e1:84:55:2d:6d:59:93:a2:01:64:4e:c9:e9:c5:7a:99:
09:5e:8d:4e:49:fe:ad:89:34:06:fb:74:27:b3:4c:5e:43:63:
a7:31:0f:e8:9f:4d:d5:e5:08:d4:0d:51:f0:a5:46:5a:a7:49:
7f:34:a4:c7:0f:31:9b:b8:a6:f4:00:6f:c2:04:84:50:02:18:
8a:0e:c6:f2:73:76:a5:34:b8:1a:d2:66:e5:a0:e9:4f:78:d8:
0d:60:3f:3b:cc:49:1e:7e:93:4f:50:b7:f5:d3:d3:0f:da:7f:
b8:e5:e3:54:88:fa:d9:67:b7:aa:ea:15:25:80:ea:86:fd:9d:
3d:ed:73:b2:90:3d:b9:a7:e9:a7:1d:52:89:72:52:f9:ac:ab:
f6:fa:e8:7b:d2:6a:11:e9:0e:ec:ba:32:5c:73:d0:66:27:f5:
8e:c9:5e:da:f0:4a:2a:c0:66:a3:d6:7a:b4:cc:ba:d9:8c:f1:
9c:2b:c3:d0:04:02:67:d9:d3:6d:86:f8:70:13:18:4f:ca:77:
af:30:65:d4:cb:1f:11:df:9f:c1:d3:0f:c6:54:05:88:c7:aa:
21:8b:9b:0c:fb:74:07:1b:e6:15:66:2c:a9:51:c8:67:4c:dc:
09:58:e9:a7:3e:4e:f1:54:2e:cd:db:b2:8b:da:38:35:d5:85:
93:fc:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:22:46 2025 by rpki-client