Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ebi9LqEZHRtJ9D0cLmMHuF6rQG0.roa
File: Ebi9LqEZHRtJ9D0cLmMHuF6rQG0.roa (raw, json)
Hash identifier: Vifdynp2W9jjcZ8ZSofx11GWYdHOSF9oMFULe80DoJo=
Subject key identifier: 11:B8:BD:2E:A1:19:1D:1B:49:F4:3D:1C:2E:63:07:B8:5E:AB:40:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C29C6AF04FFC69F2382F8A6FFA06F92E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ebi9LqEZHRtJ9D0cLmMHuF6rQG0.roa
Signing time: Fri 04 Aug 2023 22:12:58 +0000
ROA not before: Fri 04 Aug 2023 22:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c2:9c:6a:f0:4f:fc:69:f2:38:2f:8a:6f:fa:06:f9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 22:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11b8bd2ea1191d1b49f43d1c2e6307b85eab406d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:69:74:de:b5:9c:81:c7:24:16:75:7b:d7:fe:
a9:08:5b:20:b2:f9:37:aa:ef:ae:18:5c:3f:6b:0e:
06:d0:63:a0:20:0a:f1:67:5c:2b:d8:d3:39:32:b4:
e8:9a:2c:49:36:a3:bb:d9:5b:06:f8:2a:0f:b3:32:
d3:b8:34:c8:be:28:16:5d:e3:53:45:8a:c4:a1:0e:
c2:65:c8:44:cf:7c:b7:10:95:8d:7a:16:3d:4d:af:
86:1b:e2:f6:fd:d8:6c:4f:86:07:cf:11:01:26:ce:
bd:dd:c8:0d:ff:ef:4e:dd:28:4a:ef:ca:fd:c0:3d:
1e:a0:c3:0a:e9:f6:23:cd:3f:f8:6a:8a:17:d2:24:
54:90:a5:c1:80:4c:1f:48:82:0f:20:49:d8:af:e3:
05:bb:20:18:a4:b7:0d:6c:d2:fd:ab:df:94:e6:d2:
ef:ec:c2:cb:9d:ad:3e:93:2a:ee:ef:88:13:fe:e6:
70:62:fe:ec:15:d4:fd:3a:3b:fc:7e:3e:14:7e:70:
58:44:58:75:a4:7f:ee:01:1e:f6:92:6d:52:96:16:
47:9d:b1:dc:3d:62:16:2b:4e:80:e1:d6:22:b3:e9:
24:f5:1b:1d:02:fa:75:c7:91:83:51:cf:ca:fd:d9:
d8:88:6a:5b:11:a0:4f:1f:e5:7a:09:db:c2:28:ee:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:BD:2E:A1:19:1D:1B:49:F4:3D:1C:2E:63:07:B8:5E:AB:40:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ebi9LqEZHRtJ9D0cLmMHuF6rQG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:56:ba:cb:66:63:b7:cf:4f:cd:94:19:0b:18:b0:87:3e:d3:
3b:f2:90:d9:32:d3:2e:f1:1e:a4:03:00:c6:00:e0:fe:c2:73:
a9:f9:2d:6e:89:62:43:f9:9e:02:47:88:9e:16:f4:ba:e6:91:
82:55:a4:6e:43:6c:79:b2:6a:77:3a:a7:80:45:56:93:8a:28:
db:a2:53:6f:00:b6:ef:02:12:eb:76:73:03:95:45:4c:81:6b:
9d:c5:48:53:64:9e:41:97:4c:de:bf:14:0a:46:ca:34:de:9a:
3f:e9:61:05:80:ae:50:a6:2d:31:ff:ba:9e:c3:97:45:e3:4b:
53:85:d3:25:76:fb:3d:c9:2f:36:70:e7:98:c9:3d:20:b3:36:
a6:a1:9c:2f:0f:9a:45:6e:38:1f:6e:dd:0a:a9:a6:f3:98:de:
61:f7:a4:f0:92:fd:5d:bc:b2:d9:d5:0a:7b:9f:d9:04:6b:4a:
6d:35:9c:68:31:4b:09:a0:9a:7e:f4:6f:97:9f:86:38:a7:97:
04:9e:54:38:c2:af:00:79:9b:69:e2:11:f0:04:ab:56:b3:d2:
df:ae:41:cb:94:4d:5a:5c:9a:05:0e:d9:11:df:4e:0a:d4:52:
da:e9:52:a7:95:88:bf:81:33:fa:d9:b9:82:45:38:2f:bf:0a:
b3:54:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:56:07 2025 by rpki-client