Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ej9IgSc9wjnYbQOj4izdZmKC41k.roa
File: Ej9IgSc9wjnYbQOj4izdZmKC41k.roa (raw, json)
Hash identifier: OuVDK1EqA57/ZYA+TSHcWcs0USpBg9Ya4FRcvxJAU88=
Subject key identifier: 12:3F:48:81:27:3D:C2:39:D8:6D:03:A3:E2:2C:DD:66:62:82:E3:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F4D2E377E91C1DAAF3849E0ED60CE596
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ej9IgSc9wjnYbQOj4izdZmKC41k.roa
Signing time: Mon 14 Aug 2023 16:13:28 +0000
ROA not before: Mon 14 Aug 2023 16:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:d2:e3:77:e9:1c:1d:aa:f3:84:9e:0e:d6:0c:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 16:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=123f4881273dc239d86d03a3e22cdd666282e359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:c7:ea:54:53:2c:0b:38:46:2f:aa:9a:ce:
5e:4f:9b:78:7d:68:c4:4d:f3:5f:14:81:43:c5:e6:
78:40:1c:dc:0e:b7:d4:c8:2b:15:ab:b6:a2:ec:03:
aa:23:f4:44:93:2f:54:5d:cb:61:cb:00:1a:4e:53:
0b:f8:fa:1c:8d:21:be:db:15:84:fd:9e:2b:fa:34:
e7:9f:e0:98:7a:07:48:d8:cd:f3:2f:66:19:3d:1c:
2c:0c:f3:15:e5:ac:6f:59:02:fd:1c:89:c4:d2:53:
14:99:9d:ed:d0:5a:ff:00:5c:f0:a9:f3:88:8e:93:
4a:c2:04:6c:f0:e1:90:39:3b:2c:07:e3:c7:ea:c8:
20:8f:18:9e:22:56:5b:39:fb:d3:48:8e:db:83:c7:
89:91:43:6f:ce:09:0d:9d:8f:30:fa:9c:1d:15:ff:
2e:45:ab:ee:c3:70:bf:49:7e:c0:82:37:06:cb:e6:
59:45:4e:8f:1e:cc:75:3e:2c:d8:9b:4c:32:24:a8:
56:57:74:96:e9:fe:4f:23:a2:da:b4:e5:d4:56:be:
34:79:da:84:b9:cb:87:11:cd:df:2b:39:ff:b8:76:
c1:2d:30:c2:f2:1f:b5:65:cb:e0:e8:4d:29:31:4a:
d7:46:46:65:ec:d7:e5:24:6f:9a:60:ea:63:15:80:
19:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:48:81:27:3D:C2:39:D8:6D:03:A3:E2:2C:DD:66:62:82:E3:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ej9IgSc9wjnYbQOj4izdZmKC41k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:5f:c4:60:1f:5a:87:51:46:da:3b:6a:fa:f3:22:e3:54:2d:
ee:9d:e2:78:65:ac:c1:e5:31:57:2f:34:3c:98:a4:8a:ac:00:
cc:fe:85:92:fd:2c:b1:18:c3:e4:81:ce:40:f0:39:74:f5:7a:
48:09:50:27:ed:83:ef:8b:ed:37:07:77:d3:d7:e4:e3:71:a6:
45:5e:f3:19:00:5a:6e:6e:ec:4e:1e:b7:8d:0d:87:c7:0f:39:
6a:02:a2:4c:6e:d8:67:cd:72:2c:5f:65:c7:2e:24:7c:89:58:
de:33:5a:f6:85:19:f4:30:d5:83:25:f4:86:fe:30:e0:ed:24:
e6:a3:e1:c1:2c:db:71:79:b7:de:c6:1e:aa:23:7f:bc:54:90:
83:5e:22:d8:d9:d6:38:d6:55:64:88:85:29:b0:b7:ab:eb:ce:
ea:71:4b:4e:17:51:44:bf:2e:d5:b8:ed:89:20:61:d5:e1:0c:
20:b1:9f:e2:58:31:b0:35:58:e6:3a:f1:62:3b:37:45:53:58:
5f:63:fc:a0:5c:1a:14:86:a5:41:1b:8f:d7:e5:ca:61:c3:4b:
fb:2a:c2:2e:a9:bf:30:e3:78:97:47:ec:1a:90:c9:df:5f:59:
07:66:35:18:e4:55:fb:9e:20:00:9f:ac:4c:36:4b:9e:60:f8:
c5:a7:b7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:18 2025 by rpki-client