Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ejb_tBd2-afGYXHi-na6z2Infrs.roa
File: Ejb_tBd2-afGYXHi-na6z2Infrs.roa (raw, json)
Hash identifier: jQ3ui86O4zBZIA8ip/C0TFsFjC2I8Jb98bHYQ2x/P50=
Subject key identifier: 12:36:FF:B4:17:76:F9:A7:C6:61:71:E2:FA:76:BA:CF:62:27:7E:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850F796AAB53FE60E39C79F3F5237D9096
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ejb_tBd2-afGYXHi-na6z2Infrs.roa
Signing time: Wed 14 Dec 2022 07:11:33 +0000
ROA not before: Wed 14 Dec 2022 07:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:79:6a:ab:53:fe:60:e3:9c:79:f3:f5:23:7d:90:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 07:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1236ffb41776f9a7c66171e2fa76bacf62277ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:32:75:a3:94:89:91:1c:58:e7:4a:a8:6a:
06:c8:cb:5b:4d:a6:4d:ca:10:a8:74:80:71:06:fc:
49:da:1e:5b:af:70:6a:a5:97:44:11:d1:b5:4c:b9:
d1:ce:dc:73:56:94:07:3b:a1:e5:8b:74:a5:7e:a8:
1a:39:52:81:fc:34:68:9c:f4:a8:59:ac:37:14:a7:
95:45:5c:4c:53:95:52:82:85:57:1b:6d:bf:ea:49:
9a:85:0c:3a:93:b4:dd:61:9a:d6:72:a8:a5:91:7d:
c1:2f:14:4b:0f:7c:23:f9:34:27:b2:0a:e5:3a:bb:
93:1d:e9:aa:56:d9:95:a3:5d:91:65:c1:6d:42:47:
27:16:6b:03:12:53:62:68:a7:f1:4b:4f:eb:72:9c:
00:d7:86:1d:cd:8b:ea:5d:9d:0a:b3:d7:7f:26:dc:
75:92:47:7a:08:13:d9:08:5a:c9:90:ed:64:17:81:
54:3e:7f:02:2f:a8:36:05:62:9a:ae:93:bc:e6:57:
55:f8:e5:81:bf:18:cf:b9:ba:0b:2f:ab:22:d3:0a:
4d:7d:6a:dc:4a:11:34:58:2f:04:4a:cd:3d:45:e5:
e6:26:5a:b5:65:d1:8f:0b:f3:b6:9b:7d:58:55:04:
ec:e4:7d:71:a9:30:64:a1:23:a0:72:3f:5d:24:3f:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:36:FF:B4:17:76:F9:A7:C6:61:71:E2:FA:76:BA:CF:62:27:7E:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ejb_tBd2-afGYXHi-na6z2Infrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:64:17:f1:cb:e6:f8:46:e0:9a:d5:82:57:be:c0:4c:a3:05:
eb:21:a1:f8:ad:77:be:a5:f9:43:81:84:b1:b0:b1:ac:8f:6a:
1a:ba:84:86:30:ce:2f:71:1c:d8:64:f3:c4:15:a2:21:bc:92:
49:f4:79:56:46:79:aa:9b:4a:c1:8a:d1:c5:12:24:ee:02:a5:
8c:64:77:ea:fe:0d:d2:a2:65:06:75:7b:54:76:6a:0f:af:eb:
e9:26:29:14:89:d0:74:cb:8a:28:4c:d5:a2:99:32:a0:10:19:
e6:bd:9a:0f:a0:99:83:cc:a5:5e:8e:cc:00:47:e5:98:93:b0:
57:89:fd:2f:3b:d7:6f:3d:2f:be:16:14:b6:af:54:33:a5:5a:
35:17:0e:c2:de:c6:ce:95:49:00:be:b9:34:0a:9e:4e:ba:b7:
12:5e:37:9f:ee:08:65:04:64:ab:ef:46:00:89:9c:4f:0f:fa:
7e:48:8e:0e:0e:73:47:67:7c:5c:ac:02:da:d7:2e:22:2d:04:
0f:41:a8:7e:19:45:85:b8:09:aa:30:14:37:e9:b4:61:49:35:
0c:51:dc:ba:da:c0:ad:a1:bb:a5:45:90:fb:b0:83:8f:6a:93:
88:ce:e6:24:58:90:5a:48:81:7e:f8:dc:60:3b:6c:95:e1:d4:
aa:b4:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:04:37 2025 by rpki-client