Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EkuX4Uh1h494YPabvvAclE675h8.roa
File: EkuX4Uh1h494YPabvvAclE675h8.roa (raw, json)
Hash identifier: zuNt+k8qiZHRZ+Ag1csb2UU3AxnHnptHA/rJTU778yE=
Subject key identifier: 12:4B:97:E1:48:75:87:8F:78:60:F6:9B:BE:F0:1C:94:4E:BB:E6:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A33B4766D929C3574952B8685B67929ED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EkuX4Uh1h494YPabvvAclE675h8.roa
Signing time: Sat 26 Aug 2023 21:16:19 +0000
ROA not before: Sat 26 Aug 2023 21:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:b4:76:6d:92:9c:35:74:95:2b:86:85:b6:79:29:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 21:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=124b97e14875878f7860f69bbef01c944ebbe61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:c7:4c:25:ea:45:2f:80:0f:ee:d2:3a:5b:
2c:33:e0:51:5c:85:df:b2:c6:6a:d8:88:ba:67:ea:
b7:58:33:ac:5e:15:6e:b2:e0:8c:29:fa:17:20:7c:
72:9d:01:ca:34:72:3d:b4:93:b3:b3:4b:8f:7d:00:
09:bf:9c:ac:33:64:d9:82:86:fd:15:e2:0e:03:22:
26:26:47:78:ec:0d:32:cc:52:97:9e:1a:fc:7a:46:
46:03:cf:9c:80:82:7b:c7:63:e8:1d:87:30:ed:ba:
f8:b2:35:1f:89:4b:40:d8:50:73:49:30:77:7a:3f:
bc:66:5d:85:e7:98:08:b2:a8:2d:66:52:2c:04:72:
ea:ad:c6:b5:48:8f:aa:c0:83:cd:df:42:de:6a:01:
35:19:c5:0f:0e:a9:2f:d6:e8:9c:43:e4:ae:e9:7f:
09:9a:e5:37:e5:99:ef:f3:b4:6d:98:0c:47:b4:93:
6c:0e:84:b3:ca:f4:b0:93:a4:4f:e5:63:20:f7:39:
32:6e:6a:cf:d3:04:3e:2e:21:14:21:81:0d:ad:73:
d3:f4:41:41:46:ad:fd:8e:cf:f1:e9:43:75:04:c7:
0b:d7:cb:7e:ad:a0:59:fe:72:6c:d0:d1:44:57:3a:
a9:5b:d2:51:fa:2a:1e:bf:6f:fa:bb:d2:7f:ee:21:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:97:E1:48:75:87:8F:78:60:F6:9B:BE:F0:1C:94:4E:BB:E6:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EkuX4Uh1h494YPabvvAclE675h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:d9:63:34:14:e7:d6:8d:29:f3:27:cc:d2:2c:6f:dd:4e:69:
1c:b3:ae:de:db:8e:d8:ea:6f:02:3c:e1:e8:63:97:1c:a1:e7:
3f:2c:d8:0e:18:36:ae:5d:01:85:25:4f:1f:ba:98:6a:b6:9f:
8e:f9:48:8a:cd:31:3a:ed:95:97:75:0d:ba:5f:c9:17:4e:89:
81:3b:e8:d6:f9:e5:0b:ad:2f:8e:36:99:c2:18:3f:a6:31:9c:
82:ae:a7:47:fd:39:5d:d8:52:c4:70:de:40:eb:04:4d:92:ef:
9e:08:fb:78:38:c6:ee:8a:5b:3c:14:b3:e0:cc:89:c5:a4:39:
cf:b3:f2:fd:02:67:4d:8d:60:ea:2c:12:b6:f2:f8:d1:3c:19:
59:24:c9:2f:cb:c2:41:f0:e9:1b:5e:22:2a:b5:27:93:92:28:
a0:87:87:b3:56:7d:d0:d3:ca:01:c4:69:6f:aa:a4:bf:c7:a5:
2d:5f:c8:7f:9e:45:22:f6:08:47:0a:46:74:f6:37:9a:8c:1c:
81:14:b3:40:73:ff:13:5e:6f:fa:27:e9:b5:82:7c:78:28:1e:
1d:c2:47:d4:73:98:90:71:e3:81:e1:b3:3d:cd:6d:48:b0:0c:
86:24:f5:d5:2f:8d:f9:9f:a5:6b:23:20:24:85:c8:47:14:42:
96:da:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:43:56 2025 by rpki-client