Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Elpe7kP-C_RqmJcAx9SA-UWOHes.roa
File: Elpe7kP-C_RqmJcAx9SA-UWOHes.roa (raw, json)
Hash identifier: JWqg8ZOIWXKyBmke3aLo2Vqo1SU1nzQA19onCtbExQo=
Subject key identifier: 12:5A:5E:EE:43:FE:0B:F4:6A:98:97:00:C7:D4:80:F9:45:8E:1D:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0DB6E6C229EFD941607F61E48202AD6E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Elpe7kP-C_RqmJcAx9SA-UWOHes.roa
Signing time: Sat 19 Aug 2023 12:13:24 +0000
ROA not before: Sat 19 Aug 2023 12:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:b6:e6:c2:29:ef:d9:41:60:7f:61:e4:82:02:ad:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 12:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=125a5eee43fe0bf46a989700c7d480f9458e1deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3e:3a:87:bb:54:58:71:0d:a3:a0:f0:9c:83:
d9:7d:0e:30:67:88:71:48:8b:ce:63:f4:66:0b:53:
4a:1c:a7:be:36:04:a2:9e:f6:ab:1a:9b:e5:ec:9b:
e0:9f:50:eb:1c:7d:fb:86:3b:7f:35:d7:85:65:b6:
6f:92:20:3d:1b:d1:2a:35:80:da:55:ed:e2:ee:c9:
cd:7d:ac:21:40:48:b8:95:96:e4:ec:d8:1e:a5:b8:
9d:4a:d2:28:4b:f3:a9:44:86:2c:c7:44:c2:c8:e6:
54:5d:99:f6:73:4a:bf:b4:18:5e:37:42:8a:26:db:
ce:b8:eb:8e:8b:73:d3:09:27:68:9f:38:12:1a:64:
29:3d:14:59:3e:38:f4:6a:56:27:53:a6:5c:56:8c:
23:9a:ee:01:a7:dd:47:7a:7c:33:8b:6d:62:34:43:
1a:ba:eb:8f:e2:38:d3:22:f5:2d:ab:39:21:87:28:
00:0f:d1:b6:c0:5a:fc:32:d6:60:06:a2:be:54:ec:
e9:41:aa:cf:76:03:e1:5b:cc:5c:dc:19:fd:fb:78:
11:63:cb:1d:0e:b9:87:2f:82:c6:13:a5:3e:57:16:
05:4f:0f:0d:7f:e3:50:0d:3d:b9:99:b2:6f:d7:b6:
9e:78:73:eb:3d:e1:93:c6:0e:d7:12:5a:19:06:ba:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5A:5E:EE:43:FE:0B:F4:6A:98:97:00:C7:D4:80:F9:45:8E:1D:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Elpe7kP-C_RqmJcAx9SA-UWOHes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:72:f0:d1:b6:3b:15:c1:fb:26:19:ce:bc:d5:72:74:28:02:
0a:d7:00:fa:57:08:40:da:86:2f:39:34:17:7e:71:1e:d1:0c:
22:80:86:99:ed:9e:f7:b2:1a:de:f5:16:df:34:b0:83:cb:f7:
96:85:de:4f:0c:ea:d1:08:87:bf:8c:de:28:7d:64:f1:be:ac:
11:f5:1f:fb:bc:f2:6a:85:46:0a:04:7d:37:56:d3:53:18:47:
d2:1c:f1:8b:c5:b8:cf:c5:9b:67:1f:93:92:2c:b7:cb:bd:1b:
d1:1a:3b:15:64:53:12:ef:b8:a1:1f:68:e1:d9:f3:36:45:2f:
ce:0a:f0:89:79:6a:ca:83:ae:3b:ad:c1:bf:4e:58:a7:9c:2c:
10:02:e9:c8:18:c8:16:dd:40:eb:b8:1e:a6:bd:c5:8d:29:74:
ff:f6:f4:35:f6:31:e3:f4:f5:90:25:0a:80:cd:44:fd:b9:45:
05:55:6d:73:db:b6:b0:e9:81:9a:d5:b5:b1:28:f4:ac:52:da:
50:e9:f4:e7:ac:a3:de:af:5b:00:56:17:37:b0:c9:1a:0e:73:
16:2c:4c:38:be:42:c6:bf:2a:a8:d5:29:eb:ba:d1:30:b8:33:
c1:27:65:0e:d9:88:da:5e:f0:1e:30:98:46:b0:90:5e:6d:15:
53:76:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:55 2025 by rpki-client