Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RJEc6hfeoQ5X-05ELLIx4w6lFMc.roa
File: RJEc6hfeoQ5X-05ELLIx4w6lFMc.roa (raw, json)
Hash identifier: dnEqWbORnIagnGUQ7H91dlgzQJ52/cG1Y9IWqPUQCWw=
Subject key identifier: 44:91:1C:EA:17:DE:A1:0E:57:FB:4E:44:2C:B2:31:E3:0E:A5:14:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866EC0D88EB16D09B97898BCB260993F5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RJEc6hfeoQ5X-05ELLIx4w6lFMc.roa
Signing time: Mon 20 Feb 2023 12:16:17 +0000
ROA not before: Mon 20 Feb 2023 12:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:c0:d8:8e:b1:6d:09:b9:78:98:bc:b2:60:99:3f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 12:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44911cea17dea10e57fb4e442cb231e30ea514c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a1:39:02:db:40:18:59:a9:60:05:7e:85:32:
15:a1:c7:25:4e:d3:6b:a7:f0:06:3b:c7:01:ca:43:
99:c6:94:6c:34:bf:a1:4b:fb:a3:d9:bb:e5:a7:9d:
ba:ea:fd:23:be:53:3d:46:85:f9:71:fd:20:f0:ed:
02:bf:f7:27:9c:0d:00:b7:9b:3a:99:1d:76:af:ec:
20:0d:22:ff:1e:8e:6f:3b:41:04:6d:cc:c4:fe:e2:
f3:5b:69:d7:5c:71:7a:fd:65:76:ff:8d:46:67:ba:
2d:a1:f8:35:aa:c6:6c:b3:21:f9:ac:59:6a:c0:20:
7e:a8:48:1e:95:61:19:28:dc:58:f4:ff:3b:f3:d2:
b2:df:39:d4:d0:7d:67:23:73:4e:a8:a6:bf:2f:f0:
df:e2:1b:bf:97:02:75:90:a6:d7:5a:03:01:00:a6:
b7:af:fe:89:1c:77:14:56:11:a3:41:74:69:d4:17:
1d:d9:eb:d1:d2:6b:2c:fa:db:35:d3:97:23:4d:33:
6f:ca:f3:c4:90:85:70:cd:9e:36:e9:f3:99:ad:44:
5e:c5:5e:86:2d:d2:27:10:ad:cc:1f:b5:e5:42:31:
da:ab:af:26:d8:34:b1:13:a2:a0:2f:bf:07:64:2d:
08:f9:68:e7:2f:8f:87:db:30:40:13:d0:a8:20:22:
dc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:91:1C:EA:17:DE:A1:0E:57:FB:4E:44:2C:B2:31:E3:0E:A5:14:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RJEc6hfeoQ5X-05ELLIx4w6lFMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:c3:ee:c5:f0:37:1e:cd:bb:fb:71:c1:05:b9:c7:aa:2a:84:
d9:c1:44:31:86:18:8f:d7:bf:cd:78:89:66:7c:77:15:d3:09:
1a:47:cf:1c:83:28:51:a9:5c:71:66:12:ca:16:1f:87:5e:72:
77:b6:1b:8b:bc:1f:39:4e:ab:fc:6a:de:6d:a0:a9:ad:2f:8f:
0a:f1:df:a8:61:9f:7b:89:eb:de:71:67:e7:8a:7c:6a:56:71:
3b:26:d4:c0:bc:35:b2:60:e8:d0:fd:52:e0:64:07:1b:02:6b:
c5:0b:12:73:9f:be:41:8a:cf:22:5c:35:83:c6:62:79:23:cf:
01:56:71:8c:92:72:39:3e:bf:27:e4:cf:85:dc:9e:e4:99:33:
fb:74:de:2d:4a:10:60:ee:6b:30:34:6e:6d:d8:58:8c:b6:89:
a4:17:81:4b:52:fd:bc:95:dc:aa:c8:45:17:25:a7:94:ae:d2:
08:f1:2d:d3:fc:5f:71:04:9e:56:75:99:62:4c:ab:c9:b3:b2:
5a:0c:02:f2:a7:cc:b1:aa:d2:d0:43:38:69:ea:85:ba:3d:ce:
da:c0:72:1f:b2:86:f1:db:68:eb:4a:f3:91:94:7b:70:b6:7e:
d2:af:7e:ec:17:2e:30:c3:53:88:07:c9:76:19:03:41:c4:3f:
7f:6d:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:57:53 2025 by rpki-client