Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e2gF9s5_qJ_fF8K6dogB8cwJuz0.roa
File: e2gF9s5_qJ_fF8K6dogB8cwJuz0.roa (raw, json)
Hash identifier: m6Lx3tON5Ijps2Tla4XFidBmY3oDww24bY0Dy4AJUf4=
Subject key identifier: 7B:68:05:F6:CE:7F:A8:9F:DF:17:C2:BA:76:88:01:F1:CC:09:BB:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DA37D30BD888A2BB4CBAE9D7D378395A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e2gF9s5_qJ_fF8K6dogB8cwJuz0.roa
Signing time: Wed 09 Aug 2023 12:13:58 +0000
ROA not before: Wed 09 Aug 2023 12:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:37:d3:0b:d8:88:a2:bb:4c:ba:e9:d7:d3:78:39:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 12:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b6805f6ce7fa89fdf17c2ba768801f1cc09bb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1e:c2:45:3a:0a:09:d6:5f:c5:2b:93:5d:30:
62:b3:f2:68:cc:60:56:bb:8d:4d:ae:9b:38:d9:79:
8f:21:7a:78:fb:70:22:86:da:84:cf:ed:cb:95:85:
7d:87:18:58:14:64:82:ba:2b:f8:d4:8e:31:62:d0:
2f:a9:1f:de:86:ab:c7:e0:80:1b:1d:cd:e6:8c:da:
13:b1:b2:23:a9:4f:dd:f5:66:4d:cd:f8:33:19:1f:
1d:e5:08:a6:bf:a5:0e:79:9f:28:79:45:99:80:db:
c4:d2:af:94:32:1c:49:4d:c7:bc:4c:5f:e9:93:63:
83:92:44:a3:74:c6:2e:63:84:95:55:8c:66:e8:0a:
48:24:a0:5a:ac:9d:17:9f:4f:5f:d5:2b:0e:29:a0:
d4:ee:ba:22:b2:6a:e7:f7:1e:6f:07:e0:3e:43:16:
70:14:f8:1c:a1:7c:eb:27:d4:ef:d4:81:28:03:fc:
c9:5a:ce:1f:f2:53:fa:a2:63:db:89:be:ac:33:8f:
ea:11:4a:44:44:43:fb:14:d5:1b:7e:e8:6c:d2:76:
58:1a:92:80:be:22:46:ac:ab:d0:d6:b1:eb:61:25:
a5:15:54:9f:df:51:bc:1b:c5:c5:da:37:d5:f9:91:
ff:7b:ac:11:ee:8e:f6:7b:77:8b:6a:5b:dc:2b:ce:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:05:F6:CE:7F:A8:9F:DF:17:C2:BA:76:88:01:F1:CC:09:BB:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e2gF9s5_qJ_fF8K6dogB8cwJuz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:4c:c9:f0:a6:6d:d1:63:cc:07:56:62:17:25:3d:a5:d8:3e:
b7:df:a7:cb:3e:f3:d0:76:cb:47:fd:a4:01:b5:7e:8a:06:a1:
73:5d:72:5e:b4:77:e3:20:51:0e:80:f0:99:f9:8d:7d:51:6b:
c9:e4:a2:7e:92:39:18:49:52:61:56:2a:f3:be:6c:d3:05:51:
f1:7d:b6:02:a9:f8:eb:a7:cb:3e:78:61:fe:4a:36:af:c5:f8:
94:02:18:4d:50:3e:d6:79:5d:52:ff:cd:e8:e1:c9:28:66:84:
2d:0b:7e:70:4b:82:91:f1:02:c9:bf:9c:b5:d0:45:3e:ed:18:
ae:86:29:ce:f1:78:00:66:97:85:01:4a:44:84:2b:86:63:b6:
cb:3b:df:5d:ea:69:05:6a:1a:02:ac:08:f0:1b:35:b3:0f:0f:
1b:58:32:e5:89:a6:95:36:f6:95:0d:c3:46:00:1c:6d:25:25:
64:ea:45:4d:28:12:1c:90:59:3c:0e:70:52:fd:d1:64:48:a5:
5d:b7:e7:0a:46:ec:23:54:a2:51:7d:fe:ca:98:de:a9:7d:dd:
f8:3d:ac:fa:cc:c4:6f:ed:74:48:83:34:2e:28:04:d5:e5:06:
d0:a3:95:8a:92:83:6c:ca:50:50:51:60:1c:ae:f2:15:38:e4:
f4:3a:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:35:56 2025 by rpki-client