Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e8gDKrINFOFXDFs5XVRlm828auM.roa
File: e8gDKrINFOFXDFs5XVRlm828auM.roa (raw, json)
Hash identifier: on+zbLJO8Dvjx7GYx3D/rzreY9/SdIYa8L1OjP9EtlI=
Subject key identifier: 7B:C8:03:2A:B2:0D:14:E1:57:0C:5B:39:5D:54:65:9B:CD:BC:6A:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E5D5FD1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e8gDKrINFOFXDFs5XVRlm828auM.roa
Signing time: Mon 28 Feb 2022 05:10:52 +0000
ROA not before: Mon 28 Feb 2022 05:10:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851613137 (0x6e5d5fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 05:10:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bc8032ab20d14e1570c5b395d54659bcdbc6ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:b7:87:f4:78:4b:13:82:41:46:48:a3:78:
74:16:3f:e9:ba:60:a9:10:bf:22:c2:3a:88:aa:5d:
cf:54:3e:29:eb:c1:22:1e:cf:1d:2c:79:ae:f8:d3:
d2:63:56:9f:56:c3:31:75:1a:1b:49:e1:91:67:6f:
ea:a1:4a:68:83:39:e6:6f:3f:45:28:5e:2d:56:cf:
ac:cf:9e:f2:78:73:1d:9d:6a:4f:c6:91:54:aa:d2:
1b:d9:c2:0d:71:2d:c4:92:1c:d5:c2:ff:3d:9f:53:
8b:55:e8:52:c6:0e:8f:6c:a3:30:64:9a:a8:79:f5:
e2:9e:7f:ed:3c:9f:67:02:81:52:95:fa:45:6e:26:
6c:d2:00:04:9e:14:8f:f2:3d:7c:47:fb:e7:94:a4:
16:52:19:2f:aa:75:59:95:80:55:f6:4e:b3:40:d0:
f5:bd:47:45:81:1f:cf:ec:bd:a5:9e:81:a5:48:e9:
c1:8e:c2:90:cf:a7:9d:73:f7:a6:0e:8b:76:5f:ef:
f2:56:d8:37:08:4d:66:de:4a:d1:87:9f:bf:4b:bc:
74:d4:84:f8:32:0c:bc:50:b1:56:3e:e8:8f:1e:8c:
a2:18:5c:31:45:a3:c0:d6:ee:e5:d8:d9:05:89:68:
3e:90:b4:1b:63:75:e5:3f:68:96:f5:20:7a:f9:36:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C8:03:2A:B2:0D:14:E1:57:0C:5B:39:5D:54:65:9B:CD:BC:6A:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e8gDKrINFOFXDFs5XVRlm828auM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:6c:26:41:53:5c:38:74:67:dd:f2:ef:4e:4c:c2:57:46:c0:
3d:56:ee:0c:4c:cd:3c:e5:a3:79:5b:e4:72:88:5e:20:df:63:
24:b6:ec:46:ac:62:ac:00:70:a1:c1:1e:84:05:8f:03:48:62:
55:f5:e6:d5:f5:c2:b1:1d:00:8c:b4:7f:44:63:c3:98:50:85:
3b:6b:ac:5e:51:ef:7f:a8:64:ea:6c:bb:5f:7b:54:43:f1:66:
79:70:02:f2:71:58:8d:f3:c1:08:e0:ae:66:2a:83:f3:ea:cf:
02:75:a9:c7:6c:72:2e:64:a7:37:48:2f:fe:cf:c5:3d:21:a0:
97:b1:5c:1c:fc:d8:ec:7f:c5:c4:e0:61:97:d8:3b:e7:84:eb:
ab:a6:b1:44:a4:14:67:31:59:ae:ee:8a:ae:eb:a4:66:9c:03:
a5:ff:60:3a:38:cf:82:fe:df:e2:d4:3a:d6:da:64:34:c6:b1:
a7:41:44:02:67:f3:57:ef:d8:f2:ce:6a:a8:c3:ca:ed:fc:77:
80:7a:66:e7:86:06:93:69:cf:77:bb:ec:22:58:cd:fd:d0:ee:
65:e9:b1:54:8e:4c:8e:e0:5e:6d:2e:02:cb:41:96:14:1f:40:
46:2d:e9:69:c6:bc:57:c6:da:7b:2c:83:5b:6c:fb:0e:da:23:
88:02:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:43 2025 by rpki-client