Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eEwfsFU81Jw9Etv-PtEeYkmnmmE.roa
File: eEwfsFU81Jw9Etv-PtEeYkmnmmE.roa (raw, json)
Hash identifier: xKyex+tSBm7EVKh+2EGRsLyFDmPFXjY6y+68AXT6WaQ=
Subject key identifier: 78:4C:1F:B0:55:3C:D4:9C:3D:12:DB:FE:3E:D1:1E:62:49:A7:9A:61
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DEE8112890FA9F390854D97AA11348C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eEwfsFU81Jw9Etv-PtEeYkmnmmE.roa
Signing time: Thu 10 Aug 2023 10:04:57 +0000
ROA not before: Thu 10 Aug 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:dee7:85bc/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:e8:11:28:90:fa:9f:39:08:54:d9:7a:a1:13:48:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=784c1fb0553cd49c3d12dbfe3ed11e6249a79a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:8c:0b:67:b4:0b:c1:20:53:9d:98:33:5d:
ab:4e:e2:06:3c:36:9b:16:c5:bb:f6:9c:56:c4:dc:
3f:78:c0:5e:2c:93:bc:0c:8e:b3:12:06:6e:07:32:
b5:77:5c:ae:79:34:18:90:62:14:16:c6:20:9a:92:
8b:5d:7b:82:a4:ce:ef:38:94:3d:e0:4d:0e:9f:4e:
39:f3:ec:c7:68:b0:c2:61:1f:6c:27:0d:ac:64:86:
11:88:92:98:5c:25:87:32:e3:cc:21:7d:77:4d:a2:
91:b6:0e:dc:d5:04:0e:35:10:6c:5c:fb:8f:6c:83:
5a:a1:4b:fb:1c:c6:cf:32:92:3c:4b:e1:c3:13:58:
a6:d6:b0:ad:4f:2f:a8:37:17:1c:d0:59:77:70:29:
01:00:46:f7:9d:b8:95:9b:02:bd:d2:6f:ab:24:d6:
6e:ad:fe:01:eb:b0:b7:14:0d:1d:28:59:d5:14:a1:
38:b9:85:bc:d0:f4:68:d3:cb:81:ed:db:35:93:94:
2e:e6:2e:3e:62:01:1e:ad:75:6f:7f:dc:4f:9e:f0:
6d:72:c4:ff:1d:dc:84:3c:5d:f9:c8:fa:a5:1f:59:
84:fe:0d:93:15:9b:b9:86:63:b3:98:53:64:52:72:
22:21:cc:29:56:9d:38:f6:54:28:38:fc:67:31:02:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4C:1F:B0:55:3C:D4:9C:3D:12:DB:FE:3E:D1:1E:62:49:A7:9A:61
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eEwfsFU81Jw9Etv-PtEeYkmnmmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:e6:75:87:9e:73:6d:d7:38:76:f8:6b:83:a6:81:91:9c:2f:
3d:ca:05:5d:9a:c5:05:f4:09:59:c2:0f:7a:e9:d8:90:51:ef:
79:0e:31:1e:32:03:5e:83:e0:78:2c:b5:4a:e0:84:07:5f:35:
77:e6:9e:2f:17:cb:87:ca:56:39:fa:bf:75:81:f2:1f:d1:5e:
a5:42:b9:ec:aa:31:e1:38:f5:d4:d3:78:28:52:0d:70:73:f8:
fa:26:89:15:aa:db:27:12:b4:ec:0a:6c:1d:83:4c:c0:c9:86:
70:98:db:09:f5:c3:b0:ea:bf:39:8a:e7:9f:f1:45:25:db:77:
3d:64:ec:ff:f7:3c:5e:71:80:6e:6e:86:c1:28:2b:c5:30:bf:
42:50:c8:c6:f6:bb:d4:5f:ae:97:da:06:3a:f2:f3:49:74:5f:
24:0f:b8:7a:5f:91:ef:bd:82:11:cc:0f:fd:7a:6d:e8:d5:c1:
44:6c:8e:19:dd:42:98:8c:2a:a0:53:2e:37:4e:df:d6:93:4c:
19:a3:77:38:a3:f7:23:57:fb:20:7a:65:43:09:63:a7:4b:06:
69:f0:77:7c:9d:4d:66:05:18:c2:d9:f8:e9:5c:e2:c6:f0:6d:
4a:89:1c:42:a1:df:2f:36:6f:90:d6:a4:2f:d2:67:3d:e9:c1:
57:55:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:36:06 2025 by rpki-client