Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eGUAiABiXadY3PQr7ufcTS_EhCg.roa
File: eGUAiABiXadY3PQr7ufcTS_EhCg.roa (raw, json)
Hash identifier: ygsfk25uqXsA6Gge6cRMUnAU/wSIPdgiuIi8lwgpnok=
Subject key identifier: 78:65:00:88:00:62:5D:A7:58:DC:F4:2B:EE:E7:DC:4D:2F:C4:84:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871382B9D1EA0A4851B0D599CDEA5796FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eGUAiABiXadY3PQr7ufcTS_EhCg.roa
Signing time: Fri 24 Mar 2023 12:05:47 +0000
ROA not before: Fri 24 Mar 2023 12:05:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:1382:1cbb/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:82:b9:d1:ea:0a:48:51:b0:d5:99:cd:ea:57:96:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 12:05:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7865008800625da758dcf42beee7dc4d2fc48428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:55:5e:e9:42:79:0e:14:cc:b8:32:e5:ec:
7a:51:35:8e:6d:81:70:9c:85:aa:25:63:fb:68:60:
11:c2:73:07:1a:3f:7e:85:2e:6c:ae:2f:9f:57:a3:
cd:f0:71:7e:23:1d:9f:6c:eb:7d:9a:f8:f9:06:bd:
57:8d:67:ee:0c:ab:5d:99:73:bd:77:ff:42:15:a6:
a4:b0:4c:2c:fe:89:9f:d5:db:e6:b0:aa:2f:50:51:
8f:b8:78:90:c0:2e:9e:e5:e6:ce:e0:be:22:23:74:
e4:1f:64:d1:02:f3:48:56:6b:dc:e0:f1:ab:dc:e0:
f5:96:f4:9b:4e:09:81:13:89:03:0d:f3:24:e8:e7:
26:96:56:1d:cf:50:c5:a3:0c:7e:90:4c:ee:a6:81:
13:cd:84:06:bc:fd:fe:9a:a5:54:e4:13:30:a7:73:
b2:d2:fe:25:c5:f4:17:db:11:4e:2e:76:92:2c:b5:
61:25:81:07:45:f9:01:dd:92:9f:b2:3f:8a:62:97:
24:6b:c1:29:8a:46:6e:fa:6d:c4:73:bf:14:c6:71:
29:6c:07:2d:f3:2b:bf:02:dd:a9:8f:c6:c1:98:6f:
f7:4c:6d:22:fa:c5:9c:26:fa:6c:a9:5e:93:7c:76:
e4:c9:ff:1b:d7:f5:04:d3:34:a5:03:93:33:c8:9e:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:65:00:88:00:62:5D:A7:58:DC:F4:2B:EE:E7:DC:4D:2F:C4:84:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eGUAiABiXadY3PQr7ufcTS_EhCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:80:a6:70:7c:49:cd:18:c4:f5:ee:76:32:4c:a9:5e:82:58:
d7:28:8b:62:0d:aa:a8:72:1d:c3:1a:e6:98:07:bf:09:f1:df:
44:5b:b8:9c:1e:5e:2b:37:68:2a:5c:b3:75:5c:85:72:b4:6b:
16:f1:8d:03:92:73:7e:27:85:66:09:6a:06:5a:a9:e8:76:00:
b7:cc:87:5e:c1:fc:af:f8:0a:4e:06:65:db:14:a5:1d:f9:87:
82:77:c2:ba:e0:91:3c:4d:59:ee:45:de:83:0e:c5:6c:1d:10:
95:22:6b:a3:8d:80:7b:60:14:e9:e8:69:2e:ac:e7:34:28:fa:
9c:4b:7e:a4:44:54:05:17:74:a0:d3:80:a4:7f:5b:d6:c4:d3:
a9:09:fa:af:56:6d:3f:a1:e5:a1:7c:c4:69:c0:98:91:40:39:
d7:27:10:7f:4f:ca:ad:77:13:d2:c6:f3:f2:61:d7:3b:00:6c:
a3:f3:99:18:68:cd:dc:58:7e:24:e0:94:86:36:4d:ce:7b:b6:
e4:50:1f:b8:b2:87:f5:f6:a1:72:22:6c:2a:76:55:5b:bd:49:
3a:7e:51:4a:79:c6:7b:2a:f8:ec:28:5f:66:b9:97:fb:c6:4f:
8b:2e:39:ed:12:a8:e1:36:90:6d:c1:68:05:32:46:59:30:14:
bf:49:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:07:20 2025 by rpki-client