Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eLHIo8OFkahBIWvLhbhuhKHGysw.roa
File: eLHIo8OFkahBIWvLhbhuhKHGysw.roa (raw, json)
Hash identifier: /O4EbA48aEEiJApxq665x76lsnlw7KarK44L2LV+dKg=
Subject key identifier: 78:B1:C8:A3:C3:85:91:A8:41:21:6B:CB:85:B8:6E:84:A1:C6:CA:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E721C308D8ACD0A738F3A74CA25F6AD1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eLHIo8OFkahBIWvLhbhuhKHGysw.roa
Signing time: Tue 06 Dec 2022 11:11:00 +0000
ROA not before: Tue 06 Dec 2022 11:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:21:c3:08:d8:ac:d0:a7:38:f3:a7:4c:a2:5f:6a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 11:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78b1c8a3c38591a841216bcb85b86e84a1c6cacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:07:19:92:16:80:12:27:80:71:41:2c:f0:
a0:75:8c:a5:ff:f9:3a:55:bc:ce:29:b7:b3:9a:ce:
0f:83:d9:21:d6:0e:e3:e2:04:38:a6:58:47:be:28:
29:a3:18:8e:f9:91:61:59:ff:89:e3:4a:57:83:c0:
74:de:7a:4f:ea:d4:d2:17:d8:3b:f9:c8:db:e3:5a:
ad:89:b9:25:f4:e0:9a:b3:76:da:e5:9e:df:88:76:
34:c9:db:06:83:4c:34:5b:ad:bb:13:fe:b9:b8:67:
18:5d:e4:4e:d5:6f:1e:fe:49:ce:1f:01:58:cb:99:
5d:fa:88:88:10:c0:b0:2e:8c:da:64:4a:f9:9e:1b:
15:c0:95:1a:d9:ac:e2:03:31:78:df:07:29:1b:38:
51:05:09:ee:8a:84:84:34:9b:95:8b:9b:1b:3b:ce:
9d:b9:09:ac:66:4f:32:89:0f:11:c7:a8:b3:76:23:
f8:c5:14:00:ee:6f:21:06:7b:1a:a7:0f:ad:50:52:
96:c1:7d:f1:6d:4d:d7:56:41:a8:93:b2:88:c1:e1:
a4:13:ee:24:50:e2:ba:64:9b:fe:16:ac:7f:4d:b0:
7e:df:61:e7:36:3f:87:d8:50:5b:0a:0e:1f:0d:2a:
fa:5a:4b:ea:2a:a9:02:e9:f2:7f:c2:ed:a0:0e:b7:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B1:C8:A3:C3:85:91:A8:41:21:6B:CB:85:B8:6E:84:A1:C6:CA:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eLHIo8OFkahBIWvLhbhuhKHGysw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:c3:c8:41:3f:92:c3:e6:18:59:0c:1f:86:ef:73:e9:b6:27:
05:41:64:06:5b:c9:d8:c7:95:8b:4e:1b:f7:3f:44:8d:68:90:
69:e1:46:6e:03:25:e0:ac:45:5c:6b:0e:54:cf:ab:6a:ab:39:
d7:6c:28:b9:b1:ac:b4:f0:1f:71:fb:50:1c:b3:fd:f9:0f:5e:
fd:7e:c6:5a:e2:e6:a7:b7:ad:92:43:da:d6:0a:a3:4a:53:6d:
68:d6:56:40:1e:d5:37:bf:45:26:d6:e1:51:f5:3e:61:4c:00:
df:8d:57:dd:ff:b8:32:97:c3:78:a4:81:6a:76:c4:64:1a:ad:
86:ee:2b:ba:2b:4c:89:c8:48:45:e5:57:16:e7:70:47:13:51:
c7:ab:c4:93:bf:9b:36:60:11:24:21:5e:b1:c9:d2:1d:31:d9:
0b:e1:ea:4e:49:23:e5:ff:15:23:cf:18:1d:b8:9e:b4:ab:74:
e0:31:14:fb:c8:d5:58:92:15:22:8e:07:09:e0:b8:51:cb:12:
0b:f5:5d:ed:46:23:38:0e:31:10:f5:d8:42:7a:e8:9b:4b:f3:
35:a1:5d:19:4e:cb:8a:9c:9d:70:fe:7b:82:02:78:ae:6e:92:
15:ae:f9:a5:05:c3:3a:62:d3:19:5a:dd:9b:2a:6b:e1:ed:74:
ca:17:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:57:58 2025 by rpki-client