Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eQTyk3Ahe5mnDRjvg1Qjer4em9w.roa
File: eQTyk3Ahe5mnDRjvg1Qjer4em9w.roa (raw, json)
Hash identifier: sqTR15Y5tNJySC66wAbYCaqK7LHPiMn5OawLWwbg4oQ=
Subject key identifier: 79:04:F2:93:70:21:7B:99:A7:0D:18:EF:83:54:23:7A:BE:1E:9B:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018554F8FC23B433657A60D597E3223DA0F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eQTyk3Ahe5mnDRjvg1Qjer4em9w.roa
Signing time: Tue 27 Dec 2022 19:04:41 +0000
ROA not before: Tue 27 Dec 2022 19:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
2001:67c:64:ffff:0:185:54f8:7422/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:f8:fc:23:b4:33:65:7a:60:d5:97:e3:22:3d:a0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 19:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7904f29370217b99a70d18ef8354237abe1e9bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:a9:3f:c8:f1:0c:b6:e8:54:99:d5:40:94:
4c:93:11:0a:69:06:3d:e4:9f:20:79:6f:58:e2:b9:
4a:55:dc:d2:ed:3f:d3:b4:7b:bb:37:b0:5c:e0:ee:
d8:5a:35:36:11:1b:9a:3a:b7:c8:ef:f6:48:65:5e:
28:b3:1a:9c:79:3d:41:09:78:69:09:9d:a5:7a:9d:
34:ef:a1:13:fc:bb:07:c1:0b:0f:2b:4a:0c:43:76:
e7:0a:35:08:9c:4e:c9:1c:80:ef:6e:16:1f:27:c9:
d0:6d:36:d3:d8:36:3a:f8:25:e0:8e:d5:bb:18:d7:
ec:a1:aa:c4:82:35:e1:98:db:c3:36:d1:44:7e:fc:
6e:ad:89:d6:63:df:9e:17:32:98:bb:3a:94:da:6e:
69:06:49:55:cd:5d:1d:d1:33:8c:dc:eb:e6:da:aa:
a8:97:dc:a3:f3:82:42:b4:0f:35:02:31:5b:34:28:
61:54:d2:23:8a:39:42:f2:c3:9c:6d:3f:aa:f4:03:
5b:d4:3d:74:b4:9d:b3:59:7c:9a:16:d4:62:df:08:
aa:3a:2e:fe:66:02:da:0b:1a:30:55:e3:7a:a2:60:
f8:cb:fe:d0:2d:54:45:7b:b5:a7:ed:d1:19:ef:57:
9f:1a:79:3e:97:3f:88:3a:39:88:5b:ec:7b:d9:e2:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:F2:93:70:21:7B:99:A7:0D:18:EF:83:54:23:7A:BE:1E:9B:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eQTyk3Ahe5mnDRjvg1Qjer4em9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:38:36:e6:6e:d9:97:72:b0:f6:64:a4:5d:35:52:43:5a:79:
77:88:24:6f:eb:28:fd:f4:2c:36:bb:47:e4:3c:26:06:2e:57:
40:a8:e9:dd:7c:0b:f2:f5:13:25:1a:2d:12:6c:01:19:5e:54:
b0:56:44:64:4e:c3:23:1f:b2:0b:b6:6b:8f:ae:a1:83:a8:38:
24:f5:01:2c:34:0c:4e:33:85:20:0f:cd:b2:99:a0:9e:d7:af:
24:e3:eb:62:89:96:49:4a:99:4e:bf:49:3e:40:2c:e6:e5:d9:
19:b0:de:29:35:f4:06:ba:e0:e9:fc:0c:bc:f9:ed:d3:87:77:
51:9c:10:8e:a3:0f:3c:09:6d:64:f3:b2:cb:29:28:fd:22:14:
c1:d6:24:d3:6b:db:ff:8f:f8:7f:65:71:87:11:b5:2e:84:2a:
6c:94:ed:d4:75:fb:72:83:00:b7:67:7f:98:30:db:7d:d2:f6:
18:8e:ef:1a:b4:e6:ff:07:c0:85:c1:c6:9b:b6:cf:06:2e:20:
fa:41:84:c5:18:97:92:0a:db:83:fc:2d:8a:61:6a:6f:13:87:
f0:90:1f:2d:87:b7:b8:35:42:59:1f:aa:7b:91:a8:45:7c:ad:
ef:73:47:43:9d:4d:5a:90:58:31:16:48:bb:0e:6d:3c:0d:8f:
d9:36:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:14 2025 by rpki-client