Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eQvhsLCuhDw9ux9ySxJRe9ZniWA.roa
File: eQvhsLCuhDw9ux9ySxJRe9ZniWA.roa (raw, json)
Hash identifier: Z9AY0Cm2IcXmsf6pXbxrm5oYxE5Sn2nMvVuSTM5l9ks=
Subject key identifier: 79:0B:E1:B0:B0:AE:84:3C:3D:BB:1F:72:4B:12:51:7B:D6:67:89:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018995C5FBA2A47C60FF948982091A3EAC4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eQvhsLCuhDw9ux9ySxJRe9ZniWA.roa
Signing time: Thu 27 Jul 2023 05:15:27 +0000
ROA not before: Thu 27 Jul 2023 05:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:c5:fb:a2:a4:7c:60:ff:94:89:82:09:1a:3e:ac:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 05:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=790be1b0b0ae843c3dbb1f724b12517bd6678960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:f8:8a:9d:9a:af:e9:59:34:c7:d8:8a:4d:
b5:e8:bc:35:3e:fc:63:e1:13:e5:c1:b7:dc:d7:70:
19:67:cd:e9:3c:b9:8b:e2:81:3b:ee:7c:49:b9:26:
39:01:9a:b5:85:e8:6a:7c:ea:6b:9a:3e:ff:ba:2e:
42:0b:21:ff:3a:ea:8a:f2:07:ec:c5:43:6f:b9:5a:
4c:f8:ee:b6:93:1a:19:4a:a4:97:e5:98:47:eb:8f:
cd:26:e1:fa:1b:4d:50:11:b9:5b:9f:fd:16:31:33:
cd:ab:e2:ad:ba:f2:d5:a9:5a:94:35:ef:02:85:ce:
6e:fa:12:53:1f:28:ea:15:d6:c9:e1:29:f2:28:df:
69:31:81:85:ec:ba:c2:e4:85:db:87:ca:e6:ee:2d:
29:44:d7:0a:1b:36:47:db:16:ef:c6:1e:c2:5e:52:
85:14:a1:4e:cc:56:5b:70:fe:0f:fc:4d:97:4e:12:
98:14:b2:dc:cf:cd:91:b8:85:26:65:25:d9:23:c7:
5c:37:a8:c1:50:8c:0e:c7:df:f8:16:a7:15:5b:b7:
d6:26:bb:7e:3b:d3:c4:1f:73:7a:49:e8:3e:d8:75:
63:88:36:bc:7f:c7:d9:fc:ef:e2:d7:10:11:8d:dc:
77:97:32:79:5f:b2:2d:45:c3:a0:e5:e0:a1:36:c5:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0B:E1:B0:B0:AE:84:3C:3D:BB:1F:72:4B:12:51:7B:D6:67:89:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eQvhsLCuhDw9ux9ySxJRe9ZniWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:01:9f:3c:66:a4:6e:9c:af:78:5e:15:72:e9:45:55:27:8d:
d7:4b:6b:c1:93:b8:44:ca:fa:2c:c1:34:bd:c6:5c:59:e2:74:
59:9f:ff:ef:8d:95:27:26:f6:ba:3c:57:9e:d2:56:bc:18:e9:
92:b9:0d:b6:e6:be:94:f9:84:e0:17:b4:20:72:5c:01:81:18:
27:60:fe:fb:5f:04:81:51:dc:ed:1d:5e:82:eb:00:47:54:5c:
14:ba:34:38:22:80:70:b9:ac:0e:57:7d:85:f3:72:42:19:83:
df:11:e9:ab:b9:21:43:7a:a4:e3:c1:99:08:95:66:6e:c9:7f:
7d:8c:6b:a2:f6:ae:86:d6:04:88:5f:cc:4b:9a:fa:c6:e8:a0:
ab:2e:af:11:7c:e2:b2:e9:11:04:7e:01:63:c0:c9:65:c2:af:
34:53:aa:17:ac:3f:25:93:ba:03:46:55:67:1b:92:df:d1:99:
6a:66:28:f6:90:f0:9f:7c:b4:03:b8:97:3c:d5:6f:47:ef:d9:
3d:0f:73:73:c4:5e:a4:da:12:9a:b9:57:7b:81:d7:07:e6:73:
c5:71:e2:e3:af:e9:c0:76:a9:06:f6:2e:af:a7:70:e6:7d:b4:
0c:a0:a1:7d:6d:7a:43:d3:c1:a5:80:76:8c:e8:87:a5:5c:0c:
57:12:6e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:55:15 2025 by rpki-client