Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRmP8jRt0Ww2OHm5EvZJfJmkrYc.roa
File: eRmP8jRt0Ww2OHm5EvZJfJmkrYc.roa (raw, json)
Hash identifier: ACmyJBvNPqwfb023r5GFivK/Dxg1uPtSs9PfJtx/FZ0=
Subject key identifier: 79:19:8F:F2:34:6D:D1:6C:36:38:79:B9:12:F6:49:7C:99:A4:AD:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A7635B6D2D7F2F7098FF6CE1E987A63C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRmP8jRt0Ww2OHm5EvZJfJmkrYc.roa
Signing time: Thu 12 Jan 2023 19:09:44 +0000
ROA not before: Thu 12 Jan 2023 19:09:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a7:63:5b:6d:2d:7f:2f:70:98:ff:6c:e1:e9:87:a6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 12 19:09:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79198ff2346dd16c363879b912f6497c99a4ad87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:ea:c2:57:91:6b:e4:49:e6:81:de:11:e9:
ef:ec:90:01:9f:9d:08:58:09:83:28:7c:4f:ec:6a:
89:64:23:99:aa:d9:0c:c6:66:08:a4:ed:02:98:cf:
8f:96:38:25:3a:30:f5:db:7a:91:3c:90:a2:51:06:
8c:62:13:11:72:50:f2:8e:7f:63:89:d0:b4:b6:23:
f3:d0:71:7d:d8:d0:6d:34:af:c2:b3:d0:4b:de:c1:
30:1f:db:8d:37:87:e2:a1:79:8a:8d:44:f1:93:e2:
0a:bf:da:e0:9b:4f:e7:fe:ad:15:85:63:38:70:04:
2d:61:48:0e:89:58:c3:88:d9:e3:73:8f:77:3f:4d:
11:cc:4b:16:04:b9:13:bc:1e:55:f9:ab:89:6f:28:
ca:f2:21:c4:86:19:42:b8:20:0d:9a:49:1b:c9:7f:
90:75:d1:a5:75:ad:62:7e:f7:a4:08:c6:8a:92:66:
a3:e9:49:b6:a9:35:c4:12:ae:dc:2e:87:b4:43:29:
e4:7a:87:35:8a:13:d7:43:e4:df:2f:21:6a:a4:01:
33:c0:83:c5:58:3a:30:ad:8a:1c:17:de:08:08:fb:
14:22:37:16:36:1a:d8:38:b0:9c:81:66:0b:f7:07:
a5:bd:74:6c:01:28:30:2a:9a:31:10:d1:ad:a9:81:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:8F:F2:34:6D:D1:6C:36:38:79:B9:12:F6:49:7C:99:A4:AD:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRmP8jRt0Ww2OHm5EvZJfJmkrYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:bb:d2:c1:92:60:f5:45:05:70:90:85:df:5d:78:c2:08:13:
d5:38:5a:c8:c3:d5:2c:93:66:b1:e2:69:b4:b5:47:54:c0:f5:
20:3c:a3:1e:e0:c5:6f:99:5d:94:ac:07:1f:ea:f2:a8:f3:7d:
ad:f3:2e:b3:d8:33:81:40:5d:47:f6:44:50:88:de:07:06:b2:
08:77:aa:1d:c5:30:a7:dc:42:6c:8a:60:63:c9:0e:e8:1b:1d:
86:12:c4:17:55:47:0c:c7:42:90:98:58:b4:eb:8e:23:f6:ea:
cd:d3:42:d8:d7:bc:1f:61:ba:29:9a:57:dd:78:c4:fd:1b:13:
e7:f0:45:68:03:6a:3c:55:5c:b1:65:16:8c:34:f1:7e:0e:1c:
20:02:dd:14:7f:e5:8a:a9:e2:fd:ef:f6:97:d7:00:88:de:fe:
93:a7:59:2e:5b:62:5b:cd:47:49:88:f1:17:c4:1f:a1:68:53:
32:2c:ec:cb:fa:44:7a:c1:c8:ea:c9:1f:6f:5b:25:a5:9c:32:
f7:88:6d:d0:d6:01:cf:5d:96:5d:17:22:2c:2b:3d:88:5c:a2:
a0:7f:a6:39:d1:fa:c8:ca:8d:29:16:0a:9c:34:97:c3:7b:ce:
1a:66:e4:aa:65:f6:46:5a:fe:b5:1c:2e:89:18:8a:53:b0:31:
2e:aa:5c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:29:49 2025 by rpki-client