Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eSlTCGp4kUsHiFCCe9pSKHerC58.roa
File: eSlTCGp4kUsHiFCCe9pSKHerC58.roa (raw, json)
Hash identifier: 6KoTZFSuQ+6t77G8C2dllUbXDQNsoz++QVuGmRpWG9g=
Subject key identifier: 79:29:53:08:6A:78:91:4B:07:88:50:82:7B:DA:52:28:77:AB:0B:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018547066DFB85131ABDE1511D85FA013C9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eSlTCGp4kUsHiFCCe9pSKHerC58.roa
Signing time: Sun 25 Dec 2022 02:04:41 +0000
ROA not before: Sun 25 Dec 2022 02:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:4705:f9e2/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:47:06:6d:fb:85:13:1a:bd:e1:51:1d:85:fa:01:3c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 02:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=792953086a78914b078850827bda522877ab0b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:3e:e4:09:37:ce:42:13:09:6c:ca:b9:a9:
39:1d:14:62:41:e7:5d:5b:ef:de:48:da:78:62:89:
a1:59:22:e9:8d:16:12:00:3b:f4:f6:2d:99:61:49:
c0:3f:84:fb:92:3b:fb:b7:69:4a:7d:c1:95:79:b6:
80:e3:f1:6a:9a:cf:81:eb:a5:61:6b:4a:7c:a0:d4:
ea:16:68:c4:a5:dd:6c:39:28:89:03:a8:a6:29:80:
4c:d6:83:e2:c9:73:d7:0d:65:b1:33:0a:eb:ee:bd:
6b:3e:13:49:f8:cd:d2:ae:eb:7e:1a:2f:bb:76:b2:
34:e6:84:09:1c:6c:1c:6d:f4:d4:27:91:04:2c:69:
78:02:57:32:0a:48:fa:27:4b:26:bc:60:37:84:89:
58:b9:cb:12:fb:58:86:15:11:c9:33:01:b1:26:04:
6c:a9:b3:3e:3a:eb:30:2e:a0:4d:c8:ec:55:1f:df:
ed:8f:64:51:70:e3:33:a9:7c:bf:d7:9d:96:dd:34:
1f:98:76:09:a2:69:82:eb:d7:8b:95:a3:ee:ee:6a:
c1:4b:0f:ae:fc:da:eb:5c:56:41:17:7b:69:35:a1:
ce:bf:5b:69:ab:a3:89:b7:02:d5:10:7c:3b:62:84:
e1:98:4d:bd:a9:19:bc:bf:42:d6:b1:09:44:2d:0c:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:53:08:6A:78:91:4B:07:88:50:82:7B:DA:52:28:77:AB:0B:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eSlTCGp4kUsHiFCCe9pSKHerC58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:1f:50:a9:aa:17:45:1d:98:79:73:14:eb:b5:e5:d5:0c:b6:
aa:8b:6f:19:2e:e5:1a:58:b6:d6:57:5d:8c:2c:d8:63:77:08:
93:5b:a6:17:2e:a1:9b:1c:df:43:7c:6d:68:a1:dc:b2:07:f3:
52:00:63:01:c4:69:a0:7c:69:78:8b:b1:d8:16:3d:59:42:a4:
44:62:a1:c8:95:77:73:90:18:f8:47:95:c9:4d:53:94:6b:e8:
83:19:51:c4:ef:c1:33:52:7f:6a:26:58:8e:54:fe:14:2f:60:
c9:61:1b:34:90:ab:a9:6c:7d:b2:fe:67:1e:69:40:ad:f6:2a:
7d:07:14:7f:17:21:ae:32:cb:ba:8e:4b:6b:03:7d:b7:f1:4e:
68:11:a0:35:ae:1c:e8:7b:d2:c7:02:2e:4a:d8:20:5a:c3:1d:
80:86:8f:ac:46:9a:13:37:25:86:57:3d:33:4c:01:b0:38:86:
9e:b8:81:23:c7:cd:26:ef:b8:a4:c5:7f:92:5a:08:c3:88:8a:
3f:d4:1c:ca:82:90:20:02:83:ad:59:f3:e0:0a:9b:9a:8b:f4:
bb:e8:95:82:f0:7e:50:9f:f3:d9:4a:16:41:19:d1:e8:57:a6:
9c:d0:a3:00:24:c4:b5:46:14:af:f7:a5:88:e4:d5:96:f7:1b:
0a:76:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:46:05 2025 by rpki-client