Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eVEmRgFNfgq0YR7Xzlv4aFR-iro.roa
File: eVEmRgFNfgq0YR7Xzlv4aFR-iro.roa (raw, json)
Hash identifier: UOAy7BxhQb0ZlKH3kzdLC/wr9og2xKH2hOIzht/7BDs=
Subject key identifier: 79:51:26:46:01:4D:7E:0A:B4:61:1E:D7:CE:5B:F8:68:54:7E:8A:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880BFCFDDDAEDF27D7A51CDA3BD420D201
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eVEmRgFNfgq0YR7Xzlv4aFR-iro.roa
Signing time: Thu 11 May 2023 18:05:09 +0000
ROA not before: Thu 11 May 2023 18:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:188:bfc:588a/128 maxlen: 128
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:fc:fd:dd:ae:df:27:d7:a5:1c:da:3b:d4:20:d2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 18:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79512646014d7e0ab4611ed7ce5bf868547e8aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0d:98:74:18:10:ec:ba:e3:ad:27:95:08:3e:
a0:f3:9d:5a:6d:dc:92:77:f9:85:9c:1d:9e:c0:73:
45:21:c7:46:f1:12:b2:4e:f8:41:c2:4a:a2:3d:22:
44:b4:b4:84:dd:99:ba:fd:85:e5:6d:a7:d8:ff:d1:
96:09:1a:2b:be:b0:48:33:70:a8:8c:aa:68:5a:bb:
9e:37:20:e6:0a:0c:96:0f:4c:bc:b4:5d:a5:f9:9d:
18:8d:67:19:a0:d5:e0:ce:c4:ba:d1:7a:1c:ae:b8:
50:cf:92:a8:96:98:51:ad:5a:66:12:3d:4a:fb:62:
74:d7:7a:63:77:0d:10:9c:3d:1c:95:70:ab:0b:e9:
89:51:ef:2c:7c:b6:08:4d:c7:b5:db:0b:58:59:f7:
7d:c6:60:d1:03:4e:a4:fc:ab:ce:23:b0:97:6d:d8:
d5:b2:24:3f:65:8d:43:57:28:75:27:c1:f4:b7:c0:
2b:2e:67:59:07:9d:c4:79:d1:f4:95:c8:90:c3:6b:
79:80:8c:02:5c:3e:58:2f:b4:fc:67:42:97:c9:d7:
a5:9a:d0:cb:f6:16:13:d3:cb:a8:13:21:73:79:4d:
10:2e:1e:4a:12:8a:5d:7a:48:90:6f:eb:ed:0b:8a:
c6:44:05:fc:bb:92:79:10:8b:30:c5:59:c5:53:4c:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:51:26:46:01:4D:7E:0A:B4:61:1E:D7:CE:5B:F8:68:54:7E:8A:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eVEmRgFNfgq0YR7Xzlv4aFR-iro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:cf:1f:94:40:5b:7b:72:bc:f7:f3:84:75:3b:9a:35:44:cc:
7f:bc:ab:24:17:49:54:a2:6d:a1:29:17:c5:32:76:43:e5:06:
4a:14:a9:17:38:6a:00:5e:49:f9:55:85:26:d2:bf:39:7b:3a:
16:f4:2f:62:b4:3c:13:29:24:15:8f:df:72:79:c7:68:ce:3e:
bb:08:7f:1f:4b:15:72:06:9f:47:2f:e6:10:cb:a6:c2:50:55:
16:96:51:f5:7b:f0:42:1e:89:b6:91:40:9c:5c:76:cd:7a:e7:
0f:7b:96:15:27:6f:e3:52:8e:56:8a:4e:e9:c8:db:53:45:16:
4f:d5:a0:b3:a7:f8:c8:e9:5d:be:fe:94:e5:eb:6f:44:15:1e:
97:e7:fc:a1:4c:c1:7a:ec:11:9a:24:8e:09:14:89:24:7a:da:
ae:b0:48:f3:5c:0d:d8:88:7b:9f:e9:40:a5:a3:e7:c7:a6:43:
06:b2:ef:1c:09:e0:b2:f9:ad:d6:aa:5f:f5:39:70:93:b9:3c:
c6:b7:30:c1:b2:23:ac:48:55:e2:91:6b:5b:d3:a6:0f:ce:69:
63:03:5c:36:99:b4:7e:f9:ac:9a:06:ad:7b:05:3e:57:aa:94:
aa:86:ad:09:a3:7d:ea:fc:6b:cd:fd:c8:94:64:bb:59:a3:b0:
f2:f7:a7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:40:53 2025 by rpki-client