Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eeOVts4WR747vmJJqHpQbPSlzPQ.roa
File: eeOVts4WR747vmJJqHpQbPSlzPQ.roa (raw, json)
Hash identifier: n54ph+76PLrQndkYwbDQmXuMjsLASLTqrxFIJRWRAbw=
Subject key identifier: 79:E3:95:B6:CE:16:47:BE:3B:BE:62:49:A8:7A:50:6C:F4:A5:CC:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185026215CD651062CD8091E1BD89CB4F6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eeOVts4WR747vmJJqHpQbPSlzPQ.roa
Signing time: Sun 11 Dec 2022 18:11:00 +0000
ROA not before: Sun 11 Dec 2022 18:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:02:62:15:cd:65:10:62:cd:80:91:e1:bd:89:cb:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 11 18:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79e395b6ce1647be3bbe6249a87a506cf4a5ccf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:6e:71:0c:98:34:db:cc:6a:a0:1e:f0:72:
9e:36:26:b1:07:15:fe:a8:6a:8e:59:4b:d1:3d:3f:
32:ec:9a:9e:3b:d2:b7:bd:4e:c7:5e:d2:de:c8:86:
89:9c:2d:aa:50:a7:62:6d:0d:4c:1e:48:cb:76:17:
f8:18:4f:10:0a:ac:6c:fe:b7:34:f9:a7:ee:b0:62:
5f:12:70:29:e9:41:1f:d7:e2:5d:c2:4b:9d:b6:82:
cd:c5:51:02:e5:9a:c4:50:b8:0b:b6:85:bc:dd:93:
c0:31:d0:2c:bb:4b:e5:68:27:ec:e4:41:8b:a5:fb:
ba:8c:cf:2f:9b:ab:68:02:1a:9a:bf:c3:7e:c7:31:
5c:06:56:9a:d6:b5:e5:91:1a:59:d1:73:da:ee:c7:
93:82:84:c7:88:7d:4d:6e:dd:17:d1:ae:34:57:40:
b2:3c:97:2b:bf:d9:aa:4f:72:a0:82:6d:ec:d8:63:
85:13:98:1f:93:c3:22:4c:2d:ef:f0:70:ac:1f:67:
a1:28:26:a9:12:6d:a6:4f:e8:b9:3d:86:69:e9:3b:
11:98:79:d2:39:16:53:fb:c6:95:c2:9f:e4:16:c4:
38:70:a2:30:6d:67:35:fa:5b:3d:df:2d:7e:6e:a7:
d4:6c:b3:bf:ef:ad:29:44:99:d7:43:0a:69:68:71:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E3:95:B6:CE:16:47:BE:3B:BE:62:49:A8:7A:50:6C:F4:A5:CC:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eeOVts4WR747vmJJqHpQbPSlzPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:66:76:49:81:33:a3:cb:9b:62:8a:7d:72:ed:61:34:d2:cc:
1d:26:74:47:34:2a:8a:b9:e4:25:98:c2:fb:b2:ac:34:6c:df:
38:25:a2:da:21:f4:c7:05:0d:ee:49:df:43:49:78:10:33:2b:
95:77:8f:aa:79:02:ce:7c:86:4b:16:7f:ae:30:bb:16:50:00:
69:2f:8a:37:cc:27:54:21:0b:4d:7e:58:14:d0:44:d4:41:3c:
8c:f7:96:aa:8a:4d:a2:6b:1e:e5:7d:c5:d8:e8:7e:dc:64:22:
20:af:e5:49:9e:ae:23:c7:6c:5d:ac:ed:bb:95:96:85:ce:b0:
9d:b2:de:58:ff:24:2e:16:4f:98:b8:14:9e:cb:d9:c1:d0:09:
ba:11:1e:26:de:43:2c:c7:b9:b5:5a:a5:88:ec:63:26:a8:c8:
28:b8:43:85:ba:09:52:9f:d8:ce:9f:88:f1:90:13:4e:98:57:
a3:8d:5c:df:b1:ec:a9:b2:00:b1:75:5b:71:be:00:7c:8d:db:
52:16:4b:e9:81:66:f9:a3:e4:be:3c:fe:e7:13:20:ab:38:c7:
1e:bd:25:f3:5b:7a:55:53:f0:2f:3c:e1:5e:7f:44:e1:d9:ec:
d2:ba:9d:3b:b7:56:7c:d4:3e:75:8a:75:9d:36:06:52:45:61:
45:2f:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:47:44 2025 by rpki-client