Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/epUgwkY5_vjSMlfV9FzY1Q8BAwg.roa
File: epUgwkY5_vjSMlfV9FzY1Q8BAwg.roa (raw, json)
Hash identifier: XTwZ/zb+xnjpxPf5ODfTQmNzfd+BIry7HqEeC4foVfE=
Subject key identifier: 7A:95:20:C2:46:39:FE:F8:D2:32:57:D5:F4:5C:D8:D5:0F:01:03:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 864C0B8E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/epUgwkY5_vjSMlfV9FzY1Q8BAwg.roa
Signing time: Sun 22 May 2022 10:16:29 +0000
ROA not before: Sun 22 May 2022 10:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2253130638 (0x864c0b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 10:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a9520c24639fef8d23257d5f45cd8d50f010308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:3c:d1:0f:dd:6b:d8:53:2e:37:e2:5a:7f:
dd:02:fa:6f:2c:b2:7a:f5:34:79:09:c1:eb:02:2c:
a3:4e:05:9e:4f:3d:d1:d1:1f:cc:2f:55:f7:f2:8f:
b9:32:59:12:f9:c2:d3:2e:e7:f8:3a:08:d9:6e:3b:
01:06:27:2e:85:5b:9a:f4:49:94:26:3d:54:61:45:
8f:6e:09:64:c3:0b:1e:43:60:c4:c2:70:45:9f:5e:
00:6f:c3:46:15:59:12:03:26:46:df:77:2a:19:0c:
bc:ca:cb:cc:46:17:19:76:c4:b6:a6:95:6b:34:d9:
d8:ca:40:e7:17:9b:86:cc:03:07:a3:db:d6:0d:af:
bc:2e:ee:a5:22:bf:49:aa:ec:e8:bc:5c:0d:e8:bc:
8b:b5:18:05:d9:5b:fd:38:88:ee:a6:71:62:a5:bc:
22:41:2a:22:2e:ee:1a:96:3a:da:ad:8f:2b:df:42:
e4:55:9f:e4:96:e2:d4:ae:01:17:00:16:c5:7e:84:
02:61:1b:e0:83:2d:b7:48:43:65:4d:ba:c5:02:bc:
30:e6:ec:eb:4e:f6:23:70:24:1f:5d:d3:d4:01:fe:
32:64:f5:f5:f1:bf:c7:3a:ef:f9:68:bd:e9:87:45:
59:a6:c6:86:0f:47:52:c0:ff:61:64:bd:f3:73:0c:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:95:20:C2:46:39:FE:F8:D2:32:57:D5:F4:5C:D8:D5:0F:01:03:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/epUgwkY5_vjSMlfV9FzY1Q8BAwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:b7:1e:a4:93:57:77:47:af:5c:6f:91:0f:62:d7:e4:7e:49:
41:ed:ae:b7:80:2d:90:20:50:8d:c4:1d:6c:ab:12:c1:6c:06:
75:b7:c5:9e:c4:fa:13:06:73:db:37:16:42:36:49:43:cd:af:
a1:a7:2a:92:be:ee:35:c1:85:d1:00:91:4e:15:ba:0e:3b:6a:
f5:dc:e8:9d:b5:47:1b:e0:cc:f8:48:86:29:a7:21:70:98:be:
a3:49:36:69:28:81:e0:47:34:d9:a4:43:d4:1d:db:37:18:2e:
db:bc:62:b5:58:cb:21:f8:2a:20:c5:0f:2e:2e:ce:2c:54:00:
1a:7f:97:59:c1:20:9e:6e:bc:c3:e6:2b:b7:e3:cc:c5:c7:e8:
27:ea:a5:2c:66:52:23:10:06:e9:5b:e3:9d:c5:cc:11:1d:9c:
c1:75:17:42:cb:ee:28:0c:e5:d5:32:2d:df:cf:de:43:33:91:
df:d1:e7:92:87:dd:12:c4:e7:56:65:26:cc:47:9f:6f:39:91:
59:a5:7a:ec:ef:ee:83:d5:26:5e:cb:3d:bc:03:77:c9:5a:a0:
2a:0d:02:1c:bd:02:ad:93:6d:51:5f:61:11:ac:f8:2b:96:ca:
6b:b3:5c:d0:73:f8:40:ed:c4:1b:c1:17:f1:19:5a:ca:af:3d:
8f:22:00:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:28 2025 by rpki-client