Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f0Esk_cgIH27EY0vp0lZiTMAX00.roa
File: f0Esk_cgIH27EY0vp0lZiTMAX00.roa (raw, json)
Hash identifier: zTlsJNBqK7QpjP+VU1Ak5R6H7ZzhmsjWfAOA3K2vygw=
Subject key identifier: 7F:41:2C:93:F7:20:20:7D:BB:11:8D:2F:A7:49:59:89:33:00:5F:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018671F9C07DA678CF9EA2DB41746E8180AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f0Esk_cgIH27EY0vp0lZiTMAX00.roa
Signing time: Tue 21 Feb 2023 03:17:18 +0000
ROA not before: Tue 21 Feb 2023 03:17:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:f9:c0:7d:a6:78:cf:9e:a2:db:41:74:6e:81:80:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 03:17:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f412c93f720207dbb118d2fa749598933005f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:ce:89:48:9f:38:8c:71:4b:82:fc:b9:c4:
c0:6d:ff:4d:7b:7f:5a:76:d4:17:ba:c2:a1:7d:6e:
e5:ad:f8:2a:af:7b:8b:89:d2:c5:bd:31:5c:2d:d0:
ec:3b:8a:12:ff:7a:9a:54:6a:fd:42:59:97:df:45:
4f:f0:5f:65:2c:0f:1c:fe:7a:7f:e4:3b:c8:14:20:
dd:70:c1:bd:57:2d:88:4c:10:ea:cb:04:9d:66:27:
86:52:d5:6c:a2:b8:e2:b0:49:43:e0:07:75:1c:ff:
7b:6d:9f:41:7d:a5:58:60:df:1c:b6:69:c3:7e:ca:
de:03:e2:53:d4:73:77:ce:96:5d:ca:0e:af:20:39:
ef:5e:82:ba:93:26:cc:fb:24:67:ef:d5:7f:d8:ad:
8a:45:62:61:8f:18:50:6c:54:f6:b1:71:b2:42:91:
1d:fe:a4:91:98:91:b0:3d:a5:e6:04:a7:53:bb:10:
28:c7:21:8c:3c:7b:ee:65:32:88:8b:f5:c9:4e:df:
c8:66:cc:d7:63:74:13:4f:4e:82:9f:78:87:91:cc:
d1:4c:27:be:46:5e:5e:a3:c8:5e:aa:5b:85:4a:cc:
f3:d8:55:bb:5c:c8:b9:44:28:e2:61:ea:a5:dc:0b:
4e:75:9c:05:85:44:45:93:16:e3:e4:fa:a4:3d:cb:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:41:2C:93:F7:20:20:7D:BB:11:8D:2F:A7:49:59:89:33:00:5F:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f0Esk_cgIH27EY0vp0lZiTMAX00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:97:7c:59:3f:f1:0c:7f:aa:d5:66:c4:d4:b7:27:23:65:d7:
29:73:ed:2c:32:cc:80:d3:54:71:06:32:d5:9f:1d:33:40:2d:
78:d9:bd:16:43:85:88:1d:39:dd:ab:43:a5:33:e9:b4:7d:55:
26:6c:93:ac:a0:fb:f0:e3:b5:2e:e2:cd:64:44:23:80:8e:53:
da:11:98:8e:4d:32:f3:d3:08:9b:c5:3e:63:19:c8:14:fb:48:
d6:2a:49:b1:bd:cd:35:09:52:a0:0c:ee:bf:39:ad:a4:4b:88:
5d:c5:d8:ea:ae:ca:e0:81:be:a3:d1:d1:79:14:9f:36:d6:e2:
1b:19:21:92:a7:f2:4c:ff:e8:e2:d8:80:4f:b1:75:0a:90:b8:
77:61:8f:47:f7:fc:2d:69:76:86:c4:41:d9:d8:49:3e:72:71:
1e:7c:99:c5:a4:cb:21:f3:8e:05:61:aa:b6:14:f1:7b:ee:b9:
59:6f:d1:fc:f5:ca:5d:14:a5:a7:da:74:f1:06:d9:33:5c:53:
3b:53:d4:84:d8:5b:92:93:18:cd:4f:a4:0c:e9:81:2f:35:7d:
16:da:87:76:13:c2:9d:53:97:ff:73:a7:83:c5:48:1e:18:34:
7f:96:05:89:03:c6:6d:1b:7d:99:2c:0b:0a:5d:60:08:99:1e:
e9:b3:24:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:47:09 2025 by rpki-client