Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/te_ErosZWEPBrZZWqyFVAX4YktU.roa
File: te_ErosZWEPBrZZWqyFVAX4YktU.roa (raw, json)
Hash identifier: xc5y0gV36nCos7Vme9BoFY/ArvG8Ag59oL0rxOOhmCg=
Subject key identifier: B5:EF:C4:AE:8B:19:58:43:C1:AD:96:56:AB:21:55:01:7E:18:92:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B5185152CA0A027EC97B4ABD408AA090
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/te_ErosZWEPBrZZWqyFVAX4YktU.roa
Signing time: Wed 02 Aug 2023 07:13:37 +0000
ROA not before: Wed 02 Aug 2023 07:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:18:51:52:ca:0a:02:7e:c9:7b:4a:bd:40:8a:a0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 07:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5efc4ae8b195843c1ad9656ab2155017e1892d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6b:d5:ba:15:12:4f:3b:bb:c0:26:b5:6e:85:
9a:e8:a4:ca:d3:3f:12:8c:ec:c1:7e:e9:cd:fc:d5:
05:f3:dc:cd:dd:2a:92:e1:56:9c:ec:31:72:18:84:
5b:9e:f9:8a:4d:87:84:bd:6f:d0:46:70:da:25:a2:
b0:f1:3a:c3:a9:36:c7:05:65:e6:df:7e:a4:04:75:
ea:21:7f:ba:96:bc:49:79:38:46:05:99:01:62:15:
fe:dc:99:75:b9:2b:19:95:61:a8:4f:75:6d:c7:29:
b8:87:e8:63:33:b0:6a:78:f6:cf:e3:d6:da:64:dd:
99:53:b3:63:ee:68:85:de:95:32:ea:b7:d9:28:b2:
80:64:bd:8a:eb:09:77:b9:41:57:22:b0:ca:41:0f:
c5:fc:f7:51:5f:67:55:a5:d9:7d:4a:27:82:44:a5:
2f:3e:64:68:44:5b:fd:84:81:49:fc:1b:6e:9c:c8:
b4:bc:d1:94:6d:88:ed:13:54:6d:9c:48:8d:e5:49:
e1:48:98:7b:8a:91:69:20:d7:50:b3:11:96:16:59:
6b:6d:05:ed:22:e2:5e:42:94:47:92:58:1f:5c:75:
a6:55:10:51:f5:cb:6f:36:1e:ab:d0:bb:b3:d3:b1:
02:d4:93:a2:ea:e2:fc:a1:49:68:35:2f:27:f3:24:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:C4:AE:8B:19:58:43:C1:AD:96:56:AB:21:55:01:7E:18:92:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/te_ErosZWEPBrZZWqyFVAX4YktU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:92:2d:5e:df:7a:7e:4b:27:10:fd:36:89:71:6a:c6:fb:f6:
48:be:80:e0:88:c5:d8:40:f9:f8:93:ef:22:93:05:6b:16:c6:
89:04:04:36:0a:43:72:89:04:27:95:98:fc:f4:36:de:fc:d9:
c0:85:05:c9:a9:db:b7:d7:43:d5:a0:b3:05:59:f6:13:ce:bb:
e1:0d:c1:3a:c8:af:09:13:e5:a9:b9:03:a2:66:21:cc:b7:25:
46:ef:4f:24:24:31:1b:fc:79:59:4c:ad:ad:ee:36:0a:73:14:
f4:d8:40:fa:a6:e4:ae:90:97:64:8e:04:1a:cc:24:66:25:1c:
ec:61:80:e9:8a:6a:9e:62:5c:dc:ef:49:6a:6f:71:14:f7:ba:
15:e5:ee:39:d3:93:4a:b3:eb:57:d3:b4:4d:ca:04:ed:82:d9:
5d:ad:6c:93:0e:d7:74:22:23:b5:c7:63:31:be:47:ca:27:86:
e9:9b:38:46:9e:12:2f:eb:a3:9b:bd:2b:16:ae:6f:bc:f9:5f:
dc:8f:2d:b7:b4:62:02:2c:00:ef:58:56:34:13:e1:7f:83:c9:
0a:f8:75:79:f2:ee:10:d2:ed:2a:0f:55:56:ab:dc:e5:69:9a:
4c:05:a9:11:22:2b:77:3e:0a:2d:02:14:90:38:69:c1:ae:74:
31:c1:53:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:19:22 2025 by rpki-client