Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ch7QzpuM0qtjBr-Phj3hY-8Ed8.roa
File: 0Ch7QzpuM0qtjBr-Phj3hY-8Ed8.roa (raw, json)
Hash identifier: dEGPF0biN/DUJUcCiNC7NUfJ0JgDcSk6a3Lr3XVAYf0=
Subject key identifier: D0:28:7B:43:3A:6E:33:4A:AD:8C:1A:FE:3E:18:F7:85:8F:BC:11:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E35159C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ch7QzpuM0qtjBr-Phj3hY-8Ed8.roa
Signing time: Sun 24 Apr 2022 23:10:49 +0000
ROA not before: Sun 24 Apr 2022 23:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117408156 (0x7e35159c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 23:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0287b433a6e334aad8c1afe3e18f7858fbc11df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:59:e8:7c:9f:2e:31:e6:3b:bb:2e:69:ce:
4e:8b:3b:f7:12:e3:17:bd:30:f8:2c:3f:02:05:bb:
2f:d9:4b:95:f2:09:1f:2a:52:4f:cf:b4:30:60:25:
0a:5e:4c:32:02:8e:b0:4d:5d:eb:c5:ac:18:22:a7:
09:78:e2:b7:a7:4f:54:24:63:6f:b3:17:34:e2:33:
5e:a6:cd:d0:90:2e:2e:5b:32:8c:5e:d7:41:12:6e:
34:c6:4e:fe:0f:c1:4a:c5:be:e7:54:92:e0:75:93:
83:e0:75:f6:26:68:02:c7:ed:ff:60:d4:51:5f:85:
62:64:04:57:f5:87:4e:b1:14:12:a0:8c:23:5f:4c:
40:c8:77:d4:9d:5c:02:dc:9e:6b:11:ea:62:47:d5:
d3:81:2d:ef:fe:3b:04:a0:b0:b3:6f:de:ae:51:22:
af:2c:77:a6:ad:12:0c:d8:15:ca:9b:30:8c:96:e1:
b4:39:b5:d5:75:b8:31:43:b9:bb:86:79:db:15:25:
13:77:ed:36:73:8e:ad:6f:ea:7f:8b:c0:fe:15:c4:
56:0b:8a:74:62:a5:5f:b6:26:2d:1f:eb:12:34:b6:
6d:a7:27:6d:ea:66:dd:f3:e8:f1:4d:fe:8b:2f:d0:
e0:30:2c:e2:d5:c1:9e:45:07:24:cd:ae:58:d7:e7:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:28:7B:43:3A:6E:33:4A:AD:8C:1A:FE:3E:18:F7:85:8F:BC:11:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ch7QzpuM0qtjBr-Phj3hY-8Ed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:fa:46:da:7e:55:e0:a3:b7:0a:f9:c5:eb:ab:3c:a6:cf:59:
c1:5c:5d:b9:cd:d5:b0:5d:2a:e9:f0:10:ff:c0:51:29:27:66:
f3:ca:23:d6:98:b6:cf:3b:ba:65:3d:5e:2f:34:54:1f:b1:6a:
c5:88:d3:75:93:70:65:13:e9:cc:c2:68:0e:3f:92:5e:8e:e5:
c3:64:ac:a3:e0:b0:53:3f:1d:41:5c:30:bd:76:30:6e:f3:4f:
f3:fc:6c:57:99:eb:be:ba:32:a2:60:a2:5c:8a:69:c3:7a:71:
b2:9f:4f:2c:75:20:a7:9f:d7:22:d6:a7:2f:70:fa:1a:55:55:
e0:85:f3:61:fc:8b:1b:91:12:bb:bb:0b:8a:ea:9a:85:53:d0:
a4:29:f4:81:30:67:15:c2:39:06:48:2a:e7:d3:86:76:63:4c:
b5:37:2b:50:d7:e9:f6:d7:03:87:8a:0e:31:12:4e:e0:fc:1e:
e9:2d:31:63:46:e2:ce:70:06:db:2d:00:b4:ab:83:4f:6f:9e:
3b:bf:39:32:86:c9:e5:76:80:ba:0a:a5:29:da:bb:fa:21:f1:
00:88:f9:c0:03:a8:d8:3b:9c:dd:33:2f:c5:40:90:97:95:30:
bc:d8:85:40:84:3a:d6:3f:e7:6b:73:d1:01:09:88:ae:f5:bb:
30:46:55:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:19:05 2025 by rpki-client