Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0R7ijuyOC-S0Aay7rGF7FTvG-Uo.roa
File: 0R7ijuyOC-S0Aay7rGF7FTvG-Uo.roa (raw, json)
Hash identifier: 5MWo0c9c5QzxUXadA5Rz/jCj8e9gZWsKVKRwwKiwg4Y=
Subject key identifier: D1:1E:E2:8E:EC:8E:0B:E4:B4:01:AC:BB:AC:61:7B:15:3B:C6:F9:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869DBFFACA48DFE157A98AA015B806F0B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0R7ijuyOC-S0Aay7rGF7FTvG-Uo.roa
Signing time: Wed 01 Mar 2023 15:17:29 +0000
ROA not before: Wed 01 Mar 2023 15:17:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:bf:fa:ca:48:df:e1:57:a9:8a:a0:15:b8:06:f0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 15:17:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d11ee28eec8e0be4b401acbbac617b153bc6f94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:f7:22:70:a7:60:f2:66:7a:69:9c:49:dd:
6b:a3:9f:71:92:ec:f2:25:a2:0b:83:66:46:ba:e4:
e6:8c:70:bb:f3:4c:64:30:65:b3:6b:a3:8e:3d:97:
07:00:e5:7a:53:a4:9e:cd:ca:95:fa:0d:c3:cd:5d:
dd:a8:82:1e:89:53:13:a4:14:a3:0d:fe:28:53:e7:
4a:6d:29:32:13:ba:9b:79:c4:ae:d2:37:13:59:8a:
59:c2:eb:18:e6:12:9c:7a:86:83:84:02:fe:0e:0b:
c0:1e:7d:16:fb:eb:05:f8:ad:34:3f:46:61:c8:19:
f2:1d:29:20:36:e2:8b:47:7d:ac:85:32:b1:6d:0a:
8a:91:3e:98:e1:db:0e:9d:4d:4f:a1:ad:ca:5b:58:
8a:98:a4:20:f9:55:43:c6:00:3a:ac:9f:78:dc:f0:
17:06:ec:56:e8:3f:2e:bc:6a:7c:1e:12:5b:e9:bf:
7d:d2:a6:13:d6:8d:40:bb:a7:96:a3:af:06:32:85:
c9:7c:a2:52:da:4a:ec:08:2c:db:c5:82:8b:56:e7:
d0:ed:30:af:be:34:36:66:cb:ec:19:51:f3:86:fa:
3e:0c:16:21:7b:c3:55:80:52:d3:f3:7e:e0:c3:d4:
b2:f4:91:1e:e3:cc:b3:3d:a2:7a:e8:ce:99:eb:83:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1E:E2:8E:EC:8E:0B:E4:B4:01:AC:BB:AC:61:7B:15:3B:C6:F9:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0R7ijuyOC-S0Aay7rGF7FTvG-Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:b5:d4:df:45:dc:80:f8:12:f6:19:d7:4b:62:e6:0d:67:09:
db:87:f6:54:6f:e1:d8:c2:58:f2:4a:3b:e3:f4:00:cf:e9:f9:
41:02:90:ad:e8:45:30:fc:fc:c8:9f:7e:15:01:3b:2a:38:e2:
bc:ef:3e:35:ab:60:34:46:0f:f8:cc:d2:2b:06:39:c9:26:26:
6e:6a:50:a2:8e:a6:72:87:67:71:b7:f6:97:5f:ff:a5:42:03:
c7:cf:27:ac:2d:a8:7e:d0:d5:2a:cf:ff:d6:94:68:fb:b6:81:
01:82:70:e4:24:9a:d8:ac:4a:f1:a1:bd:b1:cc:9a:6e:90:8f:
3d:28:5e:42:34:ac:2e:6c:03:f4:3c:3d:88:06:bf:90:4b:35:
be:34:0a:d0:ef:87:9f:e2:01:50:01:94:df:a2:a6:60:53:95:
b1:9e:e0:7f:bf:3f:9b:59:92:30:1c:ee:5b:29:51:16:c0:69:
c0:af:79:95:0e:27:8f:2b:7b:c9:f3:d6:5c:95:e8:ce:71:1d:
b6:90:c6:0f:83:20:12:4a:f4:cc:4e:51:be:cb:50:df:bc:45:
6e:f3:7d:cb:4b:13:13:6e:3f:a2:50:a4:43:5c:c0:33:25:69:
52:c9:ff:4c:4c:06:ee:bc:d0:bb:18:09:6b:30:62:fc:a0:82:
69:e8:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:18:05 2025 by rpki-client