Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0S7tSHXCoaU_Syi6cq502dMn1mY.roa
File: 0S7tSHXCoaU_Syi6cq502dMn1mY.roa (raw, json)
Hash identifier: pVwMweO3013az5cc7VdyLpfdduV2wJYTB87zVhRzJLo=
Subject key identifier: D1:2E:ED:48:75:C2:A1:A5:3F:4B:28:BA:72:AE:74:D9:D3:27:D6:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896C227E0EEDFC210C87B5F244FD534360
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0S7tSHXCoaU_Syi6cq502dMn1mY.roa
Signing time: Wed 19 Jul 2023 03:12:27 +0000
ROA not before: Wed 19 Jul 2023 03:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6c:22:7e:0e:ed:fc:21:0c:87:b5:f2:44:fd:53:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 03:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d12eed4875c2a1a53f4b28ba72ae74d9d327d666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5a:a8:f8:eb:c6:ed:0e:d8:54:d6:6f:f4:96:
4a:07:8c:67:d7:4f:19:39:0c:7e:39:45:0f:d5:b3:
c9:85:ae:21:aa:5f:92:bf:77:64:c6:1e:de:f0:67:
89:aa:eb:ef:c1:d0:c3:02:e0:08:11:a9:da:d6:4e:
fd:4b:d6:f1:ec:9f:ff:da:56:01:e8:fe:9d:45:f9:
c6:d9:f5:46:65:70:d0:4b:40:b2:19:85:ca:15:43:
3e:eb:92:94:c1:91:7c:88:a1:97:ae:4e:85:b8:d3:
1b:76:3e:a9:9a:9d:a2:8c:94:09:17:14:f3:cc:2e:
e8:4e:d9:ec:36:47:82:b8:e3:02:a8:21:72:1b:21:
cf:30:08:bb:c8:65:03:e3:a2:5c:c9:b3:d7:c9:86:
dd:93:ea:09:1e:99:3f:f3:f8:23:f0:96:b5:d6:12:
03:84:b0:1b:8d:3b:56:c8:a2:e7:86:01:74:a6:60:
9b:5a:b2:36:92:f3:61:20:9f:9d:12:29:7a:68:7d:
c6:c4:97:e4:c1:b1:a5:e6:1d:b4:2a:b1:c5:52:d8:
ce:61:05:a6:50:d9:fe:d8:c7:20:c2:88:34:1d:12:
9c:53:6d:ca:9b:7c:a5:95:77:c5:a0:c4:27:17:a1:
95:50:c7:4e:56:05:9f:dd:b1:21:01:56:2c:41:04:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:ED:48:75:C2:A1:A5:3F:4B:28:BA:72:AE:74:D9:D3:27:D6:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0S7tSHXCoaU_Syi6cq502dMn1mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:d4:6b:80:5a:90:38:4b:ee:44:47:8a:e4:23:97:b9:3c:18:
1d:6c:0e:14:88:2d:2b:cb:c7:3e:ce:52:19:c9:57:55:08:f2:
fd:ec:0e:9d:1b:dd:ce:90:44:07:d2:85:f8:7e:62:65:1d:fe:
ed:f3:39:eb:1d:1d:0d:b6:24:bc:8a:18:4a:99:6e:4a:38:91:
c1:27:56:df:1f:7c:fe:94:5a:27:98:69:e0:1f:96:c5:fd:31:
37:1c:97:31:b7:bf:a7:f3:7b:81:ff:69:dc:5c:a6:42:29:49:
27:13:0f:b1:49:dd:90:f9:92:fe:4b:69:22:64:f9:d3:c2:9a:
f7:6b:26:85:de:5c:9a:60:5c:f6:93:5c:55:05:c6:f9:be:55:
d5:be:20:45:ce:93:c0:5a:28:cc:28:9f:09:2c:dd:78:e2:93:
51:e5:62:de:94:4e:70:22:05:af:6c:3c:2a:b7:c8:d5:15:b7:
52:f1:97:a1:e7:79:50:da:85:00:0b:f9:49:14:b2:59:b6:18:
a3:6a:37:b0:71:17:54:72:6d:94:03:b9:00:34:69:82:43:83:
d9:39:d1:ec:13:84:72:b5:78:55:b5:05:44:b9:d4:98:49:ca:
e4:76:f7:a2:18:d6:3e:cb:25:fa:17:08:49:a9:c0:fd:f5:10:
fb:77:cf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:05:17 2025 by rpki-client