Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3u7ZfHyJ1de6CYwtfyxPqLmz6sY.roa
File: 3u7ZfHyJ1de6CYwtfyxPqLmz6sY.roa (raw, json)
Hash identifier: usP3NJsAG6OPcmFWGAID03C3PGdp2UiP4ypvuf8A6Qw=
Subject key identifier: DE:EE:D9:7C:7C:89:D5:D7:BA:09:8C:2D:7F:2C:4F:A8:B9:B3:EA:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896E776A5E3DD96D8934A876A0F0F82240
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3u7ZfHyJ1de6CYwtfyxPqLmz6sY.roa
Signing time: Wed 19 Jul 2023 14:04:26 +0000
ROA not before: Wed 19 Jul 2023 14:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:189:6e77:4c4d/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:77:6a:5e:3d:d9:6d:89:34:a8:76:a0:f0:f8:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 14:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deeed97c7c89d5d7ba098c2d7f2c4fa8b9b3eac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:2f:0e:70:4f:ae:b4:b3:24:bf:2c:57:39:
98:0d:76:63:a5:3d:a1:63:f6:1e:30:6d:e9:a9:96:
32:35:07:24:a5:56:76:62:ba:05:ac:f7:ef:d7:40:
ae:9b:12:5a:9b:d3:f4:3e:ff:a3:eb:c4:b5:7f:53:
06:96:c1:df:3b:8d:53:15:f4:95:11:40:8f:92:18:
75:db:42:5c:c5:4f:70:f8:f2:c7:8b:e1:20:43:b0:
bc:fc:51:6a:e8:ab:4a:9a:85:4a:95:df:97:54:75:
cc:3e:e8:f8:d0:d1:1a:0e:37:92:d4:0a:b8:7d:3a:
6a:47:49:88:ec:17:42:7e:2c:4d:20:18:01:c0:eb:
69:a6:b1:1f:31:0f:7a:d0:4e:26:58:76:6f:57:f5:
ae:6e:fa:3b:c6:26:29:8f:bc:94:bc:8a:f9:d9:7a:
c3:80:5c:94:24:f5:3f:d0:ae:b8:d9:7d:e1:f9:3e:
0e:d1:12:0b:bc:b1:25:13:86:d0:c5:b4:25:ad:87:
63:9a:f6:6f:ee:b7:7a:8d:9c:e0:f4:02:26:18:fa:
a9:41:ef:37:b6:dd:fd:ca:5a:16:e7:03:4a:f7:24:
f8:84:c6:40:b8:30:11:14:b1:fd:e0:f6:ec:97:e1:
83:8e:ca:07:37:ca:7f:20:82:20:6d:68:3d:f2:e1:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EE:D9:7C:7C:89:D5:D7:BA:09:8C:2D:7F:2C:4F:A8:B9:B3:EA:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3u7ZfHyJ1de6CYwtfyxPqLmz6sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:d4:33:ad:8c:fd:90:7a:5c:e6:7b:67:90:ad:e9:e1:0f:8c:
f2:40:1c:eb:ed:dd:30:c2:4a:58:e1:db:b9:a6:fb:69:a9:94:
81:1c:df:66:85:61:95:a5:21:f8:c0:ff:c7:6a:b7:c4:f0:0c:
13:bb:7f:fd:83:f0:a9:5a:67:07:6e:51:c2:1e:08:0f:ac:65:
f8:52:15:85:2b:c7:44:93:cc:b2:f8:3b:29:13:33:7b:0e:0d:
8c:22:73:5f:a4:4c:5b:7b:c1:c4:71:b1:4b:68:6b:bf:49:75:
7a:25:e1:d5:80:10:cc:ca:c6:77:7f:16:c7:03:2a:db:14:42:
e0:1a:b8:58:87:0d:9f:8c:aa:56:ee:f4:f2:5a:30:5d:8c:61:
d1:ec:4a:7a:18:5c:70:13:8a:ca:d4:75:4e:07:45:fd:15:8d:
e3:87:d8:c5:69:26:0d:e1:86:8b:48:cd:fb:55:fe:16:83:f2:
5b:70:ea:05:ef:5a:69:44:d3:17:0f:f3:8a:4a:a3:5a:1a:2c:
df:7a:b5:02:d4:ec:b8:27:fd:ec:9b:79:75:a6:05:86:b7:10:
00:da:a1:67:5f:10:a7:5b:ae:4f:e8:fa:ef:ee:38:d9:96:ed:
ef:78:40:16:e0:5c:37:f1:52:bc:af:40:24:33:63:7c:e7:93:
26:17:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:22:08 2025 by rpki-client