Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/67-7eu0WLG6-DBf4DOoeR6Q_rKo.roa
File: 67-7eu0WLG6-DBf4DOoeR6Q_rKo.roa (raw, json)
Hash identifier: p7cx3ZBiOXYEVyQQMbFZofCu/6pcfFwbngXcyNT6ex8=
Subject key identifier: EB:BF:BB:7A:ED:16:2C:6E:BE:0C:17:F8:0C:EA:1E:47:A4:3F:AC:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018417A5B4B92A6D4228E026F0488680665D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/67-7eu0WLG6-DBf4DOoeR6Q_rKo.roa
Signing time: Thu 27 Oct 2022 04:14:06 +0000
ROA not before: Thu 27 Oct 2022 04:14:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:17:a5:b4:b9:2a:6d:42:28:e0:26:f0:48:86:80:66:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 27 04:14:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebbfbb7aed162c6ebe0c17f80cea1e47a43facaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:e8:a8:ee:86:a3:0e:7c:d6:b8:15:a7:9e:
25:25:3e:58:42:21:b3:ff:e3:dd:72:b2:d8:c7:fd:
d9:ad:02:1c:30:ac:5c:81:08:3a:10:1c:e2:b8:7d:
14:46:5e:22:d4:7e:9e:8f:32:02:95:bc:35:ff:4b:
03:1f:b1:b4:65:1e:45:6f:95:09:69:99:1f:9a:60:
37:92:b2:6e:48:21:ab:85:cf:10:63:0b:1e:9c:ee:
18:b7:4e:34:93:15:fe:e9:ce:14:19:ad:50:7b:ed:
f6:e0:f9:10:5c:d3:3c:08:8e:78:30:c3:df:27:93:
59:9f:bb:c9:d7:6b:05:be:78:fd:36:14:ad:57:5b:
ea:fe:c6:1d:36:df:13:5a:e5:9e:f8:03:1a:de:05:
ff:ba:dd:34:41:b8:bd:ed:20:08:e1:d3:46:b3:91:
34:aa:03:9d:59:fd:76:24:93:8b:62:50:6e:37:f4:
02:fa:c7:39:b2:56:bb:f2:69:b3:5f:ca:5d:f8:1b:
5c:76:0e:c2:c9:6b:67:2e:a4:31:b3:59:66:14:95:
08:1c:33:f4:cc:37:80:71:ec:6e:37:10:03:93:13:
1d:b4:2c:9d:d1:ee:df:8c:5d:9f:2b:97:9c:90:77:
5a:97:6f:50:c5:a2:3b:fe:67:e8:d7:02:c0:32:78:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:BB:7A:ED:16:2C:6E:BE:0C:17:F8:0C:EA:1E:47:A4:3F:AC:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/67-7eu0WLG6-DBf4DOoeR6Q_rKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:23:b2:a3:8f:60:db:8b:cb:15:17:28:0d:03:92:c1:bf:9d:
fd:df:fb:d6:c5:4f:07:24:53:04:f2:24:71:5f:c6:3a:4f:7c:
ac:87:11:e4:25:a1:3f:b7:a9:03:a5:80:38:a9:65:2e:c4:91:
10:7a:1c:ce:90:00:de:25:5e:d4:cf:9a:2f:7e:b3:ad:8f:bb:
8a:1d:fb:53:b6:14:de:26:fc:b6:a3:ed:f5:da:94:a9:5a:c8:
32:5e:d2:cc:30:0e:0f:1e:3a:c0:6d:b5:fd:43:e2:12:33:7d:
95:3d:ed:9d:89:54:9c:ef:1a:8b:95:0b:98:98:69:5a:da:e5:
fe:86:cd:52:5a:f2:da:ca:63:79:4f:d1:b2:31:75:f8:54:e0:
5a:6b:85:df:2c:7c:96:52:16:ac:4f:ad:0a:c2:85:f0:77:d3:
0b:53:25:3c:82:2a:7f:b0:b4:89:3a:bb:66:08:81:a2:ab:fb:
99:1c:5a:e6:54:d4:46:e3:83:f4:7f:dc:92:37:f3:3e:a5:fb:
fc:3c:26:9c:5b:81:02:6a:94:49:3e:e7:49:8b:65:a4:55:8a:
9a:61:f7:25:c0:f2:05:76:0b:8a:e5:2e:a4:a9:30:ff:5b:7d:
88:7d:0c:bf:90:c4:64:38:92:3f:78:3b:24:ee:55:73:50:18:
0b:30:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:05 2025 by rpki-client