Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7BYFpdklHnZFDdShHpeqwElW0SQ.roa
File: 7BYFpdklHnZFDdShHpeqwElW0SQ.roa (raw, json)
Hash identifier: FH6s4uznab9TtbcEtn21oRar8JBkzzAFPMof86kyGb4=
Subject key identifier: EC:16:05:A5:D9:25:1E:76:45:0D:D4:A1:1E:97:AA:C0:49:56:D1:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A43CC1CA08C9BB034E0AF7C22A87BA0B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7BYFpdklHnZFDdShHpeqwElW0SQ.roa
Signing time: Wed 30 Aug 2023 00:16:04 +0000
ROA not before: Wed 30 Aug 2023 00:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:cc:1c:a0:8c:9b:b0:34:e0:af:7c:22:a8:7b:a0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 00:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec1605a5d9251e76450dd4a11e97aac04956d124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:bb:85:a0:9b:ed:8d:2f:36:0c:03:21:93:
4f:b1:42:2f:a5:41:13:88:26:63:28:ce:28:85:62:
1c:a1:31:f1:8a:1e:91:c3:33:34:61:14:14:dc:42:
a1:26:73:fa:07:e4:ff:10:d1:f3:e4:62:b2:ec:40:
bc:fa:2f:9d:96:7a:30:93:42:5e:6e:66:5b:68:85:
1d:10:5f:b5:e3:f9:80:2c:3b:22:f8:5c:fb:ce:4a:
07:f7:8d:b2:e3:b3:4c:60:fb:52:f5:ac:ab:5e:f0:
73:7c:07:6d:77:be:ef:da:e7:f7:5e:41:06:cf:ea:
01:c4:a2:6c:fd:3a:8e:d0:df:bf:7e:62:ec:f5:f8:
af:83:a1:83:fc:3b:22:84:ac:11:65:a0:08:cd:65:
3c:13:14:f0:50:08:48:55:b4:a9:98:78:f1:01:98:
76:92:12:f4:83:e4:b8:52:8b:85:f9:c0:f6:96:ff:
cc:e2:a8:0e:97:6e:df:a7:ad:dc:fe:de:fa:e7:f3:
26:a6:b0:ef:72:40:b6:3b:ac:99:25:cd:ea:21:90:
ad:59:3e:81:36:15:fd:18:e4:0d:61:c0:b7:52:5a:
55:83:93:e3:a6:96:4b:85:8b:ac:e3:48:1f:64:d5:
f0:d1:99:b2:25:8d:f8:d0:47:33:38:3e:fd:3d:ea:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:05:A5:D9:25:1E:76:45:0D:D4:A1:1E:97:AA:C0:49:56:D1:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7BYFpdklHnZFDdShHpeqwElW0SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:61:6a:72:d3:6a:62:a0:f2:f3:80:04:6c:6a:e4:40:3c:d9:
04:d6:1f:de:82:25:e5:51:21:d2:65:cc:3c:5c:82:89:2a:3a:
52:b0:b8:9d:ea:72:5c:1e:9f:ae:d6:a3:29:8c:17:1f:37:7d:
ce:c0:d0:09:22:74:ec:c4:f5:78:3d:e1:ce:43:c9:d9:a0:e0:
4c:8f:d0:cf:b3:95:5f:74:c1:da:d2:4d:e2:d0:fa:50:06:3f:
e5:42:69:a8:6c:f6:a3:70:cf:af:7d:d4:bf:67:79:34:67:af:
58:d6:50:e7:e9:a4:6d:a0:13:ac:19:ed:d7:86:6d:46:66:bd:
63:30:98:8c:84:e8:16:16:69:6e:bb:57:4b:e4:be:9c:29:14:
c4:ee:c4:d0:40:d2:37:cb:4f:aa:f8:f4:5b:31:a3:24:6f:6a:
c0:53:1f:55:73:ff:c7:06:7b:3c:29:58:cd:be:1e:c2:40:ec:
d3:35:98:2d:05:72:7f:af:54:63:1e:0d:8f:1b:18:2a:bf:db:
6b:af:d1:2b:92:a8:1d:34:73:d6:f8:fc:d5:a2:97:25:a2:07:
03:a7:78:ba:aa:a4:24:ae:57:1e:c6:05:6a:95:26:f8:6f:0c:
76:b7:76:fb:11:e0:0a:fa:4f:ed:86:ec:99:25:65:3a:f7:48:
26:88:07:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:08 2025 by rpki-client