Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7GGVeaANBnxS_CXSDrl6zj9-_NY.roa
File: 7GGVeaANBnxS_CXSDrl6zj9-_NY.roa (raw, json)
Hash identifier: x9WqPQdrTIiAR/G5qxvUhnso74VZwNeQOdklBZlNSbQ=
Subject key identifier: EC:61:95:79:A0:0D:06:7C:52:FC:25:D2:0E:B9:7A:CE:3F:7E:FC:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184CE3E4EEB7F601C06DE53D3E8E7FFB390
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7GGVeaANBnxS_CXSDrl6zj9-_NY.roa
Signing time: Thu 01 Dec 2022 15:11:40 +0000
ROA not before: Thu 01 Dec 2022 15:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:3e:4e:eb:7f:60:1c:06:de:53:d3:e8:e7:ff:b3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 1 15:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec619579a00d067c52fc25d20eb97ace3f7efcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:a7:e4:09:3f:2d:9a:31:49:c0:8f:b3:85:
a2:75:b2:b3:59:fc:0d:b1:ce:72:f2:b4:11:95:e7:
b2:40:82:54:b3:0b:f3:a2:3b:29:2b:68:09:a3:6f:
42:74:2d:46:5a:40:5f:81:13:33:33:9b:5b:fa:94:
07:51:ee:cf:9e:71:52:33:c7:c3:93:ae:19:0d:90:
73:24:e6:b4:ab:1e:e6:97:bd:ef:77:bb:d9:54:14:
55:5c:13:bb:11:7a:a5:c2:ee:50:ad:5e:db:1e:4b:
e5:87:d2:29:de:f9:12:30:97:56:a6:62:0c:71:89:
3d:b4:c3:af:69:a5:94:65:e0:10:5b:fa:96:4c:49:
7d:de:25:c2:ee:ed:fd:48:db:de:2d:f7:b1:d2:98:
e7:f5:99:93:6c:bf:7a:3b:f8:81:5e:af:ed:d2:70:
0b:e7:3b:1c:78:0b:3b:ec:8b:e8:c5:b7:e3:5c:b1:
c6:9e:ad:56:c4:ee:eb:ab:59:a6:24:04:f7:81:1b:
4e:93:39:9b:85:4e:d3:33:85:7f:dd:70:5c:51:9f:
20:95:b5:1e:eb:7e:01:01:80:a5:fd:b0:63:2d:16:
9f:2b:70:68:6b:a9:f9:f8:22:df:e2:d6:2b:02:46:
d9:4c:17:65:c0:70:60:40:9c:21:1a:f7:5c:d5:e4:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:95:79:A0:0D:06:7C:52:FC:25:D2:0E:B9:7A:CE:3F:7E:FC:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7GGVeaANBnxS_CXSDrl6zj9-_NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:b0:a0:31:c3:81:21:cc:0c:6e:a3:d4:81:61:a1:56:ee:f2:
f6:77:d8:62:da:62:a9:83:15:dc:69:0a:2e:e4:9c:89:19:88:
02:46:11:bd:c7:4e:65:89:c2:44:2a:ca:4b:d7:68:a2:0a:79:
3d:0c:31:ec:6d:c1:d7:51:f5:c6:ae:00:0b:90:12:01:10:73:
cc:40:95:09:91:d6:ac:c9:1f:a7:19:53:ee:ce:39:3c:65:5a:
72:51:75:90:79:05:28:6e:04:b5:5b:1a:96:10:e2:39:94:80:
81:d9:58:db:2e:34:51:8c:2e:37:de:a7:28:2c:cc:c3:40:3b:
c4:60:ec:26:11:56:91:c5:b8:2e:be:5e:fa:02:2b:cc:01:40:
01:26:62:98:d8:6d:82:68:b4:a5:17:aa:25:dc:b9:7e:5a:58:
53:69:59:c0:bd:2b:bf:f3:e7:e1:d8:1c:c8:1a:82:16:e2:78:
15:7e:e0:59:6e:49:01:bc:8d:1f:0c:87:ce:0a:8f:c4:00:3f:
8d:20:ca:a9:bd:1c:57:df:4a:d5:e9:76:07:93:c4:6a:ac:2c:
10:17:70:60:d8:17:2f:79:4c:84:17:a0:5d:3b:24:21:e3:fc:
ec:0f:3a:9c:2f:5b:02:1b:0b:7e:fb:51:62:5a:b8:94:1a:40:
ad:4d:e4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:48:18 2025 by rpki-client