Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7IUmLg-eeDedHbSwKHfiB61yJo0.roa
File: 7IUmLg-eeDedHbSwKHfiB61yJo0.roa (raw, json)
Hash identifier: p5xIWvSOQgA/+tkw4kqF3TLgAHwLzD2znqiCR7mepVM=
Subject key identifier: EC:85:26:2E:0F:9E:78:37:9D:1D:B4:B0:28:77:E2:07:AD:72:26:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895FE8AFED000AC6B1D985EF2D1D46CD7D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7IUmLg-eeDedHbSwKHfiB61yJo0.roa
Signing time: Sun 16 Jul 2023 18:13:52 +0000
ROA not before: Sun 16 Jul 2023 18:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5f:e8:af:ed:00:0a:c6:b1:d9:85:ef:2d:1d:46:cd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 18:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec85262e0f9e78379d1db4b02877e207ad72268d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b1:93:0b:30:b0:3e:96:74:53:e9:33:1d:60:
58:eb:bd:8f:51:c4:47:6e:65:59:bf:b4:7e:7b:a6:
cd:5d:66:fd:de:f6:7d:28:86:10:2b:87:3e:0d:2e:
f3:f3:67:2d:02:23:f1:21:fb:68:c8:89:db:1a:00:
50:21:87:ff:68:1c:f4:72:a2:fa:4a:ac:d0:74:d1:
d6:74:59:8c:45:97:31:c7:77:a8:97:06:80:f2:29:
31:92:5a:90:ee:e3:5a:a1:92:f0:e1:6e:64:c9:7c:
49:e3:2c:e6:e3:8e:5a:9b:93:59:d0:4b:5f:0f:64:
b5:d7:8e:cb:08:64:61:d6:e4:d9:64:84:86:ef:54:
db:9c:4d:1a:76:01:33:26:df:66:6c:3f:8f:ea:cb:
9d:df:ce:9e:6a:81:78:50:10:e9:fc:c6:4d:87:e6:
5a:ec:81:e3:57:4c:a2:42:02:5f:95:c4:52:99:34:
d9:33:bd:94:17:4b:a0:d6:b4:6e:22:a3:a0:00:d0:
5d:81:df:3f:c2:74:b2:16:63:7e:1d:cf:4f:f4:36:
cf:87:61:50:8a:08:a3:d6:c4:84:f6:4f:bd:27:af:
a1:98:5a:47:9a:ef:3a:92:62:a0:fc:bd:52:d4:5e:
30:74:93:7c:7b:e5:36:72:91:e4:25:ac:ee:3e:0f:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:85:26:2E:0F:9E:78:37:9D:1D:B4:B0:28:77:E2:07:AD:72:26:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7IUmLg-eeDedHbSwKHfiB61yJo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:14:2f:4e:0f:c5:e6:41:84:7b:97:dd:38:07:ff:44:53:39:
57:11:76:13:7e:63:7c:47:3d:5c:8a:09:64:c7:70:c3:b5:3c:
25:c1:45:da:56:75:4b:50:c5:b1:28:c2:33:f0:13:9a:2f:26:
b0:b6:45:08:84:20:f9:55:ba:d1:f7:7d:92:79:f5:d3:9e:3b:
37:6b:d5:f8:a2:61:cc:c8:b1:50:3a:2e:17:e4:24:02:23:73:
b8:26:2c:d3:8d:d5:1c:97:c8:59:4a:c9:29:73:ab:d6:2b:ee:
d2:55:1a:67:bd:20:2a:c2:4e:de:8e:62:d9:04:80:fb:df:73:
59:e7:ad:8a:cb:8d:1c:27:1a:01:c0:7a:44:c6:49:ae:a7:14:
03:6e:d1:f4:41:85:48:b9:86:05:b9:6f:5c:0a:a7:53:56:e6:
bc:82:f5:cf:9b:fd:42:70:78:64:e8:7c:da:ff:d1:d5:20:16:
f6:c5:1d:d5:26:be:27:c7:a3:ec:fe:7a:7a:8e:52:ca:3b:16:
33:9d:ad:c6:0b:15:e5:98:f9:0f:a6:d3:e3:de:f9:cd:00:80:
93:8e:61:09:a3:0e:c3:45:7c:8b:ad:65:bf:4e:5c:c5:28:ea:
f6:2a:d7:d8:cf:1c:e1:56:4d:24:7f:77:01:11:03:3c:40:7d:
82:e0:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:23 2025 by rpki-client