Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7JKeUYvtfZWFgrMfM2pDL5DAOnI.roa
File: 7JKeUYvtfZWFgrMfM2pDL5DAOnI.roa (raw, json)
Hash identifier: vHkLvYeK55q5Ol529btE7Vd2BrT0wf2sL8cRH3KYNlI=
Subject key identifier: EC:92:9E:51:8B:ED:7D:95:85:82:B3:1F:33:6A:43:2F:90:C0:3A:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E6467706D9696E1C7A7CC3ADBD004358
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7JKeUYvtfZWFgrMfM2pDL5DAOnI.roa
Signing time: Tue 06 Dec 2022 07:11:28 +0000
ROA not before: Tue 06 Dec 2022 07:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:46:77:06:d9:69:6e:1c:7a:7c:c3:ad:bd:00:43:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 07:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec929e518bed7d958582b31f336a432f90c03a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:48:74:c5:d1:c1:8d:d3:cd:7e:47:c7:a7:
57:39:3f:fe:6f:b9:d0:cc:46:c5:08:d4:96:39:93:
29:bf:8d:7f:e2:da:ac:06:f9:7d:16:f5:7b:ab:b3:
5d:2b:eb:b3:9d:21:9f:d6:c5:ff:56:55:f3:41:8a:
e4:ec:f2:fb:14:58:a8:1e:5f:e4:a9:94:20:3e:dc:
ad:6f:ed:80:2e:dc:1c:88:15:f5:2f:65:3f:f3:74:
f7:54:29:17:3f:33:43:79:05:c8:5c:a6:09:25:22:
68:9c:12:a9:e4:00:c6:dc:61:f2:4a:9a:e5:80:eb:
98:97:25:28:bd:5b:54:9f:a0:3d:3f:50:7b:a5:ff:
2b:3e:23:c9:4e:ed:25:61:3b:b4:dc:fa:7a:c3:26:
3d:ee:e4:22:bf:8a:4a:32:4b:7d:cc:5b:d4:02:50:
e5:a4:e4:d7:81:f1:c0:c4:26:c3:23:b5:f0:56:35:
ca:79:1e:5d:db:99:55:c4:c5:78:2b:82:74:9c:fb:
46:47:fc:a7:aa:83:7c:f5:17:75:9e:97:32:74:81:
34:1c:87:2c:d9:47:0b:0f:47:84:58:99:1b:b9:8d:
c2:9c:e6:9f:3d:af:a7:69:cd:35:8e:8c:08:5a:9f:
d1:2c:0c:04:b2:6a:e8:8f:8a:c9:6d:fe:6f:f1:60:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:9E:51:8B:ED:7D:95:85:82:B3:1F:33:6A:43:2F:90:C0:3A:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7JKeUYvtfZWFgrMfM2pDL5DAOnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:2f:1b:84:ef:18:77:a4:57:93:b9:b2:cc:66:e7:08:68:f8:
99:61:cd:3a:12:f1:7d:41:65:6e:95:0c:3d:0b:e3:d3:9d:2c:
b4:ae:d0:ed:e4:aa:ad:90:63:cf:ba:49:5e:21:3c:01:9c:74:
aa:86:a4:cf:a8:d5:47:d1:e8:75:16:76:d0:6a:4e:df:93:6a:
04:3f:7e:f1:20:3b:3e:28:a1:67:90:99:42:78:a4:f4:bc:46:
94:14:20:84:a8:a2:28:2a:be:95:69:ab:a1:7f:0c:a1:40:34:
73:f4:65:67:b2:fe:f7:c9:e5:ce:23:b7:50:28:51:c8:bc:fe:
ed:d8:3c:91:4d:bb:ce:d2:71:50:13:8f:37:de:01:7a:ca:14:
40:72:41:24:ed:56:93:a1:b8:be:66:0c:51:c8:6d:cb:7a:de:
b1:75:12:54:fd:3d:16:ab:c5:d9:15:1c:09:35:c9:7a:85:c3:
2d:5b:a6:00:b7:1b:05:32:d1:61:6d:a1:8c:44:21:30:3b:ff:
49:c0:b0:6d:3d:91:87:6f:dd:6b:ae:6c:e4:97:4f:8a:4d:48:
63:ac:62:60:b8:19:ac:b1:09:a9:b0:48:ad:65:69:e5:06:14:
b1:8c:fc:9a:79:b8:04:31:11:8d:e3:73:51:d7:90:b0:4f:1e:
f2:a6:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:59 2025 by rpki-client