Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7JZ_hQU_H48HyxN9j-HWC5rB7x8.roa
File: 7JZ_hQU_H48HyxN9j-HWC5rB7x8.roa (raw, json)
Hash identifier: Ca6gboQ1xjtgpEeOz+NBF6oVxg1mU7M3h0v8bmYkB8w=
Subject key identifier: EC:96:7F:85:05:3F:1F:8F:07:CB:13:7D:8F:E1:D6:0B:9A:C1:EF:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018695FC4E8ADF68668F3A779B11594C0DE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7JZ_hQU_H48HyxN9j-HWC5rB7x8.roa
Signing time: Tue 28 Feb 2023 03:06:25 +0000
ROA not before: Tue 28 Feb 2023 03:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:95fb:bf72/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:95:fc:4e:8a:df:68:66:8f:3a:77:9b:11:59:4c:0d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 03:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec967f85053f1f8f07cb137d8fe1d60b9ac1ef1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:62:6b:82:e7:51:97:1d:8e:74:ca:c9:5b:
9b:6c:6e:22:45:94:d3:f1:9e:83:2e:8e:50:8f:c3:
a6:77:99:00:fe:84:03:61:18:49:e6:89:aa:b6:f5:
72:a9:32:d5:d1:03:9d:ab:55:c3:9a:21:c9:23:26:
d8:74:24:19:45:c7:5d:45:b7:9d:86:40:c8:9a:67:
77:6e:10:d2:84:ef:d1:66:0a:4f:58:6f:6f:b0:8a:
07:4b:99:5e:3b:8b:5b:84:7d:ac:13:b2:9f:54:70:
87:34:cf:4f:c4:77:a6:9e:e3:21:25:2f:de:d5:24:
f4:55:e6:0c:f2:f1:07:89:37:e1:05:25:15:b3:61:
17:c0:ee:7b:71:51:72:72:a5:88:cd:8a:3d:dd:b0:
d4:c7:ec:65:5b:3b:80:10:40:cf:84:5e:d2:a4:47:
2e:9d:95:3f:1c:6e:c3:38:b1:a0:3e:0d:c7:67:56:
d9:57:02:3c:06:37:c1:f2:a1:72:2d:13:ce:f1:43:
0a:c9:9c:4f:5e:6b:18:04:7b:37:1f:10:66:c5:9d:
ed:b4:9f:e6:74:75:ee:e1:2a:ef:e2:ba:23:7a:cd:
e5:8f:a1:cf:db:97:09:e4:f5:08:68:85:c9:36:e9:
37:6b:e9:43:02:e0:e4:cd:2d:2b:49:5f:6a:62:25:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:96:7F:85:05:3F:1F:8F:07:CB:13:7D:8F:E1:D6:0B:9A:C1:EF:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7JZ_hQU_H48HyxN9j-HWC5rB7x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:e0:61:f3:c1:ac:38:21:e7:40:5a:dc:3e:67:fc:b2:27:94:
2a:e6:63:bc:cc:6f:55:44:2f:49:be:3f:60:0a:86:01:08:b5:
50:6a:92:2c:1e:76:da:a6:6f:e5:46:85:39:ae:d9:71:96:96:
27:7b:8d:de:b1:46:ff:20:b8:e0:9d:c0:fe:fd:dd:06:18:b3:
19:9a:b0:3e:8e:a5:2a:75:f9:aa:57:8f:74:7d:d4:2d:c4:5d:
dd:0a:d1:a2:b7:06:8f:25:5b:25:75:37:25:d3:85:42:dd:24:
0c:64:9f:c9:ba:5e:e7:43:88:b3:29:54:a0:fa:29:d8:5b:7a:
98:2a:f1:87:c3:98:be:08:1d:b0:db:61:cb:73:2a:1c:25:85:
cb:b7:e5:41:a3:d6:ed:04:e0:be:03:fd:08:a1:a8:ed:84:c4:
88:86:0b:51:45:ad:4f:cb:e8:e9:d9:b1:0b:33:9b:1e:8d:b9:
92:2b:b6:2d:3f:ba:55:a1:a3:7d:92:32:9f:46:35:8d:61:62:
38:61:c7:81:55:cb:3d:69:e1:e6:62:e4:c6:41:9d:ed:9a:be:
9a:75:bc:b2:ee:5f:14:f4:d7:7e:72:35:a9:50:85:84:11:74:
fd:df:51:90:50:83:bd:4e:97:3c:36:55:36:81:f6:5c:e7:5e:
61:d0:da:2f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaV/E6K32hmjzp3mxFZTA3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI4MDMwNjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzk2N2Y4NTA1M2YxZjhmMDdjYjEzN2Q4ZmUxZDYwYjlhYzFlZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp31ia4LnUZcdjnTKyVubbG4iRZTT
8Z6DLo5Qj8Omd5kA/oQDYRhJ5omqtvVyqTLV0QOdq1XDmiHJIybYdCQZRcddRbed
hkDImmd3bhDShO/RZgpPWG9vsIoHS5leO4tbhH2sE7KfVHCHNM9PxHemnuMhJS/e
1ST0VeYM8vEHiTfhBSUVs2EXwO57cVFycqWIzYo93bDUx+xlWzuAEEDPhF7SpEcu
nZU/HG7DOLGgPg3HZ1bZVwI8BjfB8qFyLRPO8UMKyZxPXmsYBHs3HxBmxZ3ttJ/m
dHXu4Srv4rojes3lj6HP25cJ5PUIaIXJNuk3a+lDAuDkzS0rSV9qYiXfwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOyWf4UFPx+PB8sTfY/h1guawe8fMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN0paX2hRVV9INDhIeXhOOWotSFdDNXJCN3g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH7gYfPBrDgh50Ba3D5n
/LInlCrmY7zMb1VEL0m+P2AKhgEItVBqkiwedtqmb+VGhTmu2XGWlid7jd6xRv8g
uOCdwP793QYYsxmasD6OpSp1+apXj3R91C3EXd0K0aK3Bo8lWyV1NyXThULdJAxk
n8m6XudDiLMpVKD6Kdhbepgq8YfDmL4IHbDbYctzKhwlhcu35UGj1u0E4L4D/Qih
qO2ExIiGC1FFrU/L6OnZsQszmx6NuZIrti0/ulWho32SMp9GNY1hYjhhx4FVyz1p
4eZi5MZBne2avpp1vLLuXxT0135yNalQhYQRdP3fUZBQg71Olzw2VTaB9lznXmHQ
2i8=
-----END CERTIFICATE-----
Generated at Fri May 2 16:04:31 2025 by rpki-client