Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7JzBp2XpaE8beYuP4hhY8jo_KHE.roa
File: 7JzBp2XpaE8beYuP4hhY8jo_KHE.roa (raw, json)
Hash identifier: VM8foaXHxYae8sAqRrSYdGY4pMPpgHLeOGscrEEn/Kw=
Subject key identifier: EC:9C:C1:A7:65:E9:68:4F:1B:79:8B:8F:E2:18:58:F2:3A:3F:28:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018743C98CCB2B3114C8AB5ADAF3132B6ECE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7JzBp2XpaE8beYuP4hhY8jo_KHE.roa
Signing time: Sun 02 Apr 2023 21:04:54 +0000
ROA not before: Sun 02 Apr 2023 21:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:43c8:d298/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:43:c9:8c:cb:2b:31:14:c8:ab:5a:da:f3:13:2b:6e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 21:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec9cc1a765e9684f1b798b8fe21858f23a3f2871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:2a:18:1f:b5:02:e3:69:6a:e6:13:43:11:
49:43:b5:96:8a:7a:04:9c:6e:db:1f:cd:92:c4:dd:
89:9d:3a:4a:5c:fc:b4:43:95:d2:36:fd:d6:61:15:
f2:e9:4c:9e:dc:0c:a1:9b:bf:69:e3:01:e8:d5:f5:
a0:e8:04:61:30:6a:fd:26:52:11:6d:ef:23:77:13:
6d:26:41:3a:47:f6:1f:e4:fe:b5:80:58:8b:87:2f:
4d:d1:5c:bc:56:de:d7:09:52:f2:12:df:d4:4a:4b:
6a:e4:bd:e3:2e:ff:08:a5:b0:12:6d:18:65:58:41:
a0:6e:7d:0c:33:a5:0f:e7:d8:c9:71:cd:b7:b5:97:
57:71:81:0a:71:7d:00:d6:36:2c:a7:4b:45:be:81:
a5:c4:da:f2:c6:44:1e:fd:9b:ea:d4:b3:2d:8d:e9:
5a:e0:21:40:4a:c6:9f:e6:4f:a6:f5:26:e6:8d:13:
0d:65:a9:45:37:4b:c2:ef:ba:e8:ac:31:2c:ee:40:
20:97:4e:a6:37:0a:3b:33:42:f1:87:fa:9c:43:6c:
e6:85:5c:70:3f:3c:37:27:0f:cd:74:be:5d:c0:0c:
ba:d1:40:e6:bf:87:5d:a1:b8:4f:b6:fa:0a:6c:b4:
90:f6:7a:a5:f0:9f:b8:9a:d8:9e:cc:32:a2:e6:69:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9C:C1:A7:65:E9:68:4F:1B:79:8B:8F:E2:18:58:F2:3A:3F:28:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7JzBp2XpaE8beYuP4hhY8jo_KHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:b8:7b:6c:9c:9a:52:06:27:63:91:48:68:f1:d5:08:b2:3a:
6a:b1:df:50:14:34:a7:96:2f:ac:03:d1:af:5b:16:29:79:bc:
f2:77:c1:af:34:78:7c:92:82:f2:36:d2:42:3b:02:3e:56:96:
59:92:c7:db:b8:9e:be:c1:2b:7e:13:24:8a:ac:e7:e4:b1:11:
5c:41:4a:a4:c6:a7:63:b2:5e:55:54:28:27:f0:37:3b:6d:a3:
3c:c7:ae:56:e1:fb:0e:2d:7a:6e:ff:1b:8a:45:27:75:e8:0c:
0c:69:86:7c:fc:c9:d4:fa:99:24:92:d1:bb:b7:d8:40:cd:bf:
70:1e:b7:5f:1d:fc:02:4e:fb:28:ad:63:15:38:8c:74:e6:91:
2b:f5:d1:94:12:8d:36:e9:ac:4b:7b:48:ee:b2:f2:e0:49:88:
26:be:dd:1a:25:81:6c:50:04:80:88:c9:53:42:e0:05:49:91:
62:8e:e9:eb:6f:9b:32:41:af:53:75:e4:ae:33:3e:73:cd:25:
4f:94:4d:44:b9:aa:68:e6:16:89:e5:06:eb:e4:5d:57:fb:ef:
37:69:01:15:be:43:92:0e:a9:b8:cd:dd:17:58:48:2b:12:97:
33:50:73:43:71:99:21:8d:5c:84:74:bf:b8:bd:82:c7:f3:25:
e6:27:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:53:31 2025 by rpki-client