Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MMUTHySl_6o7BKgrCV50S-xE1c.roa
File: 7MMUTHySl_6o7BKgrCV50S-xE1c.roa (raw, json)
Hash identifier: lRUOa1TzA7WX/guxXLKz51ZlwxBw3N0+RgxF9m4z5EQ=
Subject key identifier: EC:C3:14:4C:7C:92:97:FE:A8:EC:12:A0:AC:25:79:D1:2F:B1:13:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 76F3EF6B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MMUTHySl_6o7BKgrCV50S-xE1c.roa
Signing time: Wed 30 Mar 2022 11:10:34 +0000
ROA not before: Wed 30 Mar 2022 11:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995698027 (0x76f3ef6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 11:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecc3144c7c9297fea8ec12a0ac2579d12fb11357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:e1:bb:ac:09:d4:9b:21:a2:7d:a8:68:85:
52:bc:83:5f:3b:ab:b1:24:d9:51:3f:d9:42:38:64:
7a:6d:73:30:94:8f:12:4c:26:09:74:70:ad:b7:1d:
fe:4e:b7:bc:15:f1:63:45:6a:fd:e2:34:35:e5:3d:
2f:9a:27:37:1c:ff:1f:0d:44:19:7c:57:7e:86:61:
46:5b:78:ae:6a:e1:05:cd:cc:3c:eb:1d:7a:9e:31:
81:41:58:2c:61:2a:43:ff:e0:ff:12:40:4f:56:dc:
05:52:ef:f3:0f:78:87:e8:3a:de:24:a0:f4:82:7a:
d9:c4:24:fa:31:d2:c2:73:24:d2:ca:95:0f:35:73:
8e:80:a8:5b:16:f2:45:38:a5:61:f6:19:da:6a:d2:
75:98:61:3f:ad:54:06:ff:aa:48:99:88:e7:67:6f:
80:16:6c:22:69:30:a3:0c:8f:67:15:6a:17:0c:1b:
f4:11:3b:59:d9:02:19:4f:70:02:e6:5d:0a:4f:a0:
8d:ec:e8:ad:9a:77:96:cd:4e:f4:1a:0b:93:5f:41:
88:57:e4:76:a1:9c:78:a0:32:1e:4e:b8:5b:37:f1:
d5:bb:ef:80:dc:12:ed:cb:9c:50:f9:8b:e5:05:6b:
39:c0:87:08:60:9c:3d:d9:b0:37:3f:69:bb:af:8b:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C3:14:4C:7C:92:97:FE:A8:EC:12:A0:AC:25:79:D1:2F:B1:13:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MMUTHySl_6o7BKgrCV50S-xE1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:55:66:2d:f0:58:40:af:da:61:80:13:c9:75:eb:b2:b0:e2:
0a:fc:6f:54:83:da:55:2a:73:27:f1:9f:ba:ff:6e:a4:e3:53:
d4:db:d7:6c:c8:2a:2a:e3:ba:c5:5d:86:fd:ff:b0:c1:39:40:
c9:72:84:b8:5f:46:7c:14:8f:eb:16:15:f6:63:a9:62:26:7f:
61:f7:68:ea:70:21:15:d4:ac:51:31:e9:ba:93:fd:ae:9a:b4:
55:57:90:02:42:ef:a9:36:16:83:c9:81:6a:eb:ec:a4:b3:d1:
ca:6a:da:14:98:57:d9:d7:8b:73:04:83:3b:55:24:56:65:ee:
04:ed:c9:e2:77:af:97:31:ee:39:9a:7c:a2:dd:37:3c:89:5c:
d1:6f:ab:af:92:e8:75:6d:e5:d3:3f:8e:8a:68:bc:12:d4:66:
de:0b:82:d1:aa:33:d0:4a:80:df:90:ce:1e:a7:85:b5:bd:6a:
a3:ad:1b:5e:c8:27:9b:e7:e6:6f:a4:d1:8f:b7:c7:eb:f7:c1:
f1:a6:ce:95:d6:70:45:70:87:bb:4a:3f:fe:05:85:87:70:ee:
d8:ea:d5:08:84:0c:02:33:82:32:bd:a9:53:71:85:60:9d:d5:
e5:cd:2e:71:15:a7:0e:1f:b4:27:70:2b:43:06:8b:0a:53:ba:
b4:b0:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:06 2025 by rpki-client