Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MPnviq1axHumRpCD7p16nU3cjY.roa
File: 7MPnviq1axHumRpCD7p16nU3cjY.roa (raw, json)
Hash identifier: B66JCnITkPK1l3zuHXQ86d3fpyyTYGerZAWRu/AzRRw=
Subject key identifier: EC:C3:E7:BE:2A:B5:6B:11:EE:99:1A:42:0F:BA:75:EA:75:37:72:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FF174E47B9248E88FD43B0A6739A39C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MPnviq1axHumRpCD7p16nU3cjY.roa
Signing time: Wed 16 Aug 2023 16:04:24 +0000
ROA not before: Wed 16 Aug 2023 16:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:ff17:3f06/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ff:17:4e:47:b9:24:8e:88:fd:43:b0:a6:73:9a:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 16:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecc3e7be2ab56b11ee991a420fba75ea75377236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:30:55:0b:ff:27:e8:d1:20:41:1c:7d:0d:
70:97:d9:6c:f3:84:68:21:e3:db:4b:a8:0c:87:d5:
e0:8c:8e:71:bd:ce:13:02:82:3c:68:75:37:4f:37:
05:5b:2e:1e:80:79:b7:9b:c2:08:57:4d:62:24:23:
8b:f4:79:07:80:9d:e3:ef:46:8f:a5:dc:f7:b9:76:
9e:a6:ce:85:0b:b0:28:27:26:87:8a:22:aa:ab:fb:
13:3d:77:15:55:87:67:b5:f2:31:56:42:96:7c:61:
3b:dc:5d:a6:32:11:53:05:95:5e:78:f1:e4:c5:0e:
b6:dc:5c:12:2e:5c:f3:e7:24:28:27:34:73:34:75:
f3:b7:9f:67:e9:d4:60:52:2d:43:57:b4:be:1b:04:
3d:f2:e1:76:23:8a:17:60:68:eb:3f:f6:43:74:41:
fd:e0:63:f5:33:d4:37:d9:67:6d:29:86:f9:b7:3e:
22:24:3f:a5:a7:c9:19:80:70:c5:88:2a:60:02:f2:
c1:23:95:88:70:e0:b8:7d:4e:22:90:aa:b2:a9:93:
c5:b0:71:91:c1:ba:ea:dd:d6:f6:44:96:1e:e5:bf:
7e:11:b7:b6:4e:4f:50:ab:2f:d9:17:19:97:01:41:
9d:9c:26:10:75:4e:ac:ee:8f:85:2c:1c:94:18:83:
0f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C3:E7:BE:2A:B5:6B:11:EE:99:1A:42:0F:BA:75:EA:75:37:72:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MPnviq1axHumRpCD7p16nU3cjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:ab:0e:f3:e4:09:00:7f:56:99:a2:df:50:7b:3f:23:99:1e:
f2:00:d0:07:81:37:dc:57:d6:57:64:a3:4e:62:7d:56:21:e2:
ba:d8:51:4c:e1:2c:c1:15:7f:c8:a2:4a:c4:14:75:20:02:6e:
e8:69:4c:c4:ac:5c:9d:e5:56:4a:8d:0d:a5:24:5c:e9:47:26:
fc:12:09:13:aa:7e:00:5a:fd:c6:72:66:07:42:3a:a0:a9:74:
d9:03:3d:3d:57:08:cf:0b:47:7e:62:6c:49:bd:4b:18:ce:68:
3a:99:7b:4e:27:52:f2:27:98:41:53:16:c7:83:5b:97:68:b4:
35:f1:94:0c:fb:33:47:f1:00:8e:da:34:1e:77:d1:fd:b1:db:
aa:bd:6f:a1:88:39:ca:1e:71:eb:b0:4e:a6:f0:97:de:3c:02:
6f:37:82:93:89:40:c9:3f:70:f1:aa:ae:9a:e1:15:84:62:be:
f6:ea:95:3c:d0:0b:67:22:a3:7e:fc:a7:9f:8a:30:d6:53:6b:
0c:46:ec:22:14:96:1a:4f:be:da:7b:47:f5:84:38:5d:3e:32:
74:69:df:ce:7c:4e:4c:2c:25:0d:a8:5a:70:70:a4:e0:20:ff:
7d:98:ad:88:24:29:05:6f:45:a8:e4:43:50:ef:10:61:38:4a:
bf:e9:c9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:24:04 2025 by rpki-client