Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7Onabc05ke35nZKWqV2gVbHuEvQ.roa
File: 7Onabc05ke35nZKWqV2gVbHuEvQ.roa (raw, json)
Hash identifier: RtJe5rycsK9/EV35Qo5b5l3i/gBIuEWLVirghw7yj8w=
Subject key identifier: EC:E9:DA:6D:CD:39:91:ED:F9:9D:92:96:A9:5D:A0:55:B1:EE:12:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67681DB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7Onabc05ke35nZKWqV2gVbHuEvQ.roa
Signing time: Thu 03 Feb 2022 05:09:08 +0000
ROA not before: Thu 03 Feb 2022 05:09:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1734876599 (0x67681db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 05:09:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ece9da6dcd3991edf99d9296a95da055b1ee12f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:d8:cf:12:6b:8a:e0:53:40:c6:fb:59:fe:
04:00:67:9b:de:20:50:02:2d:ea:80:7b:be:39:cf:
96:fe:8a:d0:15:95:0d:e8:23:ff:58:4e:50:93:b2:
57:1f:13:bc:d4:f0:1c:10:fb:ec:37:61:a3:22:88:
b7:7e:51:88:04:29:ca:8b:ed:04:63:0f:6d:ab:a7:
f5:3d:3c:f2:bb:b3:54:1c:b6:d1:e6:44:6b:90:7f:
95:4b:8f:69:f6:4e:64:24:71:f0:1a:e8:79:8b:48:
9e:5a:a7:88:d0:93:ae:fd:57:a9:4c:bc:2f:09:d4:
07:c2:42:5f:19:5f:9f:6d:3d:9a:d4:9d:9b:01:fa:
e6:fd:3b:45:8b:28:53:f8:ed:78:79:5c:04:40:e8:
41:d9:47:58:20:5f:a5:c1:76:1e:6a:60:c8:2d:d3:
ad:64:aa:ad:22:d8:a6:55:dd:f8:15:ac:c6:65:4f:
19:7d:4b:55:9e:f1:11:47:20:3a:7d:ea:3b:07:db:
f5:66:ff:f4:1e:13:6e:54:a4:94:b8:41:70:e7:4f:
32:78:0b:f4:45:b5:a2:82:fe:3a:68:50:83:6d:af:
74:8c:3f:2c:cd:a3:19:a4:e4:cf:c2:99:b3:df:bd:
9b:ee:6e:8e:c0:08:f9:0a:d5:8f:3c:52:67:9f:37:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E9:DA:6D:CD:39:91:ED:F9:9D:92:96:A9:5D:A0:55:B1:EE:12:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7Onabc05ke35nZKWqV2gVbHuEvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:95:02:bf:5e:33:10:92:ee:fd:d0:fb:92:45:b2:8a:f3:0e:
fd:7d:f1:79:34:f7:7b:9b:4a:19:d0:01:48:a6:0e:83:29:27:
04:ba:55:45:02:70:f0:56:49:da:2a:52:0d:15:6c:81:cf:2f:
68:1d:07:03:d0:96:cf:b2:f6:df:7e:35:d8:cd:5a:f7:b7:c5:
5d:54:cf:5f:c0:8a:3c:53:d6:51:1d:ad:68:da:f9:f9:eb:e2:
3d:e5:f1:ac:b9:0d:cb:37:c7:21:30:99:30:ba:6e:36:c1:a7:
1a:80:86:65:0f:31:9f:ef:09:f3:4b:b1:55:a4:8c:a2:35:e9:
c0:84:f5:a1:9e:f0:a0:2e:3c:6d:73:43:bf:74:04:e5:b3:14:
78:f9:80:b2:5f:25:d9:1a:4c:16:ad:46:a4:11:a5:e1:6b:dc:
38:ff:8f:d4:8f:89:07:ae:fd:26:53:bb:0a:fe:be:14:4f:23:
f7:45:24:ab:8d:7e:64:5c:e1:d6:de:32:75:fe:fb:b0:86:64:
ef:a0:21:18:d6:7f:b7:16:43:4c:9f:98:c2:93:4a:61:b6:99:
c5:a0:ea:97:75:c3:b0:79:a7:ed:f2:86:cc:ad:42:a3:f3:d1:
fe:00:da:77:0a:98:3a:e7:d8:f8:6c:ef:1b:29:3f:29:b2:10:
78:01:16:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:26 2025 by rpki-client