Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7P4XaH4q0xtz8jaRsKjBdF-_Dk8.roa
File: 7P4XaH4q0xtz8jaRsKjBdF-_Dk8.roa (raw, json)
Hash identifier: AmSpra4wMgC5ZI81Hu+gSzGnclf01Bz6ZnEWvlYQP+E=
Subject key identifier: EC:FE:17:68:7E:2A:D3:1B:73:F2:36:91:B0:A8:C1:74:5F:BF:0E:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C2D65F0AFB3A7A51E0261D4CE1521E34
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7P4XaH4q0xtz8jaRsKjBdF-_Dk8.roa
Signing time: Thu 27 Apr 2023 13:10:41 +0000
ROA not before: Thu 27 Apr 2023 13:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:d6:5f:0a:fb:3a:7a:51:e0:26:1d:4c:e1:52:1e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 13:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecfe17687e2ad31b73f23691b0a8c1745fbf0e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:29:3c:5d:01:ac:d8:65:21:1c:71:5d:95:
31:5c:88:44:a3:77:b8:5c:ce:0f:d6:76:e1:55:7a:
dc:24:1a:56:a9:4a:56:aa:3f:0c:81:f3:96:93:53:
31:00:0c:fe:c9:a0:7f:1c:0e:d7:33:51:7e:92:9a:
55:64:f3:f0:ad:a9:f8:5e:75:f2:0a:3e:cf:79:1e:
85:d7:18:5b:cd:28:69:7c:e0:d6:ab:48:c9:d1:04:
71:86:97:78:f5:9d:f7:7c:3c:f4:f8:4a:b4:ff:2e:
88:34:e5:4a:80:2f:02:f8:ca:c8:86:79:5a:16:f8:
8e:f3:ba:bc:61:ff:5e:e8:fc:9a:ee:77:82:ad:3a:
ab:23:97:7c:96:80:c7:1b:39:c1:97:27:ed:a6:de:
8c:e3:d8:9d:74:31:ca:89:54:8f:d6:e1:0f:01:22:
97:db:83:0f:36:30:d8:61:f9:e5:77:70:b7:4d:82:
62:82:07:f1:3e:4d:95:9c:0a:bc:92:75:a8:11:2e:
07:25:fe:00:33:41:02:00:b5:7a:52:e4:e6:bb:7d:
70:75:a9:0a:0e:60:c1:a7:ea:3b:10:e6:33:8f:08:
3f:33:6c:cf:80:fe:6d:e4:a1:48:59:b6:73:06:69:
eb:49:d9:16:02:82:92:c5:30:d4:f2:63:8b:92:5c:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FE:17:68:7E:2A:D3:1B:73:F2:36:91:B0:A8:C1:74:5F:BF:0E:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7P4XaH4q0xtz8jaRsKjBdF-_Dk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:18:82:d3:1f:8a:b4:96:5b:37:89:3f:bd:d3:16:cd:eb:8e:
6e:60:ec:71:04:dd:83:ac:df:6d:8a:27:6b:bd:35:82:4a:95:
ac:9f:e6:92:2f:38:e3:83:0e:47:39:a9:46:5c:73:74:77:eb:
78:b5:5d:ff:11:c7:e5:bd:15:d3:c8:af:76:c6:49:3d:d7:34:
cd:f5:47:45:60:ca:09:49:5f:50:79:88:6a:3c:44:6a:3e:40:
09:28:ec:36:dc:c8:7b:ed:4c:1e:5a:86:cb:2c:e9:56:6c:35:
c2:7b:b7:30:b9:fe:22:91:57:93:26:46:47:d6:77:0a:77:23:
b5:8d:f2:2d:c6:d8:c5:35:b8:c3:59:6f:38:78:ea:0d:75:b6:
16:a0:d0:1c:9f:b6:de:00:33:fd:84:26:bb:20:36:bd:e6:ea:
cc:02:93:14:47:90:32:cd:a6:23:a5:b9:d4:8d:7a:5c:17:28:
a5:5a:b3:0f:aa:e7:b9:36:a9:e0:84:14:af:01:26:cc:f5:20:
71:52:a8:f4:b1:47:b8:f3:3f:40:8d:88:65:23:cb:22:18:45:
db:99:c0:e8:66:a6:7e:a3:40:d7:c9:f4:3a:2c:7b:28:b5:47:
74:01:07:91:5c:a9:25:72:41:22:eb:54:c7:c8:1f:92:0e:7e:
10:bc:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:37:14 2025 by rpki-client