Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7RhlJBWa_BD61KATx8wpEt9-bvc.roa
File: 7RhlJBWa_BD61KATx8wpEt9-bvc.roa (raw, json)
Hash identifier: /x4N+GL5i8rHUhXHAEtjjWLWmKBLyIk5TtUqaoAiWYE=
Subject key identifier: ED:18:65:24:15:9A:FC:10:FA:D4:A0:13:C7:CC:29:12:DF:7E:6E:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 667399C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7RhlJBWa_BD61KATx8wpEt9-bvc.roa
Signing time: Sun 30 Jan 2022 20:10:30 +0000
ROA not before: Sun 30 Jan 2022 20:10:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718852038 (0x667399c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 20:10:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed186524159afc10fad4a013c7cc2912df7e6ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:06:f7:e1:3e:97:d8:73:a3:b3:8c:d8:ec:8b:
d8:a2:87:a7:28:c8:85:b2:9d:a1:bb:1f:1a:34:de:
01:5a:c0:d3:e5:7e:96:e7:f4:03:2b:6e:98:63:d8:
05:ce:8f:13:d5:25:e9:b3:5a:ae:8d:b5:ce:48:15:
09:c4:bd:30:c9:ba:24:d9:e4:a4:86:ee:6c:e2:1a:
dd:a2:66:83:da:7f:2f:6f:8b:b8:5e:74:ec:20:63:
27:14:0d:35:b0:c0:92:f1:f8:b2:33:73:d9:0b:56:
a5:7e:c1:1b:7a:d4:ad:9f:0d:0e:d2:28:e8:0c:c1:
af:9b:49:83:25:c2:3c:a4:c4:9a:06:bc:1e:10:43:
12:83:51:e2:8d:87:6e:a9:cf:94:a8:bc:ed:f3:b2:
ee:cb:bc:ee:f1:1f:7e:fa:60:b2:11:32:20:f8:00:
8e:2a:26:a0:2e:8e:48:05:07:7a:41:45:32:ef:8a:
39:a3:73:31:71:c1:dd:f3:30:c1:b0:2a:88:4b:24:
a9:19:65:b1:a3:1d:8a:5a:8c:4e:ca:b0:97:b3:7e:
e1:a3:11:10:64:3a:4a:9f:ac:ca:8a:00:03:d8:89:
89:0e:d5:c3:f8:8b:91:ef:9c:6a:c3:5e:85:1b:b2:
d0:de:b3:88:b8:96:83:56:7c:0b:58:31:4d:44:f4:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:18:65:24:15:9A:FC:10:FA:D4:A0:13:C7:CC:29:12:DF:7E:6E:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7RhlJBWa_BD61KATx8wpEt9-bvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:d1:92:b4:88:92:5e:56:41:41:ac:9f:f6:ae:1d:03:c3:f1:
dc:62:95:31:b9:28:f4:c2:1e:ce:37:85:7b:b6:71:a7:0a:db:
24:74:c9:83:2a:45:8d:0c:b0:21:08:84:97:58:b7:b8:26:91:
ba:13:7f:8a:e2:2a:71:b0:3d:ea:d7:5e:d0:e8:05:a0:bc:2b:
ab:35:95:c1:f2:e6:c9:d9:f8:07:6e:85:cd:1b:78:b8:c3:95:
3c:9f:25:21:51:d7:df:cd:03:4e:d4:f8:b6:79:94:52:12:81:
7c:66:7c:b2:9b:9f:ce:99:c6:73:b0:43:59:4b:2b:e0:d7:01:
a1:04:c4:1a:31:53:83:ff:2e:73:14:23:f3:81:07:9a:26:c9:
39:97:8f:9d:4e:27:d8:04:5d:5d:78:ac:79:43:bf:2a:02:ec:
38:b6:82:eb:9d:6d:38:7d:10:06:e9:d3:d4:27:93:9b:80:dd:
d8:9c:e8:f6:d3:4a:07:fe:60:61:88:11:ea:1a:ad:1e:dc:cc:
de:ce:ad:d9:ce:dc:62:d5:90:56:32:62:39:2a:02:f2:3b:b0:
53:71:5f:35:15:d1:6a:4e:f0:c9:2d:ef:e8:c1:ff:e8:3b:78:
4e:92:2f:50:60:dc:e9:3b:7b:b0:e9:39:b1:7c:59:a6:22:af:
32:d6:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:51:01 2025 by rpki-client