Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7S8FeE8wR5OBRh6Fp4xBRTExgAg.roa
File: 7S8FeE8wR5OBRh6Fp4xBRTExgAg.roa (raw, json)
Hash identifier: 17Fvf8ENfcyRogJWzxptmiNeMF1LvFCC87mKiZNcPS8=
Subject key identifier: ED:2F:05:78:4F:30:47:93:81:46:1E:85:A7:8C:41:45:31:31:80:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018487DEEB67F39565B0481DE58F8498019B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7S8FeE8wR5OBRh6Fp4xBRTExgAg.roa
Signing time: Thu 17 Nov 2022 23:14:04 +0000
ROA not before: Thu 17 Nov 2022 23:14:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:87:de:eb:67:f3:95:65:b0:48:1d:e5:8f:84:98:01:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 17 23:14:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed2f05784f30479381461e85a78c414531318008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:95:29:3f:6d:59:40:a5:e1:34:df:63:43:
23:35:73:cb:b2:c1:e3:55:0c:83:c2:1c:a4:71:c6:
d1:b8:5d:10:6f:85:2e:d4:13:05:43:1a:d6:c9:25:
26:b9:4c:a0:1c:41:a0:18:28:a3:2c:81:40:e5:a0:
d9:7a:cb:a4:d5:e5:81:dc:77:ac:62:7b:c0:06:c9:
ed:96:96:89:3e:5e:47:e2:b8:2c:1c:41:52:e5:70:
9e:52:bb:10:ac:17:3f:6e:d5:e1:c5:17:84:af:5e:
6a:18:d8:32:69:13:47:38:3d:1e:94:8e:0d:51:99:
59:80:55:c3:e6:fd:88:17:e8:d6:5e:7f:9f:06:6a:
d8:52:0b:ef:a3:3e:8a:a3:6b:83:8e:aa:73:5c:18:
91:6a:94:17:2d:9b:fb:f5:80:d8:ed:3d:16:36:8a:
e1:e5:32:5f:5d:64:d5:b8:61:e7:c6:fc:44:7a:81:
61:28:48:3d:3e:74:37:78:95:3e:ac:2e:5b:58:b7:
31:e4:21:c3:28:8d:35:26:71:88:0a:d9:94:00:8f:
b9:0b:30:80:34:69:9b:cf:d2:38:96:40:dd:a7:07:
a2:bc:b5:7b:3c:65:31:44:22:11:6d:05:de:39:78:
77:fd:74:a2:ae:a8:f6:79:e5:b2:40:62:e6:be:3e:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2F:05:78:4F:30:47:93:81:46:1E:85:A7:8C:41:45:31:31:80:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7S8FeE8wR5OBRh6Fp4xBRTExgAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:cd:9b:11:68:64:00:a5:50:2c:56:6b:79:cc:8c:5b:9a:56:
65:d3:3f:d2:b4:a4:8c:3c:39:a0:2f:17:d0:97:1b:3d:53:72:
1b:26:5e:d3:a3:f4:72:96:44:51:6e:85:0e:5b:41:36:d0:8a:
1e:51:ca:1d:88:5d:59:1c:65:99:80:dc:d8:00:6b:88:a1:83:
bd:89:5f:0b:5a:31:b4:a9:4d:bb:ff:d9:d4:19:a2:f4:73:41:
e6:8d:d1:c9:28:7e:aa:d7:6b:11:71:29:c3:ee:7e:b3:99:f4:
32:ec:b6:0c:02:27:f1:86:7e:e8:aa:df:31:f1:f7:4b:67:db:
35:5f:89:48:18:c6:7d:4a:c1:83:eb:c8:50:7f:09:3a:53:00:
d3:58:7f:ba:72:db:29:27:91:b2:31:fe:66:f0:c8:70:6d:64:
e6:57:f4:35:a3:0f:9b:05:7b:9c:6c:6c:8f:c3:8c:62:46:2b:
9d:7b:a2:fe:12:23:c1:0c:ac:56:f2:f8:99:62:c2:ec:7b:28:
20:42:02:f7:7e:5f:06:3a:22:db:b2:b2:1e:ec:87:f6:0b:99:
ef:55:be:5c:1c:29:78:21:19:06:87:01:47:40:7a:04:f8:5e:
4a:ad:e5:de:48:b4:e6:30:a2:4c:da:03:57:71:92:1f:df:29:
53:6d:d6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:56:07 2025 by rpki-client