Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7SeYwr2SuWMIrESToRAhTjD36wU.roa
File: 7SeYwr2SuWMIrESToRAhTjD36wU.roa (raw, json)
Hash identifier: t4V1ke86p5hgsVSgdj2b4WzstxPHfobk5sZnal4gswA=
Subject key identifier: ED:27:98:C2:BD:92:B9:63:08:AC:44:93:A1:10:21:4E:30:F7:EB:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018423E17D3534AF6F16995C5F628B73F75F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7SeYwr2SuWMIrESToRAhTjD36wU.roa
Signing time: Sat 29 Oct 2022 13:14:50 +0000
ROA not before: Sat 29 Oct 2022 13:14:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:23:e1:7d:35:34:af:6f:16:99:5c:5f:62:8b:73:f7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 29 13:14:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed2798c2bd92b96308ac4493a110214e30f7eb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4d:3e:3c:0c:2d:09:9f:04:8f:01:f4:d8:60:
7d:4a:66:7b:bf:f6:b6:64:93:6d:0a:83:a2:19:c6:
6f:b6:eb:88:c7:b5:35:39:ea:ed:11:c7:ac:fc:e4:
4b:fe:cb:2f:ea:aa:f8:6f:6e:cf:fa:e1:92:42:eb:
70:78:3f:aa:3d:2b:67:81:be:27:45:0f:02:c7:de:
b6:0d:b8:5a:2d:cd:3b:8e:a7:81:83:19:78:e6:0c:
6f:4a:77:e4:c1:d3:f9:6b:10:c0:8a:ba:0e:fe:64:
d0:43:85:02:4d:80:9e:9c:1c:81:c3:3d:82:6e:14:
f2:d5:78:dd:24:8a:b4:15:61:64:e9:46:c1:20:f2:
39:a1:83:80:49:79:2c:6f:93:63:83:9b:9b:3e:d4:
3d:da:a5:51:e1:2b:7c:19:43:fa:ae:25:66:42:04:
49:ee:35:cf:ba:6f:69:37:b7:7d:b1:a9:da:82:c4:
e2:0b:fc:b1:e6:66:50:e1:98:c3:f9:08:d4:25:30:
8b:2f:f0:c5:76:79:28:eb:c6:92:2c:41:6f:51:ff:
05:b6:15:ad:2c:d8:ed:54:80:94:69:17:39:67:9d:
7b:75:85:4c:20:ed:1e:bc:30:db:ec:52:eb:7d:9f:
97:87:0b:f0:a2:fa:0e:00:b5:1e:32:83:de:ef:60:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:27:98:C2:BD:92:B9:63:08:AC:44:93:A1:10:21:4E:30:F7:EB:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7SeYwr2SuWMIrESToRAhTjD36wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:80:9b:d2:7d:1b:24:b9:46:8b:c8:42:91:dc:22:c8:19:88:
eb:44:73:55:93:23:c8:f5:d2:6a:4a:53:88:8b:ab:a3:69:cf:
06:78:45:0a:4b:6d:b6:b5:6d:a0:0a:b1:da:73:35:9e:3b:0b:
97:70:1c:dc:db:95:ad:1f:29:44:c6:20:a5:f0:7a:ce:ed:a6:
3a:d1:87:8b:aa:01:84:35:d6:ff:9a:7c:3e:10:ba:0b:d8:e4:
c2:b5:6f:7c:2b:84:ad:c4:ec:97:90:de:bd:cb:11:93:4e:89:
2c:19:16:f3:9f:c1:9f:e8:0b:0e:c3:29:bc:89:9d:d1:2a:36:
52:e8:85:3b:16:2c:b5:8b:81:a0:95:5a:a8:91:64:5b:65:aa:
71:5c:54:4c:a5:4e:dd:bb:48:6d:16:02:90:12:1a:b6:ff:42:
8d:2d:f8:17:7e:d5:2c:00:73:ff:a4:7e:44:b9:2b:04:bf:b4:
22:f9:1f:00:2d:5d:54:42:05:2c:fa:2c:c0:a5:0d:9a:d9:c2:
0e:d9:87:18:fb:99:ac:57:44:a8:63:66:cb:76:af:ab:a8:ff:
9e:1e:57:37:f6:cc:a2:95:23:57:b9:06:53:2a:88:7c:b8:ce:
8d:a6:98:cc:65:5e:38:07:44:5f:39:a0:4f:d3:4d:68:78:d8:
58:2d:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:44:37 2025 by rpki-client