Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7V96HCsxLSs7a_gfLC6UAnqDnFc.roa
File: 7V96HCsxLSs7a_gfLC6UAnqDnFc.roa (raw, json)
Hash identifier: QVRWJuRqprfVfhCeHT5/iMFRSjtLEE1nSS6whirlFr0=
Subject key identifier: ED:5F:7A:1C:2B:31:2D:2B:3B:6B:F8:1F:2C:2E:94:02:7A:83:9C:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854FD2A11A5C3AD8FF15997E4825924891
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7V96HCsxLSs7a_gfLC6UAnqDnFc.roa
Signing time: Mon 26 Dec 2022 19:04:41 +0000
ROA not before: Mon 26 Dec 2022 19:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:4fd2:2667/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4f:d2:a1:1a:5c:3a:d8:ff:15:99:7e:48:25:92:48:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 19:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed5f7a1c2b312d2b3b6bf81f2c2e94027a839c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:36:8a:3d:1c:8f:cc:77:e7:cc:13:7e:86:
f7:8c:c9:d6:eb:63:84:b5:67:90:79:32:d7:04:86:
ca:d1:54:b2:d6:66:3f:91:2e:b2:a2:64:19:e1:2d:
7d:bd:c0:7f:77:41:35:2f:25:15:d4:59:fc:de:3c:
a1:47:8d:75:8e:af:11:8a:2d:d2:66:cc:f7:5f:d2:
a2:fa:d4:12:e7:d2:c3:59:b7:56:23:ff:41:b5:ad:
0a:51:e6:95:b5:fc:56:9a:a9:d8:0a:6b:98:01:86:
34:e8:36:aa:d9:29:e1:47:da:56:6c:e5:53:2b:8e:
d5:dc:7b:18:69:96:25:dd:8b:47:26:a3:87:49:ed:
42:21:9f:71:92:d6:9d:57:2b:d4:f5:15:0c:3e:e6:
91:d6:60:82:da:1b:e9:41:57:bf:36:57:2b:11:95:
69:99:12:62:7b:d8:df:9f:c8:e7:f3:da:36:75:84:
65:ce:07:e0:22:a5:91:ed:f5:66:e3:33:54:98:f2:
c5:c4:c0:d6:37:a4:8f:48:a8:39:22:28:c2:9f:81:
f5:54:55:bd:29:1f:ba:77:58:08:34:d7:29:4f:c7:
c9:d5:33:b1:79:07:8d:1c:0e:f4:5c:6b:e5:73:c7:
fe:93:35:29:f8:60:26:49:a4:4d:42:d2:cf:2c:b5:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5F:7A:1C:2B:31:2D:2B:3B:6B:F8:1F:2C:2E:94:02:7A:83:9C:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7V96HCsxLSs7a_gfLC6UAnqDnFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:a4:66:30:4e:32:ea:79:8a:0e:e6:e4:63:8d:eb:d0:7a:31:
d3:b8:53:4a:e6:68:ca:6d:2c:b7:ea:5c:6e:31:5e:49:20:eb:
44:05:72:12:ff:a1:7f:9d:08:73:97:78:89:dd:e6:75:a5:c0:
7d:1f:a6:ae:bd:6e:8d:1b:b2:b7:d7:45:9e:4f:b7:24:67:8c:
63:b0:2a:d5:6b:d5:3b:ef:87:83:0b:ce:7d:af:d2:f1:ed:5e:
3c:fc:ce:50:14:0a:bb:91:b1:f5:d2:ab:ec:1a:90:8f:65:6e:
5e:76:6f:81:5e:13:2d:d3:ab:20:10:bc:a8:d2:8b:31:62:6f:
54:b9:f4:c1:9d:26:39:76:1d:1e:91:e4:7f:4f:06:03:5b:19:
a5:0e:df:70:bd:50:a0:45:01:bf:4f:e1:cc:05:94:76:d8:37:
e1:c4:54:d7:75:55:21:fa:00:94:1d:03:ac:3e:bb:2b:03:0d:
25:28:c9:6e:44:ae:2a:c0:ef:46:b5:74:25:26:c4:1c:ca:01:
62:b3:3f:75:e2:60:63:6b:5b:5f:28:c6:10:57:83:fc:f6:0e:
2a:60:3f:38:91:49:c8:1c:1e:18:8f:cb:ef:25:10:da:03:fa:
7a:ca:b0:52:cf:51:1a:ee:98:df:1e:c8:19:55:f5:1d:5d:91:
11:f5:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:50:12 2025 by rpki-client