Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7VSqIz6xF2HEjnY_HNDF7vMrmO4.roa
File: 7VSqIz6xF2HEjnY_HNDF7vMrmO4.roa (raw, json)
Hash identifier: L5hCUUdUJLWvsE8Eadum4ks5mX2awJqd613+RqVxMMY=
Subject key identifier: ED:54:AA:23:3E:B1:17:61:C4:8E:76:3F:1C:D0:C5:EE:F3:2B:98:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A8774623955EBB3A8F4EB3C628EBF452
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7VSqIz6xF2HEjnY_HNDF7vMrmO4.roa
Signing time: Sat 22 Apr 2023 10:16:41 +0000
ROA not before: Sat 22 Apr 2023 10:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:77:46:23:95:5e:bb:3a:8f:4e:b3:c6:28:eb:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 10:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed54aa233eb11761c48e763f1cd0c5eef32b98ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:2f:75:e8:1f:13:b9:cf:2e:ac:91:1c:19:
f1:80:49:53:8c:76:a4:97:8c:db:30:d2:e9:dc:b4:
ee:eb:b0:f6:c7:20:4b:64:82:d1:06:25:aa:73:c5:
79:32:05:19:75:29:aa:cf:a7:f1:91:6e:55:bc:57:
ae:eb:6c:4b:68:87:56:c9:23:51:9f:01:ef:f8:29:
c5:4e:7f:06:26:8e:03:dd:d7:5a:0c:a4:46:09:19:
0c:5f:6b:d9:1a:89:1a:5a:16:f7:8b:fd:47:b6:06:
c0:71:06:a1:8c:1d:b9:1b:3c:75:9e:3d:c6:8e:10:
49:7b:7e:88:9a:c4:ca:d4:a2:b0:1e:02:3d:3f:4c:
9e:6f:3f:25:79:78:a2:47:a6:a6:96:4c:13:9f:73:
c2:e6:10:e8:97:74:11:fb:aa:b7:8e:67:f0:07:6b:
18:9a:af:c9:e7:83:32:b2:64:52:fd:20:9a:bb:f6:
8b:1c:cb:ac:50:03:16:d0:c1:97:45:d9:e5:7b:27:
fc:ed:88:8f:32:ca:55:9c:b8:46:5c:65:41:d6:6d:
b8:2d:d1:1d:a7:d0:1e:8a:61:f5:a5:a5:f0:b4:16:
1e:97:52:4a:35:b1:f9:3e:7b:86:26:57:41:de:af:
88:a9:c1:2d:cb:1f:8f:67:1b:d5:52:59:64:4c:c4:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:AA:23:3E:B1:17:61:C4:8E:76:3F:1C:D0:C5:EE:F3:2B:98:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7VSqIz6xF2HEjnY_HNDF7vMrmO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:83:6f:db:a2:62:02:9a:51:07:93:9d:97:d9:89:68:e2:dc:
34:1a:7c:16:77:be:75:30:1c:1d:04:b2:2a:c7:e0:a5:01:10:
8f:9f:d2:14:a2:b0:e3:95:eb:6c:6f:c2:d5:93:b2:63:bb:6a:
6a:38:e2:3e:2d:48:1f:48:b6:7c:06:1d:db:7f:2a:92:7f:f2:
62:89:51:2c:7c:fe:f4:45:ec:9a:9b:94:31:8b:fe:c8:53:6d:
0e:97:24:3a:64:94:6e:82:10:54:42:aa:3c:95:94:56:02:13:
90:24:1a:ff:9e:7f:43:ca:b4:d4:44:3b:af:4a:cf:d3:6e:bd:
d4:fa:83:6c:d4:c4:29:80:02:70:b2:13:94:f6:82:5a:94:e2:
b4:fc:29:76:e4:b9:cb:89:de:d4:43:74:2e:0e:c7:a6:c4:7b:
8b:95:cc:03:98:0f:11:e0:c4:76:24:73:6b:85:89:32:c7:60:
6e:78:9c:36:cf:64:f7:6e:9e:f9:3d:65:51:02:eb:fb:92:7c:
67:c8:65:c5:f2:c5:fc:25:2e:c5:5a:54:76:10:6f:7d:1c:20:
53:51:cc:b2:66:ab:45:79:9a:cc:fe:d6:81:4b:73:5b:9c:29:
15:4f:f5:94:91:22:73:ab:2c:10:78:86:65:10:07:d7:77:c3:
1a:0a:08:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:37:18 2025 by rpki-client