Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7W6rBcXfOIhjFStIUqAgRfGtgF4.roa
File: 7W6rBcXfOIhjFStIUqAgRfGtgF4.roa (raw, json)
Hash identifier: 4GL6mNtitSQX6ExmWRd4iQRlFK1ZgXv+1cRytLn37z0=
Subject key identifier: ED:6E:AB:05:C5:DF:38:88:63:15:2B:48:52:A0:20:45:F1:AD:80:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851C8E7098F764BA6866060E64BDA116DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7W6rBcXfOIhjFStIUqAgRfGtgF4.roa
Signing time: Fri 16 Dec 2022 20:09:35 +0000
ROA not before: Fri 16 Dec 2022 20:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:8e:70:98:f7:64:ba:68:66:06:0e:64:bd:a1:16:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 20:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed6eab05c5df388863152b4852a02045f1ad805e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:a5:68:8a:96:46:f3:9e:79:70:f1:73:1b:
20:76:f0:97:72:42:98:b2:f4:47:4c:77:ee:4d:f0:
3f:8c:c9:7d:b0:cf:0a:e7:c0:69:f5:b4:83:ec:d7:
28:34:da:74:c0:17:20:68:bd:92:8f:33:0e:9c:bc:
fe:5b:9b:df:9f:ff:5e:aa:92:0a:e8:42:c5:a4:e4:
aa:a8:18:be:b3:49:49:5b:74:b5:d3:e7:b3:2a:4d:
4a:50:2d:02:4e:b8:1e:52:94:bf:13:78:ca:d2:a9:
40:2c:b3:8c:46:c1:91:4e:bc:e2:c5:49:54:9e:0c:
1f:ef:0a:fa:12:06:70:fc:86:fc:c3:bf:97:9e:b2:
68:84:1c:73:11:24:1f:34:be:e1:f7:35:18:bd:11:
d3:37:a7:39:ff:45:15:6c:75:a8:74:c3:09:d8:75:
3b:b2:f8:7e:27:9f:86:c6:bb:e9:e7:ff:1a:fb:b7:
de:c3:cc:41:3f:de:a1:03:9d:67:ae:11:d8:28:5c:
fc:17:cd:a4:f4:80:e5:48:09:80:9d:23:3b:ea:23:
7a:0d:8c:f9:25:64:d1:12:b9:22:9b:30:20:26:40:
d7:68:de:e7:de:84:99:03:e4:58:91:7b:f7:a2:bf:
6c:a9:53:65:ad:85:cc:08:df:38:aa:b4:d4:dd:ab:
cc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6E:AB:05:C5:DF:38:88:63:15:2B:48:52:A0:20:45:F1:AD:80:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7W6rBcXfOIhjFStIUqAgRfGtgF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:60:3f:9c:40:1f:bd:4e:52:c5:cf:4e:63:76:57:1e:c5:56:
db:51:e8:7b:87:39:b0:42:48:e4:53:fd:47:06:58:89:2c:0f:
0c:07:c8:8e:ce:a2:91:fd:d4:5a:27:e9:55:e3:99:04:ab:af:
9b:1d:6d:e2:1e:54:2a:fd:70:d1:89:af:ff:bf:f7:65:64:8c:
8e:e8:4d:44:84:85:fa:28:20:ce:6d:93:68:60:a8:db:49:9e:
a3:82:a2:8c:17:a7:95:c5:65:cc:72:b4:0b:63:3e:88:e3:05:
bc:a5:13:bf:9b:1f:2d:4f:f3:ac:12:83:04:a9:5a:ab:75:9c:
30:0c:8d:4a:63:7a:2f:44:e3:ff:14:04:a9:f1:9c:37:8c:69:
69:4c:28:2b:60:9e:e5:6f:b9:f4:2f:90:2a:5c:58:95:71:a9:
ad:9e:d9:9b:b7:54:4c:b1:a5:91:94:32:86:88:83:af:ce:d1:
46:96:d9:1a:00:02:ec:b4:83:7d:bc:95:ce:64:a1:ea:06:7e:
a6:9a:c6:f1:4e:72:10:14:fd:f6:12:d4:1f:ca:5b:e1:e0:30:
4c:3e:28:52:a1:81:90:0b:58:67:94:9a:d0:b4:37:18:81:b4:
47:71:e0:ac:c3:ca:40:4c:74:93:95:85:ff:fe:60:ed:7c:5c:
4a:45:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:49:58 2025 by rpki-client