Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7Y4w8UiawcatPNwmdNBjTcrC454.roa
File: 7Y4w8UiawcatPNwmdNBjTcrC454.roa (raw, json)
Hash identifier: S5frlcfkzw67EIHnM/hqrpyB5BD764PYNO5g3lgVmiY=
Subject key identifier: ED:8E:30:F1:48:9A:C1:C6:AD:3C:DC:26:74:D0:63:4D:CA:C2:E3:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864062E4EFD0EEFA5644B716878888D342
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7Y4w8UiawcatPNwmdNBjTcrC454.roa
Signing time: Sat 11 Feb 2023 12:11:08 +0000
ROA not before: Sat 11 Feb 2023 12:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:40:62:e4:ef:d0:ee:fa:56:44:b7:16:87:88:88:d3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 12:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed8e30f1489ac1c6ad3cdc2674d0634dcac2e39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:58:9a:c0:38:2e:3b:44:b1:c6:1c:8b:5e:
2e:49:69:9f:08:af:cd:9e:b1:c2:68:70:5c:ba:2a:
60:63:31:67:9d:2f:cc:8f:8e:2d:b8:33:04:fd:c7:
f2:de:56:75:e4:ac:04:b0:c5:50:f9:55:d6:dc:d7:
f6:77:0a:71:1e:b8:62:ed:fd:64:2a:2a:06:75:f2:
85:5b:b7:cf:66:55:c4:e1:3c:73:56:93:ce:db:5c:
aa:af:65:1f:96:32:01:39:a0:73:13:ea:3c:7a:bf:
5b:5e:b4:8c:5f:54:d1:5e:41:49:f3:7f:31:2d:04:
45:96:df:8d:70:7e:79:e1:cc:a8:a5:c2:67:52:bd:
18:29:62:ff:1a:5d:3a:47:47:f9:d8:53:93:cb:b1:
a6:2c:a4:63:0b:b6:87:98:55:1e:98:d6:70:41:78:
69:29:a8:dc:d8:4d:74:75:20:20:69:7f:24:fc:95:
c2:bc:50:cc:9f:ab:d2:08:ee:b3:fa:ee:a0:b3:c3:
1f:61:ca:98:33:e6:9c:47:c1:b9:f9:62:81:f8:43:
54:e6:92:6d:45:ca:78:ce:aa:b9:a4:e2:2a:d4:fd:
6b:53:0e:b8:fc:b4:6b:37:de:40:85:86:59:79:99:
e0:d6:b8:df:47:e6:eb:f7:e0:19:38:6b:4c:63:5c:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8E:30:F1:48:9A:C1:C6:AD:3C:DC:26:74:D0:63:4D:CA:C2:E3:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7Y4w8UiawcatPNwmdNBjTcrC454.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:4d:f8:8c:bd:72:e4:c2:a5:49:36:d4:bc:1b:81:c5:9d:06:
c2:2e:c4:d9:d5:78:8c:79:e4:d5:bd:2c:54:0a:2f:71:66:e4:
ae:6d:6f:34:a7:d6:ba:7b:5c:ac:16:5f:0f:f9:95:b6:e3:13:
cb:de:74:50:c2:3a:f2:5b:e3:cb:a6:b0:22:06:7d:ef:73:97:
fc:5d:17:8d:d8:9d:3b:72:d1:83:57:49:92:ae:e9:15:68:cf:
54:8f:fc:7b:b2:af:be:1b:0e:1f:c1:3c:22:32:7d:34:92:a1:
f3:23:d4:11:db:03:cf:f3:e1:54:a1:a4:49:6a:2e:0a:72:1b:
27:41:9a:7a:35:e3:39:c9:ea:5b:78:23:62:62:c2:f8:e3:94:
61:23:03:b7:e3:7c:4f:48:a2:af:6f:00:ca:40:d7:bf:8e:ff:
aa:1a:be:60:98:dd:4b:04:05:90:d2:43:51:31:53:b4:d2:b1:
47:a2:d3:fc:1d:58:8d:4e:f3:9e:19:56:55:eb:df:a0:e1:b3:
3c:50:87:81:d0:d6:5a:af:82:52:85:3f:b5:7a:33:24:7b:b2:
62:7a:1b:ce:b5:4b:42:47:02:eb:ae:b1:2a:52:fa:e5:68:09:
42:84:24:a1:91:16:5a:5e:c3:a7:68:d8:a5:c1:af:5c:4f:3c:
96:28:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:20:19 2025 by rpki-client