Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7YAWl5qCPy4mSW7zSvcY35fJreI.roa
File: 7YAWl5qCPy4mSW7zSvcY35fJreI.roa (raw, json)
Hash identifier: LuO2A+Mwg+LCP5XiJuo5d1X5jh4f5Cioy+SpmXzlTes=
Subject key identifier: ED:80:16:97:9A:82:3F:2E:26:49:6E:F3:4A:F7:18:DF:97:C9:AD:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187879E2736DC09F80E3F43399E58D31957
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7YAWl5qCPy4mSW7zSvcY35fJreI.roa
Signing time: Sun 16 Apr 2023 01:11:41 +0000
ROA not before: Sun 16 Apr 2023 01:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:87:9e:27:36:dc:09:f8:0e:3f:43:39:9e:58:d3:19:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 01:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed8016979a823f2e26496ef34af718df97c9ade2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:64:07:b1:4a:3c:f7:4f:20:57:25:3d:82:
bf:ce:b1:16:1f:af:48:74:98:81:dc:19:fa:a4:84:
86:f2:ec:69:87:bb:31:e3:6d:44:a7:69:7b:83:ab:
cc:24:22:2b:de:96:79:59:02:98:f3:64:08:5d:c5:
34:23:28:f3:a8:f8:7d:a5:12:02:0a:e2:a0:a2:af:
b5:92:4f:60:ac:c1:fc:af:6c:b7:f7:e4:72:b5:47:
04:38:7c:76:40:49:88:f4:3b:24:14:cc:af:2e:57:
70:97:3c:d0:fb:f2:59:5a:f8:8f:c9:81:fc:6e:db:
56:20:b0:a3:44:b2:d3:ed:c3:80:f6:fa:57:36:b5:
c7:14:6e:5c:09:96:39:b7:e2:a2:16:8e:8d:8c:d5:
d8:62:5c:c5:e1:99:7c:a0:cf:db:64:1a:c0:45:b8:
dc:11:3f:32:c6:d9:9d:a3:fc:5d:d9:03:44:05:41:
ed:0e:53:07:ab:08:3c:34:d4:81:83:40:ed:b6:6b:
38:af:9b:77:5f:74:d0:0e:ba:f5:73:6a:55:db:d6:
4b:f4:fd:b1:7a:eb:4d:1e:41:5a:16:5e:fc:83:56:
0f:9c:c1:5d:5e:eb:6a:66:5d:ec:25:65:47:a5:12:
3f:56:58:96:c8:66:74:97:ca:34:77:3d:d8:39:7c:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:80:16:97:9A:82:3F:2E:26:49:6E:F3:4A:F7:18:DF:97:C9:AD:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7YAWl5qCPy4mSW7zSvcY35fJreI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:f9:98:43:61:48:12:f6:f9:00:2c:c3:7b:86:9c:cb:b1:4f:
88:aa:2a:9d:5b:35:a1:56:5e:21:4c:8c:8e:90:a4:70:e7:3b:
aa:24:06:38:bd:23:74:ca:f1:92:34:87:f0:59:e6:3f:36:a7:
9b:45:e1:0b:97:60:4b:18:c6:b2:e9:82:45:58:f3:1e:22:7c:
f5:1e:40:ea:0d:67:02:97:ae:3d:52:86:43:34:0d:16:ac:39:
5a:24:32:58:bd:a7:a4:15:4c:4c:20:ad:0e:cf:96:43:18:b2:
c1:35:75:00:cd:14:a9:42:37:2f:b6:08:1d:26:b3:be:34:0c:
a5:9a:2d:0e:83:95:30:65:bd:5c:7e:f2:66:a3:10:a0:5b:89:
1e:ce:ba:50:cd:32:fd:ce:2a:0a:95:da:89:4d:3f:5a:90:e3:
5f:07:1c:0f:0a:f5:25:39:6e:61:9f:df:df:19:cc:94:80:2d:
47:71:8b:f3:8c:20:aa:16:45:3a:7b:1f:d3:9b:e0:6c:95:e4:
f6:95:84:b0:c2:bf:11:af:06:ba:91:58:31:2e:af:af:2f:d0:
d3:ae:f2:8f:8b:7d:09:6f:81:cc:97:4b:e8:73:48:50:15:cc:
07:6d:8d:2f:97:4e:aa:b8:d5:16:78:8f:b2:1c:86:6c:f1:3f:
6b:d9:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:43:56 2025 by rpki-client