Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7YOhzgGiRWyaZRMujo1iQZJrVa8.roa
File: 7YOhzgGiRWyaZRMujo1iQZJrVa8.roa (raw, json)
Hash identifier: FA3f6tfFvDwWz5eGHeqd0xw2u+piUF3ssBrWx4+9FJ4=
Subject key identifier: ED:83:A1:CE:01:A2:45:6C:9A:65:13:2E:8E:8D:62:41:92:6B:55:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872C3600E3E097FEBEB37E713AD3A0ACBB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7YOhzgGiRWyaZRMujo1iQZJrVa8.roa
Signing time: Wed 29 Mar 2023 07:12:29 +0000
ROA not before: Wed 29 Mar 2023 07:12:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:36:00:e3:e0:97:fe:be:b3:7e:71:3a:d3:a0:ac:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 07:12:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed83a1ce01a2456c9a65132e8e8d6241926b55af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e9:76:f6:a7:11:c2:cc:61:ff:ef:be:06:cf:
e1:a0:72:2f:b1:09:d5:37:cb:94:97:20:a5:c1:82:
d7:6e:21:81:0a:82:57:47:88:c8:30:8b:a1:ac:30:
a3:33:75:33:7a:7b:64:7f:6e:c3:fb:d5:17:a5:89:
df:35:94:fc:c3:6f:7f:a5:9a:e3:dd:b0:77:78:77:
9b:1c:67:d9:65:cf:f8:63:04:08:a4:4c:fa:49:78:
b6:e3:cd:6e:2f:38:24:e8:24:e9:ad:11:18:a7:7a:
2b:6d:a8:d6:a7:3f:01:b7:06:de:f4:74:dc:6a:68:
24:25:eb:18:8d:c3:02:f1:93:4e:f9:f1:fc:6b:57:
fe:d3:64:8c:67:a6:86:1a:be:68:06:cc:ba:bd:8c:
e8:f4:ce:fa:7d:53:55:3a:1b:f1:72:6d:20:73:ca:
2d:a8:94:9b:75:a6:2c:f5:79:4c:b6:fe:ac:08:69:
af:02:9a:cb:09:30:2f:4d:85:0b:d2:40:0f:30:c7:
02:7b:e1:15:18:f2:99:d2:b2:4e:1d:44:47:b6:06:
90:b7:0a:cb:aa:2e:5a:30:f4:43:43:63:78:c3:3c:
dd:f3:8c:97:c8:e9:23:12:1e:78:e9:fa:a2:9b:aa:
d7:b5:ec:82:95:7b:a4:bb:49:10:38:17:df:a5:ba:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:83:A1:CE:01:A2:45:6C:9A:65:13:2E:8E:8D:62:41:92:6B:55:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7YOhzgGiRWyaZRMujo1iQZJrVa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ee:5e:84:7d:0a:a1:3e:21:f3:8a:e1:37:7e:f0:27:10:e0:
a5:78:e0:7a:0c:52:af:3b:43:56:b5:32:0e:44:ca:f1:ad:f5:
32:9b:6d:4f:27:49:ee:49:8c:53:25:5b:9c:d9:6f:e0:72:2a:
9e:55:90:c2:b7:2a:10:72:69:9c:bf:8d:d2:66:4c:75:64:c6:
7a:de:fb:41:a2:17:a6:27:e5:19:04:f6:97:e7:e9:4d:e6:59:
05:3c:4d:dd:d6:d9:29:7f:d7:16:33:f9:05:9b:d3:ed:41:fa:
5d:0d:e6:0b:81:b0:27:a8:a0:51:0a:55:17:d6:2d:04:8c:f1:
5b:40:01:b5:11:31:f1:95:ce:3e:b6:2f:bd:3a:e1:c7:a9:d0:
f9:ac:7e:15:8e:4b:7e:8c:a3:91:38:84:94:ee:88:a8:54:4a:
3e:3e:6d:02:bf:aa:78:b5:04:b7:1b:84:79:46:ff:63:4b:c8:
07:df:be:bc:b2:b5:d7:d0:3a:b2:46:cf:77:ef:b5:3f:07:e6:
26:40:04:67:7f:93:c5:e4:44:cd:e3:29:38:a6:56:af:96:c7:
33:6e:5e:36:20:89:cf:19:30:46:41:99:ea:27:92:68:fd:d0:
de:11:b2:77:5c:9e:33:4a:21:9a:a3:01:36:a0:42:18:10:54:
72:de:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:20 2025 by rpki-client