Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7_am-Wb8hxbhTtPuAp89qe6ASyk.roa
File: 7_am-Wb8hxbhTtPuAp89qe6ASyk.roa (raw, json)
Hash identifier: Yua7aG1wiSRJvfyoIy5bgnr2+Ru7/9Nq8nMIdUU80nE=
Subject key identifier: EF:F6:A6:F9:66:FC:87:16:E1:4E:D3:EE:02:9F:3D:A9:EE:80:4B:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DDB134B2DA8592DCE94F0AB4C46418D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7_am-Wb8hxbhTtPuAp89qe6ASyk.roa
Signing time: Sun 04 Dec 2022 15:11:28 +0000
ROA not before: Sun 04 Dec 2022 15:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:b1:34:b2:da:85:92:dc:e9:4f:0a:b4:c4:64:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 15:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eff6a6f966fc8716e14ed3ee029f3da9ee804b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:aa:6b:86:e1:4b:05:bc:8b:fe:1b:d5:b2:
ba:60:c3:92:04:89:41:04:4b:b5:cd:c3:85:78:72:
44:2c:ef:9c:ab:a3:2f:b4:75:67:bd:b7:18:d8:14:
62:84:95:7e:af:9f:95:97:6f:dd:f5:bb:40:d6:c4:
13:65:88:d9:af:53:25:e6:88:17:5c:15:69:43:b3:
18:4b:6c:90:8b:dc:d3:ae:09:b5:1a:3a:e6:93:1a:
e4:f2:40:f5:6d:a5:cb:19:56:dc:46:b0:d9:2c:68:
f6:14:ec:60:b8:b4:c5:b9:df:58:b2:4c:51:f5:b2:
78:ea:ae:a5:68:7d:04:fa:5d:6b:cd:eb:29:5b:44:
25:47:0e:1c:b0:78:14:79:04:6b:07:23:02:c7:5d:
83:25:56:91:8c:29:83:1c:e2:37:1f:c5:55:46:11:
54:71:02:27:e5:91:8a:5c:cb:dc:85:e1:ad:0d:2c:
a4:11:5a:6d:97:7f:c8:43:66:78:06:73:eb:15:24:
13:a7:a9:a3:71:c1:3b:35:66:bc:6a:25:f2:5b:ff:
59:c4:ce:b6:0a:77:f6:d2:b6:a1:28:30:df:ed:7b:
f9:02:b5:2e:43:84:26:06:15:93:2e:6d:56:fc:49:
fe:98:f8:81:51:61:ba:e2:e2:1b:1d:6a:71:4a:ce:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F6:A6:F9:66:FC:87:16:E1:4E:D3:EE:02:9F:3D:A9:EE:80:4B:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7_am-Wb8hxbhTtPuAp89qe6ASyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:7e:8d:89:d1:09:97:75:ab:f3:d8:ca:42:b9:bf:a5:54:7b:
c0:2b:43:29:79:47:b8:39:9d:b7:2b:50:50:37:45:7d:88:8c:
bd:c5:2d:49:2b:8b:7c:03:57:fe:5d:9e:f3:05:3e:da:d2:cd:
bf:b0:47:61:31:fd:b1:43:ca:bc:ca:c4:e1:3e:60:99:4f:ff:
29:c5:ef:61:ef:63:6c:d3:8d:98:43:b5:6a:68:22:ae:db:ad:
c8:95:55:d6:c5:13:72:87:1d:c4:ef:3a:e5:d2:59:26:8a:a1:
f8:bd:de:21:de:ba:b6:90:be:c4:fd:97:bf:dc:de:45:dc:9d:
cb:72:9f:ae:6e:79:24:78:fa:65:fe:b5:95:67:3a:87:14:b6:
2e:86:c0:0b:94:87:dd:d0:56:bd:ae:fc:23:37:95:fb:d9:a5:
43:21:13:3c:13:21:ae:0f:f9:5d:86:91:b7:14:f0:eb:eb:02:
3d:c4:16:90:87:8f:7d:da:ae:2d:70:7a:62:91:fc:e7:4a:e9:
f5:c7:cc:c1:fc:55:1e:2e:ea:66:4a:6e:23:9a:43:f6:16:25:
45:e1:34:a0:ff:6d:a5:d0:1c:75:7e:4a:40:55:68:ff:b1:52:
79:38:0c:bb:85:f6:6b:94:da:d1:53:f1:f4:dd:f7:46:ac:8b:
7d:eb:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:26 2025 by rpki-client