Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7_jujUcslSnYbMigzr42SjjWZpw.roa
File: 7_jujUcslSnYbMigzr42SjjWZpw.roa (raw, json)
Hash identifier: /k62P+SUawVZXwhaapDhzV4G13602SrGEd0MwFG52SU=
Subject key identifier: EF:F8:EE:8D:47:2C:95:29:D8:6C:C8:A0:CE:BE:36:4A:38:D6:66:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68207E6E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7_jujUcslSnYbMigzr42SjjWZpw.roa
Signing time: Sat 05 Feb 2022 13:04:47 +0000
ROA not before: Sat 05 Feb 2022 13:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:c9fc:adaf/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746959982 (0x68207e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 13:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eff8ee8d472c9529d86cc8a0cebe364a38d6669c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9c:bb:d7:5c:b6:7f:0a:97:f6:79:52:73:ae:
47:39:7f:37:d0:b7:51:21:6a:5c:98:41:71:67:43:
d7:ed:44:ef:80:1e:18:77:c9:d5:6a:1b:d3:66:4f:
13:57:be:9b:05:da:ca:56:cb:de:30:47:f0:fa:a4:
aa:d5:b6:1a:49:a7:66:61:9b:bf:a1:0c:a5:e0:e8:
58:12:d4:c7:d5:41:97:a3:b0:fa:e1:16:cc:09:9b:
e4:c0:ea:a8:ce:1a:9e:c2:c3:b8:67:b2:a8:4e:89:
a3:68:e5:7d:1f:3c:94:d2:a0:77:a2:45:c0:53:36:
75:d6:24:95:53:5e:cc:9b:de:f2:16:c9:eb:b2:49:
3a:9e:c3:2c:ee:2e:2b:e5:6e:80:4f:43:1a:f4:24:
8c:77:b2:60:b2:d2:ed:3c:03:a9:74:61:46:ce:bf:
1d:04:0d:27:fa:a9:ac:5a:63:9b:10:ee:c0:96:32:
0a:28:3a:f0:47:c9:d1:bf:ef:85:e6:ff:e9:76:81:
06:1a:26:51:fe:a1:4d:39:f1:be:c9:3b:7a:67:b0:
e9:89:4d:4f:74:33:de:96:1e:ab:a2:07:73:19:06:
ec:1b:c1:cb:69:67:a8:75:51:71:f7:0c:a7:58:9d:
14:4a:01:b3:3b:a8:cc:fe:a6:f0:db:2f:f1:c0:a8:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F8:EE:8D:47:2C:95:29:D8:6C:C8:A0:CE:BE:36:4A:38:D6:66:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7_jujUcslSnYbMigzr42SjjWZpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:82:bb:e8:70:06:0a:e2:8b:19:1e:cd:f2:d7:ca:bd:13:4e:
36:40:a6:3b:8d:34:df:05:8b:b7:41:42:28:86:df:5a:6a:ea:
1d:a3:2a:7a:27:a7:88:67:b1:55:42:f0:12:0d:e6:a6:61:e8:
15:fe:f2:d9:cb:81:f3:f7:04:eb:5f:db:f8:3f:2e:4c:d2:a9:
c3:12:68:cb:2d:ef:15:25:12:10:8f:3a:be:b2:d2:b7:28:28:
55:6b:c6:da:c4:d6:b3:19:3c:6e:13:cf:81:92:65:21:f1:0e:
ea:da:47:ab:0f:87:a5:38:0f:7d:2a:27:b6:82:96:ba:43:52:
15:87:29:5d:19:5b:2a:0e:98:f4:98:4d:98:c3:b7:60:b4:96:
b7:78:57:76:8b:db:1a:c1:10:9f:a0:c4:31:94:e9:74:01:cd:
6d:03:60:73:f8:45:0e:fb:78:d2:96:5f:5e:4c:9b:a4:a3:b9:
3d:05:a5:f7:51:23:c0:c8:89:8f:bc:9e:de:e7:9a:35:ca:73:
2a:d9:e9:ad:79:d6:50:da:90:36:06:a5:6e:23:53:24:b5:a7:
b0:19:c7:fa:51:53:94:31:06:09:4d:e4:a7:c3:18:35:5e:6f:
2a:00:4a:8c:d6:9a:d8:a4:11:79:0c:31:b3:b9:98:69:59:19:
b0:70:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:30:38 2025 by rpki-client