Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7bItuL3A4v5QoBXJksWovsFetyU.roa
File: 7bItuL3A4v5QoBXJksWovsFetyU.roa (raw, json)
Hash identifier: ItehAQSfRArHEKoR6XNBf6OC3qslfiWUzyfQuVP59iQ=
Subject key identifier: ED:B2:2D:B8:BD:C0:E2:FE:50:A0:15:C9:92:C5:A8:BE:C1:5E:B7:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A6CB91E90E431909A46094F5F6792BBD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7bItuL3A4v5QoBXJksWovsFetyU.roa
Signing time: Tue 16 Aug 2022 13:15:35 +0000
ROA not before: Tue 16 Aug 2022 13:15:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:cb:91:e9:0e:43:19:09:a4:60:94:f5:f6:79:2b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 13:15:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edb22db8bdc0e2fe50a015c992c5a8bec15eb725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:f5:6b:a9:55:71:8c:d3:0e:24:9b:75:c9:
92:26:da:35:a8:e8:16:44:e1:99:96:bc:96:54:30:
0e:30:28:4a:72:5b:ed:88:2e:49:18:cf:4b:45:0c:
fb:6a:4a:75:8f:3f:0a:16:d2:0f:66:8b:ad:68:d0:
98:fe:bc:5f:1e:51:cb:64:01:c6:94:92:1d:35:9d:
97:34:7a:d0:d6:e4:7e:81:d0:33:38:40:14:80:85:
c6:27:c6:c3:06:07:fd:af:59:1b:5c:ee:3f:07:23:
a5:e6:da:a8:c3:af:fe:04:2c:81:f7:83:c6:a2:b6:
91:6d:61:a5:75:b9:c6:aa:62:3b:ab:14:2a:ea:ca:
42:5d:f6:39:5c:d6:f6:92:46:94:23:3a:68:fe:be:
7d:3b:18:79:64:7c:96:88:ad:c5:94:87:fd:41:d3:
b3:ae:7d:1d:62:27:9b:1f:65:97:48:36:67:09:a2:
f0:a6:3d:19:53:b0:55:63:e6:b7:57:8d:9b:33:94:
72:79:4b:06:25:08:8f:0c:dd:f0:a9:c8:73:ec:be:
e3:ed:47:ad:5a:31:3a:c2:82:a2:c2:f2:c8:fe:ab:
d5:16:6d:4c:83:8c:99:b4:03:8c:6c:6c:db:54:2b:
06:a9:79:f5:9f:1f:c4:b0:e5:d7:00:47:b5:65:07:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B2:2D:B8:BD:C0:E2:FE:50:A0:15:C9:92:C5:A8:BE:C1:5E:B7:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7bItuL3A4v5QoBXJksWovsFetyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:e6:83:e3:94:8a:b7:24:9f:eb:62:4c:ec:ed:71:76:29:a1:
ad:a0:4c:00:c0:f8:c0:1a:c5:2c:0e:c1:65:1d:a4:1e:5d:0d:
9b:2d:6e:09:3c:ee:6e:e0:28:2c:1a:4b:a4:b0:5b:26:91:21:
1d:cd:eb:24:5f:2d:55:66:90:e5:ec:05:d1:0e:8d:a4:99:92:
46:86:29:ec:57:19:e6:c5:ae:17:70:d5:77:40:fc:21:0c:70:
2c:6c:a0:a0:f7:a4:39:e8:75:86:54:fb:d1:36:89:f3:09:12:
44:66:ec:ed:07:36:44:dd:ab:e2:ab:9b:fb:ca:fc:25:27:90:
78:39:84:e2:7c:5f:ae:68:c2:4c:28:61:03:75:dd:dc:ba:ae:
30:44:ef:ef:4f:4c:0e:ba:e0:a4:4f:7f:da:df:d4:33:3d:df:
f9:27:e4:56:f3:9f:ea:9a:c3:49:69:e6:ae:c2:ef:03:21:0f:
2e:78:14:ae:8c:e0:c3:31:67:8b:d6:4b:2b:fb:c3:25:2a:c0:
f3:4c:53:1d:f5:2d:aa:d0:bb:dc:5f:e8:66:85:1d:f9:de:61:
c3:2d:15:0e:1b:f2:2a:a9:11:96:6a:8b:e1:fb:95:1c:fc:9e:
ad:fa:e3:d4:d5:01:31:b6:a8:fb:f4:48:8b:c8:b4:98:4d:5c:
6c:85:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:14:42 2025 by rpki-client