Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7fjx1Cqz2RmqQ1z3twybVGLykEE.roa
File: 7fjx1Cqz2RmqQ1z3twybVGLykEE.roa (raw, json)
Hash identifier: Ig54oIhYSzrj+OpxHkP4cPF3QTXwAkBLR8k1rJLjnCk=
Subject key identifier: ED:F8:F1:D4:2A:B3:D9:19:AA:43:5C:F7:B7:0C:9B:54:62:F2:90:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189613330977716353A729059708E5961B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7fjx1Cqz2RmqQ1z3twybVGLykEE.roa
Signing time: Mon 17 Jul 2023 00:14:51 +0000
ROA not before: Mon 17 Jul 2023 00:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:61:33:30:97:77:16:35:3a:72:90:59:70:8e:59:61:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 00:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edf8f1d42ab3d919aa435cf7b70c9b5462f29041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:df:56:05:da:21:e0:7f:8f:29:37:89:3c:
c7:36:13:3e:a5:26:69:52:97:fa:53:e5:a8:2f:d7:
13:db:ee:0d:19:3f:e4:9a:b0:e1:ee:a1:2a:f5:d1:
48:78:4a:b1:5b:70:c2:a2:c4:63:c3:0c:ad:6f:65:
48:56:e3:d4:b1:92:e0:6d:4c:02:94:a9:f3:68:8e:
94:fe:58:2c:59:9b:3a:fa:9f:30:dd:7d:23:d5:8a:
d6:2e:c7:80:86:a9:8f:5a:ea:60:27:83:51:c6:c9:
2c:96:f1:6a:e3:c4:1a:3e:8e:2b:9b:ae:b2:8c:31:
4e:d5:01:bb:6a:58:43:c4:ea:46:f7:c8:34:6c:c4:
e3:8e:48:c0:6c:e5:67:78:b2:b4:0c:be:66:3a:08:
b0:25:80:73:fc:2d:77:0e:ec:bf:a1:36:da:ba:58:
49:81:92:51:87:af:6d:50:00:1b:2d:14:bd:f8:4a:
00:ad:ac:86:e5:9e:36:df:55:4b:bd:05:5a:b2:86:
c6:27:7c:2c:bc:8b:ba:75:f5:16:61:13:f9:9e:0d:
8c:22:d1:d7:f9:e1:40:93:0d:e8:13:0c:93:c5:a8:
86:ff:19:f1:f2:eb:fe:30:24:87:b6:0e:0b:43:b1:
c9:68:58:15:4f:b0:20:a8:25:95:82:74:cf:7b:dd:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F8:F1:D4:2A:B3:D9:19:AA:43:5C:F7:B7:0C:9B:54:62:F2:90:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7fjx1Cqz2RmqQ1z3twybVGLykEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:e1:15:17:65:7f:8e:0e:8c:83:05:9a:8f:d1:9c:55:9d:48:
11:93:8e:f6:14:4d:fb:e1:86:8c:6d:1e:ca:e6:e8:44:0f:0a:
f7:d1:9b:4a:55:1b:c0:40:79:59:fa:64:b8:c3:f2:fc:f1:ff:
ad:7a:a1:6c:44:47:df:2d:81:4b:30:88:4e:ba:98:96:e8:7d:
1d:28:fd:66:54:fb:a3:0a:f1:80:15:8d:ab:09:84:7c:91:9e:
c7:d1:21:a1:f0:e7:76:14:fc:b0:0c:1f:1f:29:81:c1:dc:4e:
26:9c:07:9a:e5:a2:e1:f2:fc:6c:66:6f:cb:86:e2:f9:e1:43:
d8:b8:d9:b5:49:da:c1:e3:00:66:a4:c1:96:8e:dd:4c:c3:39:
6c:c2:2e:7d:1d:3d:bb:59:a6:8b:52:6b:03:97:79:3f:e1:8b:
dc:97:3e:e3:a4:da:23:2a:6c:ec:ea:63:4a:7c:aa:ca:75:fc:
1c:36:ae:f0:d6:4b:b6:51:f5:76:84:f5:5b:76:cd:00:80:d4:
c4:17:c9:cc:c3:41:6e:21:a9:35:f8:e0:08:82:b3:2e:8e:7f:
30:53:fa:ff:6b:dd:2f:25:fe:4f:4c:7b:24:33:01:09:31:85:
db:9f:6d:a4:5c:c2:94:66:46:69:fb:8b:1a:fc:0d:e9:28:aa:
f1:8c:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:24:49 2025 by rpki-client