Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7iKPh5_WpeSrODzKnH_Zq6J5LdQ.roa
File: 7iKPh5_WpeSrODzKnH_Zq6J5LdQ.roa (raw, json)
Hash identifier: mAtXYQsgQi+XcXgIBSlU1EYQsut8sc+ZuRUNTiV1JAQ=
Subject key identifier: EE:22:8F:87:9F:D6:A5:E4:AB:38:3C:CA:9C:7F:D9:AB:A2:79:2D:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F27A797209B188BFABDCC650E1F8582C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7iKPh5_WpeSrODzKnH_Zq6J5LdQ.roa
Signing time: Sat 06 May 2023 19:12:05 +0000
ROA not before: Sat 06 May 2023 19:12:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f2:7a:79:72:09:b1:88:bf:ab:dc:c6:50:e1:f8:58:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 19:12:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee228f879fd6a5e4ab383cca9c7fd9aba2792dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:37:e8:9e:36:de:4e:84:39:a4:d6:ab:a4:
fc:cf:9f:a8:ad:e0:2a:65:bd:ba:9f:19:5b:a0:63:
a9:fb:7c:79:fb:be:eb:b3:54:f1:2f:2b:28:83:43:
be:27:fc:63:4b:c1:be:a5:db:df:84:28:fa:b0:31:
f1:26:c8:f2:a9:ce:ca:23:63:8c:83:89:8e:2c:ed:
66:b8:74:d7:ec:36:aa:ad:ea:4f:2d:9c:68:ed:b1:
15:30:19:d7:5f:46:f6:3e:56:78:bb:a5:e8:f9:34:
cd:8c:d3:bc:d8:35:9e:ad:3e:d7:b5:43:38:b9:2c:
af:e5:73:f5:94:6b:a5:ca:53:bb:5c:3f:c6:33:a1:
e8:e2:4d:8f:0a:ae:22:c2:c9:b4:04:3d:91:bf:41:
00:6e:0d:3f:53:2c:96:16:bf:a3:4a:01:2c:c3:a7:
0b:fa:45:46:f8:14:76:ff:e4:6e:74:36:34:6e:ba:
8c:7e:b9:77:57:e1:c9:60:d0:c3:33:f0:68:3a:6f:
71:fb:7f:0d:57:85:32:18:6e:d9:6d:19:8b:2a:09:
5c:31:4f:6f:81:bb:e3:f3:7d:6b:0d:41:99:c7:db:
27:44:e3:ee:64:c9:dc:d1:c2:a4:7f:8d:cb:82:b8:
5f:52:f4:5f:17:ab:e6:e8:45:11:7c:6f:61:1d:43:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:8F:87:9F:D6:A5:E4:AB:38:3C:CA:9C:7F:D9:AB:A2:79:2D:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7iKPh5_WpeSrODzKnH_Zq6J5LdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:b2:b3:7d:83:43:0e:dd:40:c3:cd:f4:50:0a:2a:4f:e9:a3:
bd:eb:c6:fc:a6:ec:36:4f:81:02:0d:b4:05:ae:39:a2:2c:95:
19:76:be:0b:72:82:b6:71:85:59:5c:08:54:5d:af:fb:97:b9:
d7:a1:7a:fc:b4:22:11:22:76:71:51:f5:5f:61:8c:44:8a:72:
fd:c6:cc:35:33:07:24:22:b2:24:9d:8c:50:15:77:5a:2e:25:
6a:2a:45:eb:83:72:62:13:04:30:eb:48:42:56:0e:80:ad:a0:
08:d8:85:45:34:82:96:05:46:d6:c3:97:a5:2b:df:4c:d0:ec:
39:39:25:2b:dd:c9:b9:27:04:61:f2:7d:86:35:11:ea:55:06:
c8:27:cb:54:b3:59:ff:91:c0:22:9c:94:1f:e2:07:db:9d:9e:
a6:ef:bf:ec:a7:a7:41:ad:77:06:dc:e6:07:31:54:f5:1f:19:
f6:fc:bf:b4:22:a9:3b:1c:87:90:91:47:e7:d5:b7:ba:a5:a8:
db:e3:f9:c1:21:1f:77:3b:4b:ef:30:fe:b0:e4:da:76:02:65:
5c:3f:ba:09:ef:d4:4b:55:5a:be:25:01:f9:94:16:b7:2d:c2:
07:7d:ab:f7:59:7e:17:c1:f4:ba:d8:c8:38:4c:17:de:6e:dd:
85:d2:88:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:47:44 2025 by rpki-client