Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7jEGm9FKQbY27aRmxU9wi15ZD54.roa
File: 7jEGm9FKQbY27aRmxU9wi15ZD54.roa (raw, json)
Hash identifier: mgNzgSg8VzfwjlPUCDm4P506v5lCau+95E0OrAmvd1Y=
Subject key identifier: EE:31:06:9B:D1:4A:41:B6:36:ED:A4:66:C5:4F:70:8B:5E:59:0F:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018668F2F3CD3A2CC040BF73AFB42C759CFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7jEGm9FKQbY27aRmxU9wi15ZD54.roa
Signing time: Sun 19 Feb 2023 09:13:17 +0000
ROA not before: Sun 19 Feb 2023 09:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:f2:f3:cd:3a:2c:c0:40:bf:73:af:b4:2c:75:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 09:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee31069bd14a41b636eda466c54f708b5e590f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:ed:8b:13:bb:de:07:ff:70:65:9a:c8:64:
8a:69:07:5c:3c:52:7c:f8:a4:bd:57:a9:9a:f2:c3:
2a:04:c4:53:ff:de:d5:f3:8a:6a:6b:e9:75:a5:cc:
92:1a:31:d0:41:ba:ca:39:45:6b:48:0e:6c:ae:75:
dc:d6:70:4d:d5:1e:9c:40:6c:3a:f9:a7:56:0d:09:
b3:16:34:96:de:d5:e6:f2:76:86:c7:b5:21:0c:27:
60:34:5a:46:27:dc:ae:4b:b4:1e:25:ad:4a:4c:bc:
51:e9:4b:06:bd:e0:e0:98:aa:e8:c8:62:92:fe:94:
2d:54:67:31:93:1e:6b:ee:12:02:0e:22:12:37:f3:
43:8c:76:2c:ca:40:0b:fb:52:76:32:da:2b:6e:92:
00:4e:ba:db:bb:72:a1:e4:54:c9:cf:ae:cd:3b:2a:
b2:92:b9:42:c0:b0:15:24:80:09:c7:42:d2:66:c8:
6e:17:72:67:cf:8d:a5:01:7b:86:87:94:80:d8:6e:
d2:15:e8:c9:b9:de:25:37:97:31:2a:11:23:81:a5:
bc:2a:9a:5d:b1:d8:a8:d5:c0:5d:34:81:17:b4:79:
b1:2d:6c:7f:3c:6c:40:2c:6c:e7:c0:47:54:e5:85:
f7:96:12:22:e5:c1:d6:c2:d7:a4:6e:62:f4:f3:66:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:31:06:9B:D1:4A:41:B6:36:ED:A4:66:C5:4F:70:8B:5E:59:0F:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7jEGm9FKQbY27aRmxU9wi15ZD54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:6a:d1:8a:24:4e:25:14:98:4e:5b:28:1e:31:4e:e2:37:8c:
d4:d0:21:b3:d6:bb:51:6e:e7:d3:e3:d0:bb:16:68:ed:55:43:
3a:9d:fc:73:a6:1e:76:58:a3:23:33:43:88:47:1b:b9:da:01:
aa:8f:6f:6b:93:8a:38:db:5c:15:04:af:f6:78:23:ea:51:0f:
a4:a8:95:96:7c:10:1f:d5:00:36:be:28:21:31:3e:4b:50:f5:
ee:77:52:91:6e:05:00:a3:7d:ae:ec:d1:03:d7:ac:0d:8a:bc:
4f:5d:4f:eb:fd:b4:6c:a6:f5:c9:e0:14:36:80:51:c8:37:a1:
3e:18:a4:12:9f:dd:8e:fb:3e:c5:35:0d:8b:c6:fa:ad:4d:3f:
c8:c4:80:e8:90:81:9f:3f:29:4c:8e:d3:ab:a9:27:be:7c:14:
3d:14:44:ef:92:d8:a5:2b:a6:b6:f0:3c:44:4e:31:53:19:b3:
a1:2c:c2:36:fc:cb:91:d9:09:5e:c7:eb:cd:0b:04:f6:31:53:
f7:62:81:8e:42:56:3a:0a:ea:9c:bc:e8:0c:34:60:bf:8a:03:
d8:be:e3:2e:7d:d3:4c:1e:b7:96:7b:5d:f4:1f:95:26:1d:1b:
c4:b2:a5:4c:49:99:2c:e3:fb:a4:07:37:34:82:55:42:08:f9:
5c:b7:58:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:50:29 2025 by rpki-client