Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7jJ9qcOUej7T2E_fz1vyo3Jl9do.roa
File: 7jJ9qcOUej7T2E_fz1vyo3Jl9do.roa (raw, json)
Hash identifier: XEO61UdqhWczx6BIeAF1EvQph0PwzhLlPMUSDTJhE+8=
Subject key identifier: EE:32:7D:A9:C3:94:7A:3E:D3:D8:4F:DF:CF:5B:F2:A3:72:65:F5:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018271962BAAF70277CE0000643B1117F971
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7jJ9qcOUej7T2E_fz1vyo3Jl9do.roa
Signing time: Sat 06 Aug 2022 05:17:23 +0000
ROA not before: Sat 06 Aug 2022 05:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:71:96:2b:aa:f7:02:77:ce:00:00:64:3b:11:17:f9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 05:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee327da9c3947a3ed3d84fdfcf5bf2a37265f5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6f:c5:85:35:9d:ff:9e:c5:64:ff:40:f6:1a:
97:be:c4:23:1e:f0:fb:80:fa:ec:86:67:74:c3:c4:
19:25:53:84:da:92:c7:8b:5d:25:a4:87:70:5f:2e:
9a:09:2a:75:c7:8b:d9:c6:61:bb:d4:d6:44:a6:84:
69:e9:84:02:f5:48:af:da:fe:f3:0d:09:a3:27:1e:
74:75:e7:3c:16:07:f8:99:ed:f7:59:99:17:a3:c9:
3a:90:72:4e:17:07:8b:9f:da:5b:0c:30:14:02:96:
3c:05:6a:f7:7f:98:94:dd:be:47:7d:d8:1f:16:01:
3c:92:36:ca:95:32:3f:9c:86:19:44:69:a2:9f:c7:
7b:ff:15:6a:c1:dc:57:3a:ec:aa:f2:d3:47:35:90:
01:11:f3:6c:f8:43:6f:1f:ff:96:ed:89:e2:ac:13:
b6:4a:fa:af:90:0f:c9:80:85:8c:a2:e5:5a:e6:de:
2b:02:52:bc:59:ea:c6:24:91:6d:d0:6c:12:81:58:
b6:4f:a7:be:21:66:bb:30:d9:9a:84:eb:72:0b:af:
b7:03:34:4d:a0:0b:2b:0d:da:62:d4:f1:35:23:de:
b8:55:3d:6f:0b:a4:f0:2a:43:6d:74:ff:ea:49:ab:
a4:ea:e7:57:0c:57:6f:73:f9:b0:18:4d:6a:56:f8:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:7D:A9:C3:94:7A:3E:D3:D8:4F:DF:CF:5B:F2:A3:72:65:F5:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7jJ9qcOUej7T2E_fz1vyo3Jl9do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:9f:b8:bd:bb:20:62:54:8c:93:85:cc:1d:72:75:5f:0e:54:
be:9f:7b:b7:e6:9e:cc:00:1c:fc:a1:b2:e1:bb:74:05:0b:c9:
27:06:e4:9a:20:f1:8e:9b:a1:17:ec:38:2c:8d:68:0d:27:55:
e5:ff:bd:c1:61:d9:cb:73:0d:3f:de:06:06:6f:ee:d8:ec:d4:
a5:ac:57:b5:90:2f:ff:76:b6:70:a9:70:88:69:7e:c1:d4:17:
1c:ce:c1:9d:76:e9:1f:f8:cb:9b:65:0d:ea:6a:d0:52:9c:4e:
bb:ef:47:98:c0:7e:13:9e:22:26:3c:c3:28:bb:2d:ac:c6:43:
82:87:dd:58:6a:3c:5e:59:08:a4:8c:58:c1:f7:a4:6e:7f:9e:
12:38:f4:7d:3e:72:52:f9:a8:c1:15:e2:3a:29:be:9b:29:10:
5d:0b:96:67:25:14:dd:67:d1:94:a9:07:49:e1:50:d8:3d:d0:
c3:de:4e:96:2d:54:e8:e1:9e:08:38:13:a1:98:d3:7e:a6:c0:
c6:7f:64:8e:f8:1b:dd:61:88:4a:32:42:8d:e2:1d:92:8f:f9:
36:19:9c:f7:ad:73:88:de:36:12:7f:41:5c:34:4d:70:89:d6:
d8:a0:6d:48:96:9d:74:20:fa:36:07:4f:30:26:03:b9:7a:e8:
f5:68:00:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:20:41 2025 by rpki-client