Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7kbvTwuqp5nPpudTGpmY4oKcVd0.roa
File: 7kbvTwuqp5nPpudTGpmY4oKcVd0.roa (raw, json)
Hash identifier: u384gTIcauvHKql2uLbDpmh5fF8XusVtWFwk7NMA2Ts=
Subject key identifier: EE:46:EF:4F:0B:AA:A7:99:CF:A6:E7:53:1A:99:98:E2:82:9C:55:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F248432125344AA771E0CDF08D6DC3BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7kbvTwuqp5nPpudTGpmY4oKcVd0.roa
Signing time: Sat 18 Mar 2023 01:14:27 +0000
ROA not before: Sat 18 Mar 2023 01:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f2:48:43:21:25:34:4a:a7:71:e0:cd:f0:8d:6d:c3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 01:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee46ef4f0baaa799cfa6e7531a9998e2829c55dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:c5:7b:6d:98:0a:fd:15:77:1a:f0:e6:8a:
ae:f9:90:9d:68:b3:94:95:d2:bc:5a:8e:73:04:39:
37:71:d2:8f:83:e8:6e:b4:3a:66:6b:df:73:64:89:
26:10:e3:76:35:be:a1:a6:a3:07:e7:82:a1:e2:9d:
96:5f:e4:98:8f:8e:b6:c6:93:98:0c:31:a1:cb:a1:
9c:d0:27:a0:b8:72:d7:77:6e:a0:32:ef:3c:c6:2b:
74:b7:cb:72:76:8e:01:c9:80:95:3e:ec:a7:05:70:
d8:9c:6d:3f:f5:d3:58:8c:69:2e:e6:ae:37:71:be:
15:ff:af:14:bc:cc:d8:95:9a:04:20:f2:a3:81:10:
99:b0:47:32:d3:aa:8e:05:c4:21:bc:d5:39:77:7f:
32:a9:fb:8b:5a:28:8c:21:de:3c:41:e4:37:1b:ca:
39:24:bb:c3:3d:a3:ee:95:d7:87:eb:8b:6d:96:f4:
28:5a:d4:e6:8e:1b:ca:19:9d:a7:37:0f:7f:0f:93:
a9:3b:3a:4f:1d:93:28:b6:c9:f8:e0:a6:8d:4a:4b:
2d:3e:6e:1d:2b:bc:97:ce:9c:5a:a6:02:f3:03:a2:
82:43:92:d2:f2:a9:da:95:9d:8d:ad:97:83:e7:0d:
58:bd:28:28:f7:14:bf:db:7c:84:79:72:0e:58:bc:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:46:EF:4F:0B:AA:A7:99:CF:A6:E7:53:1A:99:98:E2:82:9C:55:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7kbvTwuqp5nPpudTGpmY4oKcVd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:e7:38:50:b4:3f:1e:a0:2a:e1:0e:ac:72:c7:27:d2:54:97:
ba:4e:b8:5f:1c:fb:34:80:f1:7e:eb:9c:ec:04:c8:bb:a7:8f:
94:fd:67:92:1d:fe:60:7c:9b:72:d7:06:68:b7:af:a8:3a:cb:
d3:94:59:a4:b1:29:40:be:ad:db:40:c1:8c:e7:ce:4b:56:4c:
45:9a:3d:1e:7f:26:0c:31:ab:d5:6a:0a:e0:07:d7:81:93:e6:
87:7d:e0:18:49:99:69:57:bb:e9:a7:3a:91:f0:58:01:5e:19:
8a:5b:2a:bd:b4:8a:f7:ba:12:67:a9:6a:f9:e2:0b:12:61:dd:
03:84:cf:ca:9a:9c:73:9c:26:04:4a:cb:06:28:f1:70:24:ff:
f8:25:47:9c:4c:86:3b:df:49:4d:3f:42:3e:11:26:09:73:e7:
68:5c:ac:6c:13:da:9a:ca:4d:83:f8:ca:bb:ed:7e:c1:70:76:
b0:30:62:43:eb:2b:99:e9:bf:5b:47:1f:14:43:61:a8:87:ff:
a3:66:a6:08:60:fd:93:9f:5d:b8:d0:ed:e2:0a:ec:80:77:7c:
db:d2:dc:7b:04:00:87:19:ef:c0:c6:9e:ae:0f:56:7b:01:6d:
1d:3e:54:0a:00:5a:c1:37:15:a1:08:fc:82:6b:05:9b:0a:c8:
db:07:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:13:44 2025 by rpki-client