Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7mGktalynl3DYD-rE-FfzB5YoFk.roa
File: 7mGktalynl3DYD-rE-FfzB5YoFk.roa (raw, json)
Hash identifier: wFzDDrgjIv1mQRhEIKlcOyhsRPM8bWhL8QrWuQdwK2g=
Subject key identifier: EE:61:A4:B5:A9:72:9E:5D:C3:60:3F:AB:13:E1:5F:CC:1E:58:A0:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A0B3419
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7mGktalynl3DYD-rE-FfzB5YoFk.roa
Signing time: Sat 12 Feb 2022 19:09:40 +0000
ROA not before: Sat 12 Feb 2022 19:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779119129 (0x6a0b3419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 19:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee61a4b5a9729e5dc3603fab13e15fcc1e58a059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:48:74:03:39:d5:e4:f4:72:be:a1:11:f5:
a9:8a:69:7e:5f:62:90:cc:7e:ec:7f:ab:e3:41:60:
ed:08:1d:8e:05:ac:1b:20:eb:77:7c:5b:7f:7f:81:
47:eb:a6:9b:fa:84:c1:be:40:9d:fc:09:2b:89:f6:
0d:13:1e:05:7c:e3:70:58:49:68:22:f7:dd:7f:2d:
ce:83:1f:a5:22:ad:ad:3c:29:28:a8:d7:f5:b7:0e:
ab:da:ab:44:64:bc:a1:d0:4e:ad:a2:b7:f4:a8:bc:
93:d9:95:27:26:c6:4d:c3:f9:71:ed:4a:68:6f:c9:
e3:2b:35:7c:fc:01:7c:8d:12:54:e5:fc:17:30:fb:
70:e5:7c:ac:75:49:c7:40:3f:16:2d:fd:da:21:40:
b6:bc:05:dc:3b:90:6e:4b:0b:77:4c:1f:fe:d8:e6:
65:6f:ad:3a:0a:80:e5:a0:94:52:80:79:fc:da:59:
59:1f:3d:ae:95:4c:64:b2:7c:73:a4:ce:10:7d:4c:
92:91:5a:c9:79:55:e2:ae:87:31:e6:17:24:a6:f4:
24:b0:a6:63:c1:ec:42:b2:37:1e:3f:d5:bf:1b:49:
1a:6f:23:3b:92:e1:85:95:56:6b:f6:c5:eb:99:f4:
09:b7:57:62:1b:64:ec:0d:4a:d6:b6:b2:65:7d:92:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:A4:B5:A9:72:9E:5D:C3:60:3F:AB:13:E1:5F:CC:1E:58:A0:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7mGktalynl3DYD-rE-FfzB5YoFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:55:53:7e:6a:e7:d3:28:2f:30:c0:8d:f7:f1:e4:55:29:89:
84:d6:0b:9a:67:7a:27:1d:eb:af:1d:43:ec:f7:6d:b7:66:d9:
53:23:56:27:60:d5:30:10:81:a5:c3:5f:88:0a:c7:f9:3e:2f:
01:c3:b4:56:3a:b1:7c:7e:29:5f:32:f8:8c:32:62:74:47:c0:
dc:f9:1c:66:a1:69:75:e2:c8:04:d3:1c:9c:da:98:f4:7e:69:
67:26:3a:15:e6:5a:b6:8b:5c:e0:82:84:1c:d2:0c:21:9f:08:
ff:e0:57:15:e0:56:30:87:7e:ea:b3:a8:ea:ac:c9:69:49:80:
ac:81:00:be:ab:b4:90:cb:a5:74:2c:51:b4:b3:ab:ba:4a:fc:
88:c8:7e:cf:5f:77:c0:d8:78:8a:4e:d2:b1:c6:42:b2:be:03:
6d:16:87:45:66:8d:b2:70:6e:0b:86:f3:a9:fa:59:0e:da:3c:
00:dd:dc:2f:09:ea:5f:f0:28:40:07:63:13:92:d0:f2:70:44:
f4:74:a0:c5:96:7f:cb:e0:a0:e9:49:64:7e:72:9d:16:18:c5:
fa:7a:5d:93:ec:ea:ba:c8:d3:67:1b:64:86:48:dd:e3:1e:61:
41:06:f8:5a:c3:88:8f:1f:d8:7e:ba:28:97:66:84:47:9d:51:
f7:86:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:00:41 2025 by rpki-client