Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7mx7Q1QKVnhNHM_NoiEZddRx3_Q.roa
File: 7mx7Q1QKVnhNHM_NoiEZddRx3_Q.roa (raw, json)
Hash identifier: g9A477GGbNyWxJlNcVZah62epGHqbWOMRcJ5kPW1ElY=
Subject key identifier: EE:6C:7B:43:54:0A:56:78:4D:1C:CF:CD:A2:21:19:75:D4:71:DF:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 669DF8DC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7mx7Q1QKVnhNHM_NoiEZddRx3_Q.roa
Signing time: Mon 31 Jan 2022 10:09:22 +0000
ROA not before: Mon 31 Jan 2022 10:09:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721628892 (0x669df8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 10:09:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee6c7b43540a56784d1ccfcda2211975d471dff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:91:bc:6b:65:17:81:c8:bd:b2:e3:47:8c:
51:4f:ad:e1:56:2f:91:0f:f6:ec:43:56:41:e5:af:
0f:36:60:50:1b:7f:3a:2f:44:9b:d4:e1:3a:8a:6e:
b2:e8:61:c4:f9:8a:ec:83:0f:ae:28:e4:de:6a:8b:
5d:fd:c9:03:b8:ae:95:af:52:81:2f:32:af:3b:7f:
e7:7d:5b:d7:83:c6:a4:b1:34:7e:67:21:d1:8e:43:
7d:fe:d0:77:45:36:35:cb:2d:3e:e7:3d:ba:c4:c0:
8e:a3:47:51:c1:43:5c:fd:58:77:ee:ad:a3:7e:03:
b5:fb:07:aa:4a:6e:4b:d8:fa:92:d9:ee:13:2c:06:
0d:47:ae:e7:8e:b3:b0:bf:56:a1:85:b1:e7:7b:16:
2b:36:f7:f1:d3:94:e2:53:57:5b:b8:63:39:5f:f8:
09:32:ab:a4:49:ae:72:2b:3b:09:eb:00:38:c0:43:
43:20:7a:cd:9d:a0:83:c8:f3:ef:a3:a0:8f:3b:e0:
a3:bb:ee:cd:1a:21:b8:a1:3a:6a:3a:99:ab:53:34:
f8:61:7f:f8:d8:bd:51:8f:2d:40:9e:91:90:cd:ca:
41:1b:b4:57:19:ba:fc:25:cc:2f:37:d3:c0:cf:d4:
1d:cb:b4:6c:87:b8:8e:dd:cd:1e:1c:19:6e:a9:a7:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6C:7B:43:54:0A:56:78:4D:1C:CF:CD:A2:21:19:75:D4:71:DF:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7mx7Q1QKVnhNHM_NoiEZddRx3_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:21:51:41:5c:40:06:73:e7:a4:96:9b:68:00:70:ee:f4:6f:
57:0e:10:d8:de:c5:42:1a:28:e8:1b:dc:da:37:1f:42:7c:d6:
28:f2:55:aa:58:6d:54:c7:f0:79:09:81:3f:e3:75:85:ab:78:
6c:25:df:aa:6b:9e:6c:d5:56:14:10:73:6d:f3:ff:52:3d:77:
3e:77:41:8b:6c:42:d7:ab:bd:3f:cb:05:27:74:e1:17:3f:77:
34:a8:d8:2a:bb:f6:5b:f3:01:09:fb:62:ec:1d:b8:98:00:01:
cf:cc:0e:21:81:f9:da:84:5b:a4:de:e9:ef:24:69:02:ee:1d:
e4:e2:62:1c:dc:e5:06:08:d9:91:46:2e:e5:f7:a1:26:af:c4:
0e:95:d1:a1:60:d7:1b:55:0d:09:44:3c:cc:73:64:19:9c:96:
8f:a0:7e:b8:88:c9:b7:79:89:fd:d7:c1:e0:f7:75:68:c6:a6:
c0:c1:cb:77:0a:5b:d9:97:be:e5:31:7f:e5:1f:d2:b8:82:c8:
47:c4:ad:a9:f6:d3:25:42:f8:51:8d:c8:9b:4b:d4:ce:1e:59:
84:2a:a8:c3:c5:ae:5b:11:23:1b:8c:ae:a6:9d:59:79:ca:b6:
eb:93:c9:2b:67:af:11:90:4d:b1:00:3a:b8:f6:35:bb:7f:26:
e7:f5:b2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:21 2025 by rpki-client