Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7nUYSwSGDZP9tet1-lD1w3sVQ_k.roa
File: 7nUYSwSGDZP9tet1-lD1w3sVQ_k.roa (raw, json)
Hash identifier: BA+4CWa9+THQnnRXKZr6YHANnMN0+pbm3UX9rv3s5cI=
Subject key identifier: EE:75:18:4B:04:86:0D:93:FD:B5:EB:75:FA:50:F5:C3:7B:15:43:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 86F61C3F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7nUYSwSGDZP9tet1-lD1w3sVQ_k.roa
Signing time: Wed 25 May 2022 03:11:13 +0000
ROA not before: Wed 25 May 2022 03:11:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:f73d:bab5/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264276031 (0x86f61c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 03:11:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee75184b04860d93fdb5eb75fa50f5c37b1543f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:08:1c:cd:8a:1b:2a:84:47:e5:80:21:3b:
45:14:a9:b4:52:a8:76:fe:e5:9a:e9:b4:5a:64:7d:
bd:ae:af:89:a3:07:e9:42:d7:4e:48:69:c8:c2:4a:
92:82:c7:d5:5c:a8:70:2a:9a:5e:e1:2b:e3:8d:b9:
67:42:68:6e:0b:25:80:aa:a4:15:55:5f:c1:b6:cf:
e8:f9:4c:e9:1e:53:b6:21:34:4c:27:95:58:97:2e:
b6:66:06:b4:97:cf:31:6f:9f:35:81:57:4e:e4:64:
c6:84:dc:8f:b9:d5:a6:6f:fd:2b:56:34:4a:6d:79:
40:c9:85:cb:59:04:ae:be:01:9f:61:5e:2e:5b:25:
48:4a:ea:4f:ac:4e:e7:67:ed:4c:52:8f:0c:57:25:
51:c3:41:b0:83:69:b9:d5:6f:6e:16:23:ea:8c:c9:
bc:6f:e9:cf:70:45:ec:ed:45:78:25:eb:a3:d2:c2:
c6:c3:2a:03:37:81:c9:6e:c8:e9:21:1e:e5:6c:03:
7c:b5:e0:4e:0b:96:12:b0:bd:df:21:a6:85:6f:be:
56:2f:f1:04:c8:85:be:d7:1c:74:b3:67:7d:b6:3d:
15:c3:0c:9f:2b:b0:1a:d0:4a:5c:07:0d:45:49:64:
64:2f:fa:93:42:b3:d6:d4:6a:b4:f7:34:8d:5c:72:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:75:18:4B:04:86:0D:93:FD:B5:EB:75:FA:50:F5:C3:7B:15:43:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7nUYSwSGDZP9tet1-lD1w3sVQ_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:62:e0:ce:89:2c:f0:b7:94:36:a3:af:d3:30:68:cc:dd:37:
f3:35:a6:6f:20:86:74:ec:ab:52:aa:88:f5:49:00:dc:eb:87:
19:88:e3:f4:79:48:d6:fb:3b:a4:83:6f:b6:cc:15:11:2b:8c:
5e:6e:8d:09:06:c7:27:82:98:82:4b:53:6c:73:4a:f4:ca:fe:
83:5e:90:54:6a:2e:1e:5d:22:69:e7:d6:d4:d3:98:13:0d:7b:
0d:8f:da:fa:ba:d1:0a:c8:c7:6d:9d:44:1b:2e:d4:93:0c:33:
66:c6:5f:76:cf:fe:da:49:2e:cd:17:3b:69:d4:87:84:0a:8f:
70:4a:4f:36:94:79:c6:c1:67:51:22:47:47:e2:39:82:17:c4:
ac:a8:e3:8b:81:f3:f7:19:d7:74:e9:3f:1e:59:e3:7a:5e:ce:
fb:75:a4:eb:42:89:24:52:b1:62:2d:9a:bd:cc:de:67:74:b5:
c3:03:a9:13:a9:a0:92:93:73:fa:6f:6f:3a:b6:fe:55:d6:b3:
10:73:c3:06:b2:dd:ca:ac:75:22:44:41:94:e8:85:40:45:e1:
2e:1e:09:c4:ee:c4:79:f5:25:54:c7:3b:77:e1:26:1b:a8:8d:
e1:a0:fa:ca:9d:48:4d:b9:b9:15:2e:b1:d8:ac:23:af:8d:5b:
25:03:f3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:36:55 2025 by rpki-client