Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7nZ0myKUjZCneL-h9JvWqjWCksE.roa
File: 7nZ0myKUjZCneL-h9JvWqjWCksE.roa (raw, json)
Hash identifier: 2UkKuLaT0LdCVAvsTRFSKf98GRPZ2H3P7FRKlwYNvLA=
Subject key identifier: EE:76:74:9B:22:94:8D:90:A7:78:BF:A1:F4:9B:D6:AA:35:82:92:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018756420EF5FFE4239C51D0D43641F7C1F4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7nZ0myKUjZCneL-h9JvWqjWCksE.roa
Signing time: Thu 06 Apr 2023 11:09:42 +0000
ROA not before: Thu 06 Apr 2023 11:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:42:0e:f5:ff:e4:23:9c:51:d0:d4:36:41:f7:c1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 11:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee76749b22948d90a778bfa1f49bd6aa358292c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:26:43:82:38:b7:cb:93:0a:e6:63:0f:20:
9e:91:f4:23:7f:0f:72:9e:29:ef:06:5b:cf:cc:04:
69:33:99:bf:49:e6:0d:33:7e:0a:ce:43:e6:b0:a5:
1c:93:0a:64:15:58:fd:dc:67:ca:3c:7b:6a:b7:1d:
bf:55:a3:e5:be:3b:6f:3b:86:2b:a9:60:de:dd:90:
99:a4:85:bd:fc:cc:be:3c:69:2c:72:9f:9d:f9:69:
4d:15:a4:2c:4f:58:c4:0e:59:5b:f5:13:42:22:cb:
de:ef:b3:0f:b4:db:b7:82:84:cf:ba:5b:3b:ef:db:
a5:fc:0a:cb:e6:46:9d:2a:56:31:63:c9:ca:99:01:
10:fd:fb:8e:9b:59:59:76:b7:22:b3:ff:2b:f9:bf:
32:b6:8a:58:00:e6:da:9a:68:71:8f:c6:a6:13:a7:
45:c1:74:be:12:05:2c:20:3b:13:b9:83:6c:d5:db:
bb:92:dd:af:63:4a:ff:f7:7c:82:5a:24:8e:80:66:
cc:91:b6:1a:67:05:c4:0c:78:9f:7b:a4:62:77:bf:
ac:8a:c6:a6:b1:38:9e:0e:ad:ce:7f:51:be:06:9b:
17:87:6c:7f:61:1e:4e:96:21:3a:88:86:3b:76:b2:
23:cf:d3:ee:bf:48:03:33:c0:67:31:2f:03:05:07:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:76:74:9B:22:94:8D:90:A7:78:BF:A1:F4:9B:D6:AA:35:82:92:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7nZ0myKUjZCneL-h9JvWqjWCksE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:a1:c5:9f:4f:0d:3f:50:ca:7a:a2:26:06:8c:ea:f8:ce:0f:
7a:89:d4:4b:f8:7c:67:e9:19:f3:c8:31:c7:6f:fa:9e:4e:98:
cc:c7:bd:70:76:85:c4:10:d0:bc:cf:08:76:50:c7:51:2a:db:
4b:97:1d:3c:b0:a6:99:9a:23:49:32:75:d2:ab:c9:b3:94:95:
45:85:91:27:d5:91:be:5d:e2:a7:e0:7e:ee:18:95:84:08:90:
f0:c8:a8:79:6e:ad:d1:2d:f3:34:b1:02:a4:4b:89:04:4a:25:
d5:8c:b8:a3:cd:90:b6:ce:8c:91:ad:3e:d5:80:fd:83:fc:4c:
1f:78:98:4c:a2:fc:50:f5:e8:b7:a1:ec:09:89:48:e6:b4:f6:
65:4c:6c:e6:d8:2a:2e:93:d8:53:30:e3:99:d2:b3:68:b2:15:
bc:52:35:90:f9:7b:3d:50:a0:0c:e6:be:aa:0c:39:d6:7e:c7:
d7:21:2c:b6:19:9e:55:5d:b3:2d:bd:f5:1a:83:11:6d:2c:f2:
00:ea:87:9e:b5:8c:48:e2:73:45:5f:cb:c5:46:b7:f6:45:e2:
5d:55:a3:28:41:25:69:65:97:bf:39:e8:53:1c:b2:25:e8:eb:
b3:53:1f:6b:f0:67:41:30:60:21:5c:7c:d1:94:50:fb:2d:ad:
78:35:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:26:41 2025 by rpki-client