Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7nyRbAjHUi8ATZusflnCljsMy4I.roa
File: 7nyRbAjHUi8ATZusflnCljsMy4I.roa (raw, json)
Hash identifier: W21QtT9OfzBFQWifKYI3zk+HL0CIxazdtIYz7YlsZ/A=
Subject key identifier: EE:7C:91:6C:08:C7:52:2F:00:4D:9B:AC:7E:59:C2:96:3B:0C:CB:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184813636661CC6EAF5D207F244DA8DA3F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7nyRbAjHUi8ATZusflnCljsMy4I.roa
Signing time: Wed 16 Nov 2022 16:12:04 +0000
ROA not before: Wed 16 Nov 2022 16:12:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:36:36:66:1c:c6:ea:f5:d2:07:f2:44:da:8d:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 16 16:12:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee7c916c08c7522f004d9bac7e59c2963b0ccb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:cc:3b:e8:2f:cd:3c:5c:06:f5:88:80:39:
8c:c4:ef:a8:89:07:28:09:8b:53:d5:28:05:1e:44:
56:8f:fa:e7:e7:d4:48:f4:8c:7d:e5:13:24:de:ea:
ed:19:62:58:f3:b0:69:a6:73:0c:d1:8e:c7:ff:eb:
bb:ea:d0:16:15:e1:45:26:c0:c2:da:2e:70:16:b5:
b5:ae:8a:89:3b:b3:9a:21:d4:f0:03:c5:f2:bb:8c:
11:01:61:8d:b3:ce:ad:ba:1c:32:c3:99:18:e9:9b:
31:21:82:1d:6e:25:71:f6:ad:0b:be:53:7f:15:4e:
44:2a:51:85:ba:0f:6c:f8:0e:6f:32:f0:5f:2d:84:
e4:d3:fb:78:b6:d0:10:38:09:05:78:b0:34:7d:19:
06:1a:32:f1:02:25:aa:5f:2f:54:9e:7f:ba:0e:df:
61:54:ea:02:e4:ac:eb:c1:e9:87:39:69:93:7c:5e:
7b:61:e7:5d:f4:65:9a:5e:34:d5:d8:2d:ff:20:fa:
6c:0b:fe:1e:7a:e9:f5:2e:c6:c1:09:79:d7:25:3f:
89:13:5f:af:00:d4:8e:2a:02:28:78:a0:bc:84:31:
06:3e:09:f1:42:b6:92:48:36:84:e6:f8:89:d9:5f:
b1:a1:41:c1:92:3f:be:a0:c7:d9:f3:64:4e:57:00:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:91:6C:08:C7:52:2F:00:4D:9B:AC:7E:59:C2:96:3B:0C:CB:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7nyRbAjHUi8ATZusflnCljsMy4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:09:fb:dc:4f:34:68:81:e9:19:8a:7d:e8:cf:16:c9:84:b9:
be:1a:da:a2:d6:84:0a:26:6c:9c:e0:b6:b5:79:5f:ec:9e:0b:
b8:6e:51:88:19:7e:d0:44:c7:3f:1c:09:e2:37:8a:5e:f8:cd:
12:1d:47:83:46:62:45:f6:7a:4a:45:4e:6a:90:44:bd:81:9d:
2f:e5:b6:e3:7b:f4:bf:54:eb:6d:2d:f6:9e:87:83:1a:95:6a:
05:6a:44:a8:db:d9:bf:5d:07:7c:44:c2:47:bc:de:44:73:fd:
40:e7:c4:76:d4:c5:7b:ed:c2:f2:e0:b6:3a:58:44:6c:12:79:
82:32:dc:0f:5d:59:fe:a8:22:1c:6c:c6:07:2f:5c:cf:be:7f:
0f:ea:c7:1d:a8:25:55:34:4a:0a:5e:4b:ba:d3:b3:88:ca:ba:
31:bb:ac:a4:6f:d7:0e:a7:cd:12:24:04:c8:04:86:e2:cd:b6:
45:ad:70:34:f8:36:ed:36:54:d8:e3:b4:29:88:30:e0:6b:8b:
35:19:29:48:26:63:2d:de:aa:df:e4:1b:86:47:74:37:db:d5:
a9:fc:50:e7:eb:d4:50:8a:e6:aa:3d:af:99:e0:92:24:fd:7c:
ad:07:59:0a:68:51:25:4e:37:71:97:84:7a:19:8f:71:df:86:
fd:f7:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:07 2025 by rpki-client