Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7s3A7c_VIJitSFATVjTVot8uCaI.roa
File: 7s3A7c_VIJitSFATVjTVot8uCaI.roa (raw, json)
Hash identifier: ID4Wd0nHVZXV3cPh+UnqPaQjZXg9G2kWRVF+cYpB+Us=
Subject key identifier: EE:CD:C0:ED:CF:D5:20:98:AD:48:50:13:56:34:D5:A2:DF:2E:09:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F088B51EB55916047B268965711FA27C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7s3A7c_VIJitSFATVjTVot8uCaI.roa
Signing time: Sun 13 Aug 2023 20:13:58 +0000
ROA not before: Sun 13 Aug 2023 20:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f0:88:b5:1e:b5:59:16:04:7b:26:89:65:71:1f:a2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 20:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eecdc0edcfd52098ad4850135634d5a2df2e09a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:b1:89:88:e9:f2:2a:bb:0c:05:69:da:6b:
d8:60:b5:f9:f8:97:cd:0d:9f:96:eb:a9:fe:4b:9c:
96:42:ee:60:5e:4d:2a:57:b9:dd:18:3c:42:4f:d3:
0b:09:e1:6b:18:08:f3:c0:d1:a3:39:e7:66:c2:15:
76:ff:7b:a6:5f:28:2b:3b:2d:66:0c:7c:5d:79:af:
ca:a8:e9:e1:98:fd:42:e8:fb:0b:a0:c7:56:63:3f:
0e:9c:b2:69:81:72:65:54:5a:a0:29:d8:eb:7b:e3:
16:8b:0a:72:ef:e1:b4:d6:03:72:4a:b1:a4:1a:19:
07:9f:ea:73:d6:b3:1d:28:a1:7e:46:af:ef:88:77:
09:00:9e:8d:dd:cf:95:eb:a1:a3:b3:09:9a:51:61:
5d:97:e7:48:91:56:76:f3:8e:16:3e:77:88:5e:c1:
bc:0a:af:36:78:e5:5f:e6:1e:97:a7:13:5c:9c:6c:
14:a5:48:f0:c1:f0:ae:62:79:03:83:14:ba:76:ba:
dc:44:fb:57:09:0c:5c:72:cd:5e:22:37:36:3c:bc:
1f:87:6c:33:98:29:3a:bd:d7:50:4c:77:3e:e8:d5:
f4:ac:8d:d4:ad:71:5e:a9:fe:67:ad:3e:7f:1e:70:
8a:44:31:18:1b:62:af:70:62:fc:f6:a7:9d:aa:95:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CD:C0:ED:CF:D5:20:98:AD:48:50:13:56:34:D5:A2:DF:2E:09:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7s3A7c_VIJitSFATVjTVot8uCaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:89:30:b8:42:9a:31:b2:e5:82:f9:40:51:df:34:43:f2:40:
05:52:2a:98:17:4f:01:12:f7:c5:eb:e6:7c:bc:2b:2a:00:b7:
6d:7a:20:b5:96:6b:42:33:60:66:61:c2:26:16:be:9e:7d:ba:
73:c3:18:6e:f4:d2:4d:c6:a0:3d:84:86:0a:ab:a2:47:64:21:
24:6e:63:c6:79:a0:f5:35:ff:d2:ae:ed:df:7b:06:29:23:51:
4b:06:08:ea:cb:98:be:21:59:64:8e:63:96:eb:22:3d:44:2c:
c6:c9:3d:b9:e2:2c:91:f2:e1:71:b9:28:eb:fd:4a:22:46:7e:
0c:cd:5a:bc:ff:52:35:71:6d:6f:ed:02:cc:2e:6f:34:32:c5:
06:5f:67:47:09:51:13:08:54:25:9f:01:c5:32:30:80:f8:1b:
32:3a:37:a1:98:35:c3:5d:86:c1:dd:b2:b9:6e:dc:99:28:0c:
e6:ea:fa:69:d6:3f:8b:9b:83:54:1f:80:76:4b:38:e2:de:29:
a4:a8:9e:04:5f:07:a0:1c:77:48:60:3b:a8:67:a5:f7:0e:6e:
01:1d:ad:35:a8:39:7a:25:89:40:cd:84:46:a4:b3:b5:92:98:
da:e2:ba:7d:b9:87:c0:e8:55:d8:62:2b:f5:44:cd:c7:ab:7f:
b1:0a:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:44:33 2025 by rpki-client