Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7t5F6-wNNtm0X7h2Kg0JRemzhoY.roa
File: 7t5F6-wNNtm0X7h2Kg0JRemzhoY.roa (raw, json)
Hash identifier: v1ZktCJUzz2ATdqN4hwVP0tUHxT0LcBsmOohk/3zRPM=
Subject key identifier: EE:DE:45:EB:EC:0D:36:D9:B4:5F:B8:76:2A:0D:09:45:E9:B3:86:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CD56D7F5C08AC9D30AA0F95D375CF803
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7t5F6-wNNtm0X7h2Kg0JRemzhoY.roa
Signing time: Fri 10 Mar 2023 21:04:26 +0000
ROA not before: Fri 10 Mar 2023 21:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:cd56:cf91/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:56:d7:f5:c0:8a:c9:d3:0a:a0:f9:5d:37:5c:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 21:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eede45ebec0d36d9b45fb8762a0d0945e9b38686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:4c:95:f5:a9:af:4c:4e:52:f5:4b:d4:20:
82:1b:a5:c1:9e:72:ac:cd:1d:3f:d3:b0:29:76:3f:
e8:ee:55:3c:20:23:93:a4:e2:e9:37:e3:7b:e0:cd:
b6:db:05:ab:ec:f6:8f:0a:9f:f0:3d:c0:50:d0:44:
c0:ed:e1:2f:48:dd:87:1a:e8:e3:35:fa:9a:23:54:
ae:d8:9d:7a:06:2f:69:f6:f5:59:b9:82:59:78:7a:
8d:ad:4e:1c:f1:df:ac:f7:5c:6e:b2:2d:5f:ab:16:
85:e7:e1:60:a1:77:c8:36:e1:42:56:cd:8e:c7:89:
55:36:79:ad:8b:09:09:f1:fa:73:3f:5e:16:b5:a3:
5b:0d:d9:81:95:d3:f1:6d:b7:ed:91:82:9c:1f:cf:
c8:86:8c:18:27:89:e1:32:91:de:20:82:d7:dc:80:
b0:c6:d5:4c:be:c3:a3:ab:eb:3b:27:07:59:55:96:
72:f2:42:b9:74:21:d5:fe:53:47:31:c2:ac:9f:3f:
ee:93:0d:6c:4b:eb:da:7e:75:82:ee:10:0f:40:d3:
4e:da:25:3e:7a:3c:e3:65:1e:94:74:34:e7:09:9f:
e0:4e:89:8f:b0:93:b1:1f:c0:be:33:d0:5e:c1:97:
17:5e:e1:9c:e4:28:47:33:53:44:37:83:ef:5b:84:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DE:45:EB:EC:0D:36:D9:B4:5F:B8:76:2A:0D:09:45:E9:B3:86:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7t5F6-wNNtm0X7h2Kg0JRemzhoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:a9:02:db:4f:d8:28:7b:4c:bb:25:f0:8a:82:b8:19:59:0e:
d1:06:37:13:5e:8c:d8:db:7b:3d:33:5b:90:ac:b4:d5:fe:c9:
b8:59:57:50:9c:57:73:df:90:ca:85:f0:19:6b:d5:87:25:8e:
62:cb:3b:5c:c9:43:e6:4b:61:9d:b6:54:fb:ac:6e:74:ee:9c:
4a:a0:38:38:d6:59:43:db:7c:22:19:0a:12:c5:55:f6:59:14:
3d:78:ef:da:10:5c:76:81:7b:6a:36:33:de:67:36:ca:25:eb:
00:ea:96:43:bc:83:75:bd:0b:0f:90:cf:de:10:ad:ee:47:aa:
3c:8b:2b:94:05:0f:f8:68:9c:d6:fe:12:ab:cf:2a:4d:e3:1e:
44:0c:1d:ad:5d:3c:e5:36:a2:5d:85:bf:99:56:9f:5a:ef:c2:
c7:34:fa:7c:ed:a0:70:a9:27:ce:f8:93:2f:30:bf:95:e3:ae:
d6:44:8b:60:e6:d3:63:cd:23:1b:d1:75:24:ba:ab:ca:fd:ee:
8d:51:32:e3:8e:49:22:ec:10:bc:a9:04:db:8e:11:24:bd:81:
03:e1:ad:50:e8:4f:21:ed:3b:9a:eb:25:dc:fb:e3:82:ca:90:
04:9b:1b:82:03:34:ca:9b:e1:aa:19:4c:66:e4:c0:a9:64:46:
91:2d:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:53:40 2025 by rpki-client