Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7tXHW9bW7i9O4jzrcBEZ9Y1L8FE.roa
File: 7tXHW9bW7i9O4jzrcBEZ9Y1L8FE.roa (raw, json)
Hash identifier: RzOnRzhPevcyyNfKH4r5w2U8hI6CLrOI/yaKzcS+b5o=
Subject key identifier: EE:D5:C7:5B:D6:D6:EE:2F:4E:E2:3C:EB:70:11:19:F5:8D:4B:F0:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869FB03116AB1A3652DDD2175F3CC34750
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7tXHW9bW7i9O4jzrcBEZ9Y1L8FE.roa
Signing time: Thu 02 Mar 2023 00:19:29 +0000
ROA not before: Thu 02 Mar 2023 00:19:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9f:b0:31:16:ab:1a:36:52:dd:d2:17:5f:3c:c3:47:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 00:19:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eed5c75bd6d6ee2f4ee23ceb701119f58d4bf051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:37:83:f0:24:78:90:2f:13:b7:c2:a1:f8:
36:86:98:e8:d9:7f:a4:5f:b7:86:4b:0e:56:c5:0e:
57:ec:90:2a:9f:53:f6:53:7d:3e:f0:b4:24:2e:13:
df:a5:95:2b:7c:3c:80:f6:7c:16:4d:a2:95:20:a9:
e1:2b:f8:cd:51:01:32:8f:09:d9:b8:a1:1a:a2:50:
3d:09:eb:21:35:4f:44:36:c5:f2:51:17:74:14:71:
c1:57:a7:ff:48:8f:b0:ee:0e:b0:2d:8c:c7:d1:5a:
10:f6:d6:49:af:b0:ad:5f:fa:77:0f:5a:7f:6d:3a:
e8:07:c4:64:0f:12:bc:c9:a6:e6:b6:96:e2:ce:a0:
38:6e:8c:a9:34:e1:c7:42:f2:29:9c:7a:07:5d:2f:
52:82:2b:8a:5b:5c:20:7b:c0:13:a3:0a:8c:f7:06:
b2:6c:7c:73:84:4d:26:58:aa:e5:cc:2b:3e:36:af:
46:eb:11:c6:27:72:8e:b9:da:64:fb:9a:4d:87:b4:
67:23:6e:75:c9:03:52:18:fa:dd:e0:a5:89:15:98:
65:16:26:61:39:9b:f8:e9:03:f9:50:10:cf:02:98:
cb:63:a3:1e:bb:53:0a:05:f5:11:94:2a:38:7b:39:
a1:db:da:25:b1:3f:f0:46:7b:68:5f:07:2b:4e:f0:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D5:C7:5B:D6:D6:EE:2F:4E:E2:3C:EB:70:11:19:F5:8D:4B:F0:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7tXHW9bW7i9O4jzrcBEZ9Y1L8FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:c9:61:cd:ce:f3:28:1d:24:ab:e2:c7:c5:37:8b:2a:1f:d2:
0d:39:6c:67:da:9a:33:aa:ce:39:28:e9:16:3e:94:55:5d:ac:
0b:9d:87:6f:a8:ba:32:0e:99:3b:87:79:50:3c:53:5d:71:2d:
88:60:74:4d:a1:6e:8c:99:50:22:80:13:b6:af:ce:a9:ce:fd:
cf:82:07:f5:c1:3b:8f:35:29:cc:7c:b9:fc:ca:95:87:95:db:
e2:25:70:71:3e:85:62:13:ce:b4:57:f6:0d:b7:31:d2:07:d3:
34:7f:1b:96:4b:96:74:69:e4:7f:80:89:ce:5e:f6:ad:a7:d4:
87:9d:45:64:6c:8c:5a:97:cf:50:d6:81:40:7a:a8:26:b2:a1:
84:64:e9:99:45:f3:30:f8:cd:31:f3:74:7f:4d:95:63:ea:a0:
b1:b0:be:2b:c7:62:d6:dc:49:fb:43:ca:3e:6a:c2:91:c6:46:
78:7d:6c:e0:1c:49:1d:eb:bb:79:1c:b6:fa:b4:89:3b:59:ca:
1b:08:60:d0:d6:4d:14:7e:ae:a3:7c:9b:0a:10:15:53:27:91:
70:2f:9f:9c:e0:84:f7:6f:4c:28:5a:40:d8:19:eb:21:fd:9f:
c6:9d:dc:f7:74:48:88:f9:ea:20:c3:a7:2c:e2:3d:f6:da:9e:
4e:51:34:b6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYafsDEWqxo2Ut3SF188w0dQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAyMDAxOTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWQ1Yzc1YmQ2ZDZlZTJmNGVlMjNjZWI3MDExMTlmNThkNGJmMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3so3g/AkeJAvE7fCofg2hpjo2X+k
X7eGSw5WxQ5X7JAqn1P2U30+8LQkLhPfpZUrfDyA9nwWTaKVIKnhK/jNUQEyjwnZ
uKEaolA9CeshNU9ENsXyURd0FHHBV6f/SI+w7g6wLYzH0VoQ9tZJr7CtX/p3D1p/
bTroB8RkDxK8yabmtpbizqA4boypNOHHQvIpnHoHXS9SgiuKW1wge8ATowqM9way
bHxzhE0mWKrlzCs+Nq9G6xHGJ3KOudpk+5pNh7RnI251yQNSGPrd4KWJFZhlFiZh
OZv46QP5UBDPApjLY6Meu1MKBfURlCo4ezmh29olsT/wRntoXwcrTvAQ4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO7Vx1vW1u4vTuI863ARGfWNS/BRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN3RYSFc5Ylc3aTlPNGp6cmNCRVo5WTFMOEZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAILJYc3O8ygdJKvix8U3
iyof0g05bGfamjOqzjko6RY+lFVdrAudh2+oujIOmTuHeVA8U11xLYhgdE2hboyZ
UCKAE7avzqnO/c+CB/XBO481Kcx8ufzKlYeV2+IlcHE+hWITzrRX9g23MdIH0zR/
G5ZLlnRp5H+Aic5e9q2n1IedRWRsjFqXz1DWgUB6qCayoYRk6ZlF8zD4zTHzdH9N
lWPqoLGwvivHYtbcSftDyj5qwpHGRnh9bOAcSR3ru3kctvq0iTtZyhsIYNDWTRR+
rqN8mwoQFVMnkXAvn5zghPdvTChaQNgZ6yH9n8ad3Pd0SIj56iDDpyziPfbank5R
NLY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:32 2025 by rpki-client