Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7tnoa2zLzGTEik2Dztv_tIRIEfQ.roa
File: 7tnoa2zLzGTEik2Dztv_tIRIEfQ.roa (raw, json)
Hash identifier: Rd+NAjwU4KkuTpESqL+dVsiavVYu87uSQqfDuaKDcFI=
Subject key identifier: EE:D9:E8:6B:6C:CB:CC:64:C4:8A:4D:83:CE:DB:FF:B4:84:48:11:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869A8707619192B3C8EF219F298D8A6045
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7tnoa2zLzGTEik2Dztv_tIRIEfQ.roa
Signing time: Wed 01 Mar 2023 00:16:25 +0000
ROA not before: Wed 01 Mar 2023 00:16:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:87:07:61:91:92:b3:c8:ef:21:9f:29:8d:8a:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 00:16:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eed9e86b6ccbcc64c48a4d83cedbffb4844811f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:12:66:35:62:52:5b:55:92:1b:c8:54:b3:
f4:66:93:e9:0a:41:48:e3:a8:9f:66:ab:d0:d6:5b:
d4:f7:e0:5a:1a:d9:e7:d1:72:b3:02:0d:97:43:02:
d3:1f:5d:f3:25:09:87:52:26:39:b6:7e:91:60:b1:
df:e1:f1:d5:d4:d6:d8:c3:e2:7c:c1:29:41:21:b5:
f4:a4:a4:86:f3:1b:40:29:d0:e8:8c:8a:95:a4:1a:
df:9a:f8:66:82:33:74:1d:d5:99:33:71:af:ce:b3:
a2:78:c5:75:07:a5:80:7a:95:d0:a0:2e:71:56:cd:
61:4a:05:49:57:16:31:7f:93:fa:a1:dd:3a:64:40:
8f:15:ba:de:c7:c8:f6:69:60:9e:51:c5:47:7f:3f:
fc:1f:50:14:63:ed:ed:09:c2:ae:3e:9b:b7:bf:61:
5e:33:6e:ed:a6:cf:5a:c4:c3:28:4e:87:f7:c8:3e:
98:fc:9c:f8:e1:0c:86:6a:ad:06:b2:fc:41:df:e1:
d4:16:6c:05:62:0f:0f:e6:cb:c3:27:79:06:8a:65:
2a:f2:59:56:15:4d:2c:72:e5:03:16:a6:a4:b2:87:
ca:f5:02:7a:ec:57:ca:19:4c:7e:2a:92:3f:da:ac:
84:84:4d:cb:6c:04:89:fa:f3:2d:22:06:34:1b:09:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D9:E8:6B:6C:CB:CC:64:C4:8A:4D:83:CE:DB:FF:B4:84:48:11:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7tnoa2zLzGTEik2Dztv_tIRIEfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:af:d5:4d:66:4a:bc:e4:67:75:92:7e:92:87:b9:25:58:c9:
7f:2d:3b:a1:54:e6:6f:11:bc:be:71:0b:84:52:4d:da:c6:f3:
0c:ae:71:2d:41:f9:97:2a:56:68:97:17:f2:23:8f:8b:be:12:
d3:52:af:93:d0:e0:97:05:e7:77:d5:3b:c3:e5:f3:2a:2c:df:
03:ca:b2:52:04:8b:36:13:fe:fd:09:5d:c0:21:b3:06:77:64:
87:f8:be:a9:62:bc:41:9d:b4:5c:9c:7a:f1:c0:ae:1c:0d:c1:
69:95:5c:fe:ad:72:4f:fa:ec:ff:e4:04:22:05:13:a3:8f:28:
63:bb:3a:79:4f:5e:47:da:03:77:ca:d8:98:a2:13:82:e7:1f:
bb:ae:01:f3:27:3a:ae:fb:ab:8b:08:d2:b2:de:cf:1c:e4:7a:
bc:03:21:80:1e:dd:71:83:5d:3d:53:71:0e:e3:36:0d:e3:91:
e4:cc:89:e1:70:8a:c5:37:6a:eb:ee:f0:81:27:44:4c:cd:fe:
f4:91:01:32:a9:87:5a:c5:7e:02:4a:3b:47:36:0b:e6:9b:21:
e0:39:a4:15:d6:d5:79:00:18:27:44:a5:36:55:31:68:18:53:
80:22:08:41:19:b8:51:be:74:14:4a:79:ee:b0:27:d5:e5:1b:
88:5c:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:57:06 2025 by rpki-client