Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7uvh6CcLC9XUbhgv-6boVoIFyDM.roa
File: 7uvh6CcLC9XUbhgv-6boVoIFyDM.roa (raw, json)
Hash identifier: 50hmtnnvdVwS/0R9cl9Fy/9Pp7aUk49p1ErzYu7/1I0=
Subject key identifier: EE:EB:E1:E8:27:0B:0B:D5:D4:6E:18:2F:FB:A6:E8:56:82:05:C8:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873AC83FD36E8BE6FEAE58F037681EECC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7uvh6CcLC9XUbhgv-6boVoIFyDM.roa
Signing time: Sat 01 Apr 2023 03:06:54 +0000
ROA not before: Sat 01 Apr 2023 03:06:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:3ac7:a4fb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3a:c8:3f:d3:6e:8b:e6:fe:ae:58:f0:37:68:1e:ec:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 03:06:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeebe1e8270b0bd5d46e182ffba6e8568205c833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:4e:5e:6c:03:bc:f8:f5:3a:43:fc:85:a1:
48:2f:25:fb:7b:5a:8c:65:f1:a4:9f:de:9c:e5:62:
c2:14:dc:a3:a9:0a:ce:1d:57:b0:5c:a9:d6:1c:18:
6a:a6:ff:37:fe:aa:71:b0:81:1c:fd:f5:4d:d8:91:
64:00:54:6a:34:86:65:d9:2d:ff:79:e2:77:49:10:
e9:b4:87:95:50:86:b5:cb:be:a2:3e:19:33:34:2c:
5e:b2:bb:7a:61:99:2d:98:6a:4a:71:bf:ba:5b:d8:
2a:c4:ba:96:48:0a:b7:be:36:f0:e7:f7:37:49:b0:
14:0e:c1:d2:51:a8:80:4e:89:77:3e:bc:30:4d:9d:
6d:88:7c:b6:28:79:d9:7b:1a:0f:99:e3:4f:33:94:
0e:ce:eb:77:bc:2f:82:97:2c:59:7c:18:f0:94:99:
79:20:3f:04:94:40:eb:94:38:d9:77:30:6a:1c:da:
eb:86:f9:5b:16:72:91:24:6b:35:55:b4:76:49:e8:
97:a8:2e:6d:45:95:70:1d:b7:84:bd:5b:ec:68:1a:
57:e1:30:a1:3d:49:54:81:66:a8:ca:1a:0a:85:29:
5d:e4:7f:99:56:97:d4:73:01:4e:2d:76:e1:56:bf:
49:03:c3:65:c9:84:b8:3e:7d:a7:00:2f:d7:55:c4:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EB:E1:E8:27:0B:0B:D5:D4:6E:18:2F:FB:A6:E8:56:82:05:C8:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7uvh6CcLC9XUbhgv-6boVoIFyDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:a2:3f:c7:55:9c:f4:91:0e:ad:17:fa:4b:2f:ec:77:3c:dd:
15:f6:50:72:91:4c:bf:04:fc:f6:1e:9e:8b:da:2c:d7:64:54:
26:e9:83:20:fa:74:21:10:5c:0f:a1:d6:d8:02:e9:cd:7e:12:
4d:48:80:9f:c5:18:59:12:f3:dd:a1:bc:a0:dc:f0:26:93:6b:
f5:7e:a8:bc:c4:07:5b:f9:58:6d:57:b3:74:9a:ed:bb:37:96:
e2:9e:48:57:8d:7f:1f:f9:db:8c:29:6b:db:6d:68:84:9a:1e:
e8:70:0a:f3:3b:78:54:06:eb:0b:f3:e7:22:12:31:03:8d:b6:
41:09:b6:68:11:03:51:ac:3b:79:04:b3:6f:25:a3:6b:ff:30:
b3:31:2a:15:78:d8:dc:5d:4d:b0:f7:e1:e8:3b:af:d7:c5:12:
02:33:9b:1b:c0:6b:ad:3b:4a:79:0c:3c:95:83:1f:cc:e4:e8:
90:6a:bb:53:e9:59:86:ba:f9:a1:f2:8c:52:07:42:94:80:ce:
ee:52:40:3e:84:a7:68:b1:25:78:0a:1e:2f:bf:3c:8d:1f:fc:
1e:1b:e7:93:c0:4b:1d:44:88:f9:8d:a5:b3:29:81:73:5c:c9:
ac:b0:bb:8e:a3:d8:a0:d0:d8:88:37:a8:49:38:48:83:45:4e:
fc:ea:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:24:34 2025 by rpki-client