Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7v5G60EvjO3SkSrHm1A5yAzrZqs.roa
File: 7v5G60EvjO3SkSrHm1A5yAzrZqs.roa (raw, json)
Hash identifier: YMWfkjujYMXxEALZZFX4SXWJbqoyBnltkP/bSXPhdJM=
Subject key identifier: EE:FE:46:EB:41:2F:8C:ED:D2:91:2A:C7:9B:50:39:C8:0C:EB:66:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01839F7AC20360DA3854364FE72879D2609D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7v5G60EvjO3SkSrHm1A5yAzrZqs.roa
Signing time: Mon 03 Oct 2022 20:12:45 +0000
ROA not before: Mon 03 Oct 2022 20:12:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9f:7a:c2:03:60:da:38:54:36:4f:e7:28:79:d2:60:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 3 20:12:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eefe46eb412f8cedd2912ac79b5039c80ceb66ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:e5:cf:28:e8:57:21:e5:d9:00:7f:11:4b:
bc:97:18:0f:69:2d:f8:35:27:ad:b2:1c:f7:f9:ca:
f2:82:1b:9f:b9:ab:1b:35:0b:9d:dd:bb:4d:5f:75:
e6:30:2f:c2:6a:a8:23:27:8e:c5:e7:4c:a9:df:61:
96:87:5e:db:3a:d8:9d:a8:43:6f:96:ac:79:f5:73:
b3:9b:df:29:b1:b4:b5:b9:b0:9d:cf:77:12:ce:76:
69:3b:85:b0:09:27:6a:2c:fa:44:29:dc:a6:2f:6b:
64:1f:6c:93:fa:ac:40:c6:8a:b4:d9:5a:d2:8a:9c:
10:45:62:5e:9a:ab:f3:6e:7b:27:2b:e1:a9:15:6b:
e0:56:42:64:76:08:0f:8b:c5:f5:1f:b1:4e:5c:5d:
f6:e2:f9:da:8f:72:e8:f1:0c:e8:53:a6:39:44:b6:
e6:9c:9f:3b:e3:0d:28:a2:34:35:07:fb:6b:94:f5:
8a:cd:1f:a4:89:ce:d0:7b:64:8d:35:cd:30:6f:bc:
a5:c5:bd:57:9f:99:7e:d3:31:6d:2a:c3:92:d1:3a:
4c:29:3c:da:d9:f5:38:bb:93:ce:7f:6d:97:c8:3f:
cb:da:c8:1c:a7:c2:83:f1:4c:17:81:b8:72:29:0e:
1a:7c:57:25:13:90:fe:8a:e7:e9:30:82:71:fd:ba:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FE:46:EB:41:2F:8C:ED:D2:91:2A:C7:9B:50:39:C8:0C:EB:66:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7v5G60EvjO3SkSrHm1A5yAzrZqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:f6:f2:d6:32:24:cc:e1:d1:98:64:f0:3a:5c:2c:eb:25:7c:
bf:93:15:fd:7f:77:b2:3a:5d:5f:83:61:02:d9:4f:19:ef:e0:
8f:eb:7b:cc:5b:8c:4f:11:cf:4f:64:02:4a:7d:89:0a:16:f1:
dc:86:fa:27:14:90:91:1f:7c:ee:f2:b4:a5:c5:21:b3:5b:e6:
ca:f9:d7:89:04:7e:4f:5b:21:b2:a4:b6:59:b8:68:ca:eb:a6:
8f:3a:4b:4d:f4:43:8c:79:28:d1:5e:ac:b3:c6:fb:af:7b:a5:
91:0c:0b:0d:04:23:d3:58:bc:7a:34:57:37:30:50:fc:a9:58:
a1:d2:71:af:b3:23:70:a4:f5:38:f7:05:08:e7:c5:d1:7c:05:
ce:0d:43:d2:53:16:94:8d:01:75:24:77:88:8e:a4:7b:d7:e7:
51:a7:86:47:ef:9a:ac:2e:10:47:5e:02:b5:20:bc:f7:8b:74:
74:ab:2e:3b:93:8c:a1:00:27:1a:9e:a4:86:6e:ac:ae:86:44:
93:a2:c2:af:4f:42:3f:fd:ce:b0:39:46:1e:3d:38:4a:5c:e4:
a8:b9:3d:8d:5e:94:4c:14:ad:2a:58:26:3e:7b:99:44:b1:a2:
f8:e6:f2:b2:56:6c:95:4e:63:0c:32:ff:20:ca:3b:8e:b1:b7:
cc:4a:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:49:12 2025 by rpki-client