Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7xt1X4HEjJpIAgPC6-d5E0AMeiE.roa
File: 7xt1X4HEjJpIAgPC6-d5E0AMeiE.roa (raw, json)
Hash identifier: o41JNTwwbN22PugpFDzCFVeXUBW0BNw2/TB4JeiqgaE=
Subject key identifier: EF:1B:75:5F:81:C4:8C:9A:48:02:03:C2:EB:E7:79:13:40:0C:7A:21
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7013D76F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7xt1X4HEjJpIAgPC6-d5E0AMeiE.roa
Signing time: Sun 06 Mar 2022 02:04:35 +0000
ROA not before: Sun 06 Mar 2022 02:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64:ffff:0:17f:5cf8:aa98/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1880348527 (0x7013d76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 02:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef1b755f81c48c9a480203c2ebe77913400c7a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:12:3e:d4:df:84:c0:e6:cc:eb:6b:e2:c4:
eb:f9:dd:28:47:17:59:8a:0e:f2:9b:ef:ff:02:15:
ba:8b:84:ac:de:e7:3b:34:9d:a9:b6:85:a2:15:b7:
f0:38:9c:9e:ab:11:ad:9a:0a:50:38:5f:ab:a9:24:
97:8c:da:91:f9:fc:77:ae:83:7e:c9:b4:3b:e0:2a:
7a:1e:71:b8:05:90:9d:06:0b:2b:12:96:fc:07:79:
31:28:5e:eb:56:ec:cc:81:49:cf:e9:88:09:86:b5:
0d:36:77:f9:49:7f:5a:01:70:1a:9a:13:cb:f7:1f:
12:54:45:54:9c:61:e3:e6:8d:2e:60:77:d1:92:3c:
45:50:30:28:be:6b:63:02:33:46:a9:0e:7a:be:70:
fd:cd:9d:47:88:18:99:81:54:1e:94:a7:c2:f1:fd:
00:7b:fb:ff:4d:44:20:6e:75:30:cc:5c:77:d7:59:
2b:a5:31:ce:62:c2:f1:40:3b:a7:ff:59:6c:aa:30:
ca:33:89:f3:1a:a0:5c:72:4f:ce:ea:5d:96:4a:40:
99:70:2e:f2:27:93:2e:60:c0:68:d4:e5:fc:48:fd:
78:ec:1f:3a:d6:bd:23:cd:a5:fd:a4:61:cb:ab:d6:
fd:22:d9:11:f5:49:77:80:04:2f:0c:6d:16:fa:7d:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1B:75:5F:81:C4:8C:9A:48:02:03:C2:EB:E7:79:13:40:0C:7A:21
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7xt1X4HEjJpIAgPC6-d5E0AMeiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:70:40:ac:ce:82:31:99:00:c2:2a:01:40:87:92:6b:c8:31:
66:b3:f0:d4:1d:99:77:b1:49:e3:c9:3d:87:6b:43:74:dd:73:
c2:e2:70:39:c4:16:6d:54:3c:c5:3a:f1:eb:09:40:97:be:53:
f8:f9:09:1f:8c:b4:13:09:bd:51:0b:55:1b:eb:52:c5:b9:a5:
c9:a2:f6:ed:0f:22:0a:d1:94:d3:0e:46:53:b3:2b:91:c1:04:
7b:b6:22:33:9d:c9:80:84:c1:1a:2e:17:19:4a:d4:bc:7c:b5:
bc:41:c0:6d:7f:f0:b3:6f:93:43:0d:b7:91:29:2c:4d:28:8a:
11:64:60:fc:3e:fd:74:95:6e:8a:6e:9c:7f:f5:df:75:54:61:
66:8f:dc:a5:1f:0e:40:f6:37:6d:1c:ec:62:bb:06:93:8c:b8:
2e:06:4f:ea:74:6c:5e:bd:02:ea:bc:4a:5b:63:59:05:71:b4:
4a:59:6e:ca:5f:1c:42:15:7a:d7:57:82:5a:b6:c6:2c:d3:f9:
50:e8:e8:71:2a:20:ef:7d:c3:0c:c8:63:cb:20:f6:47:b2:0c:
2a:24:04:43:a1:5f:1d:62:6a:d3:1a:57:11:47:c2:85:af:14:
ff:d6:cc:73:26:ab:99:a1:06:a5:5c:ee:69:dd:a6:10:c7:09:
39:17:eb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:40 2025 by rpki-client