Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7yQIZcGEDfhdZMo5eDE28yS_e9s.roa
File: 7yQIZcGEDfhdZMo5eDE28yS_e9s.roa (raw, json)
Hash identifier: FNzNia2FGEZ1XErh0EcICTcmsiFvapBJkp6+gcNrzRc=
Subject key identifier: EF:24:08:65:C1:84:0D:F8:5D:64:CA:39:78:31:36:F3:24:BF:7B:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CD5FCF96709D9D4E056454507096937D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7yQIZcGEDfhdZMo5eDE28yS_e9s.roa
Signing time: Fri 10 Mar 2023 21:14:13 +0000
ROA not before: Fri 10 Mar 2023 21:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:5f:cf:96:70:9d:9d:4e:05:64:54:50:70:96:93:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 21:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef240865c1840df85d64ca39783136f324bf7bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:c1:4c:af:7b:ba:1f:4a:a2:ce:fa:5e:54:
01:6e:9b:e8:0e:79:ce:80:03:83:fa:93:3f:b1:c2:
78:da:4c:3d:a0:c3:e5:6e:8d:14:f0:4c:f2:7f:28:
52:88:d0:4f:c9:6c:ec:fb:9c:db:24:b4:28:db:fd:
a4:0c:67:5e:de:90:b7:70:e7:7c:3e:c6:01:87:6f:
ad:97:07:a0:89:9f:dc:c4:5c:2d:f6:75:41:1f:e3:
f6:00:82:d8:b3:c7:cd:8b:e2:b4:3c:84:40:6b:85:
d7:ed:f9:7e:b7:77:4c:43:77:58:da:32:ae:1b:2c:
ae:a8:6a:03:7d:49:e8:e1:53:54:cb:39:af:31:79:
66:10:e7:b1:91:fd:5b:7f:0a:ed:fa:fc:f4:c5:ec:
77:c0:29:c8:89:e8:e4:3d:ab:aa:47:1f:fd:b0:70:
27:d1:83:ba:92:dd:62:0e:4a:6d:24:5f:13:ee:a3:
95:bd:ae:01:73:c1:cd:f3:f5:6d:b2:cc:19:f4:63:
97:4f:fb:68:36:a6:79:f3:6f:2f:99:79:5b:fd:cc:
cd:2f:ca:78:3f:0f:01:17:50:bf:62:ed:bc:bb:62:
1a:2b:e7:66:dc:d2:92:b4:0c:9f:55:8b:e5:ac:9c:
95:b4:ba:75:f3:fa:fd:c5:87:4d:28:d0:2a:ce:ff:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:08:65:C1:84:0D:F8:5D:64:CA:39:78:31:36:F3:24:BF:7B:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7yQIZcGEDfhdZMo5eDE28yS_e9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:5c:9f:df:e0:46:9b:0b:4e:45:3e:d2:f0:dd:60:18:09:11:
21:ce:31:b0:35:11:cb:1e:b2:5e:c3:ab:9b:43:05:11:8e:ab:
7e:68:2f:08:07:7b:1f:4e:49:81:71:b4:33:7e:d7:8c:70:bf:
00:2f:97:d3:96:83:14:2d:ce:d6:53:e4:5b:81:c3:8f:ff:aa:
16:d0:ef:e2:96:16:4c:69:d3:7b:d1:40:cd:8c:bb:94:5f:ca:
0b:b7:6c:9a:98:21:ef:5f:bd:a8:21:90:88:18:cd:1d:28:d2:
75:ab:4e:17:f2:96:c8:cb:b8:e3:d3:13:23:ef:e1:db:20:84:
98:aa:1e:5f:19:8d:e8:fd:3d:f5:b6:5a:6b:03:50:3a:3c:67:
ce:f3:3c:c3:aa:14:2f:ab:79:1c:84:ce:df:2e:0c:04:6c:07:
48:7b:b8:09:3c:65:87:d1:c2:a7:4b:c4:6f:de:34:8f:6b:b0:
3c:4e:bd:98:2d:68:16:47:92:b0:13:b1:7b:50:98:2c:9e:76:
be:3d:d3:c8:09:8b:af:21:25:8a:49:62:d7:ff:2b:8e:79:c6:
1b:06:80:f2:54:e5:fd:44:c7:a2:85:e9:45:12:bb:6c:09:39:
13:59:63:7d:cb:2c:5e:9a:0f:7c:36:74:f4:3f:3b:4d:08:49:
33:da:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:11:06 2025 by rpki-client