Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7zJZsYAtzDLI9ldPnGtC0hGrVGQ.roa
File: 7zJZsYAtzDLI9ldPnGtC0hGrVGQ.roa (raw, json)
Hash identifier: ttFhLfu2SL9Ya+0+PQFNFi8Q/T5EcwpU83A7dk9GKzk=
Subject key identifier: EF:32:59:B1:80:2D:CC:32:C8:F6:57:4F:9C:6B:42:D2:11:AB:54:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B413DB4866D15A310B8E9B5D0315E73E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7zJZsYAtzDLI9ldPnGtC0hGrVGQ.roa
Signing time: Sat 26 Nov 2022 13:15:10 +0000
ROA not before: Sat 26 Nov 2022 13:15:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b4:13:db:48:66:d1:5a:31:0b:8e:9b:5d:03:15:e7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 26 13:15:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef3259b1802dcc32c8f6574f9c6b42d211ab5464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:a3:f8:da:df:fc:d1:77:79:cb:c1:69:5d:
7f:58:21:51:77:45:56:26:ef:de:89:80:97:75:d0:
57:ca:27:0c:7a:6b:91:ff:23:19:15:00:00:b6:d5:
22:fb:93:1d:fa:7c:e5:f3:8d:7f:fc:96:6e:15:e9:
88:b7:ac:10:e8:89:50:79:33:cf:62:12:09:eb:d3:
16:a0:6d:d4:e6:0a:6c:0a:ee:5e:cd:c4:0b:1a:64:
e9:23:3f:ae:1e:89:a1:39:6e:0e:ac:01:7b:2c:12:
17:ca:24:66:19:b0:23:a7:14:1f:0c:ed:32:0d:b6:
47:35:cb:d7:ce:2e:05:fa:7d:c5:e9:6b:d7:9a:15:
8e:51:3f:7e:f1:0c:02:0b:b7:b1:5d:0e:40:d1:04:
16:b3:88:17:93:5c:c5:91:0c:9b:b1:d3:7f:85:53:
f9:b0:81:4e:4a:65:9f:2d:24:b7:c7:fd:0e:f4:d7:
2b:04:a3:53:0d:98:c1:0d:c6:b3:ed:de:b4:d5:07:
01:1f:50:a7:e6:d0:25:bb:63:94:b9:db:67:7f:7d:
f9:af:3e:b2:aa:b4:a0:2b:3f:8f:6b:2a:93:25:13:
b6:e7:b6:a5:55:10:17:35:57:d4:36:e1:82:3f:3b:
ea:75:f7:8b:00:51:59:c1:78:2d:30:ac:e8:5a:54:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:32:59:B1:80:2D:CC:32:C8:F6:57:4F:9C:6B:42:D2:11:AB:54:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7zJZsYAtzDLI9ldPnGtC0hGrVGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:de:c9:09:a3:2a:9f:4f:a2:3e:00:1e:28:46:0a:63:b3:8d:
0e:83:15:c4:51:3c:31:b5:64:0a:f9:82:32:68:27:d1:fd:a8:
e3:97:4f:aa:25:26:33:e6:2f:27:78:29:4d:7c:45:b2:fd:45:
58:83:5e:f5:a5:fa:5f:ab:22:79:30:50:2f:90:08:84:bb:a8:
6c:e1:5a:75:dc:2f:0c:70:e4:fb:50:1f:3f:d2:3e:1f:a4:f4:
f7:e8:cc:90:b4:90:4f:a2:a0:53:8b:cd:e4:ba:91:a7:54:10:
ae:26:9a:10:28:1f:8e:02:e9:eb:67:68:de:51:07:e4:e1:20:
4a:1e:a1:b7:90:b0:38:c3:d4:bd:8d:f4:b0:61:12:a2:e5:32:
a5:0b:ed:b0:b2:ad:9c:a8:84:f9:e4:97:39:b5:e7:5d:cc:bc:
d0:18:94:a5:d6:83:11:66:29:44:76:bb:61:66:f2:42:a0:ec:
ec:05:1f:68:99:35:b9:49:95:41:00:d7:b9:25:28:9f:1b:9d:
e4:87:2f:07:18:1b:de:f5:1f:0e:55:c6:26:ca:40:fc:b7:a4:
01:34:82:53:b2:0d:16:67:ef:1c:69:0d:39:23:d4:84:1d:fa:
6f:4a:08:45:41:ce:ee:29:4c:72:1f:0b:fe:e5:30:da:5c:92:
74:93:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:41:43 2025 by rpki-client