Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7zb5ofL4N6FAuJ5Nagd_IkchqJE.roa
File: 7zb5ofL4N6FAuJ5Nagd_IkchqJE.roa (raw, json)
Hash identifier: wJAwTXuphjLnh02Dr/n+/lHx7EOq0kIV1eW/ny0ndk0=
Subject key identifier: EF:36:F9:A1:F2:F8:37:A1:40:B8:9E:4D:6A:07:7F:22:47:21:A8:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1F47971F0EFCD7744A8CC4C2871CBDA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7zb5ofL4N6FAuJ5Nagd_IkchqJE.roa
Signing time: Tue 22 Aug 2023 22:04:59 +0000
ROA not before: Tue 22 Aug 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:18a:1f46:dc13/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:47:97:1f:0e:fc:d7:74:4a:8c:c4:c2:87:1c:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef36f9a1f2f837a140b89e4d6a077f224721a891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:cb:fb:c6:3c:a6:a5:fc:ec:53:9d:fc:ec:
44:e2:01:4b:9a:b6:16:1c:37:24:da:07:61:9b:24:
88:e5:a4:18:2a:a8:04:ed:1e:6d:4b:f8:50:84:bc:
a6:12:e5:4e:d1:96:3e:d8:a9:b5:ec:ae:e3:b1:ac:
80:aa:32:22:8c:fd:32:30:dc:d0:db:0e:ea:dc:2e:
4c:c9:8d:c7:40:71:95:9e:f4:70:0e:bd:3c:20:9a:
71:9d:1f:1a:e4:6c:9f:80:5b:91:d8:fc:92:da:6a:
fe:77:b4:04:ab:a4:16:47:ce:13:74:f1:bf:ea:70:
c2:92:51:ff:52:fa:8a:33:4a:c2:01:60:67:d5:4b:
00:a3:b3:b6:62:fc:f5:97:d0:b4:00:06:1d:c5:da:
e0:c7:f9:b1:9b:b2:4f:a8:9c:18:fd:9b:df:d7:c6:
11:61:17:24:f6:1f:5f:31:f6:1c:5c:03:07:bc:34:
80:ab:7c:66:db:2f:64:f7:0b:7b:22:a6:4d:12:b3:
59:66:bb:50:66:21:1b:38:1f:5e:aa:12:bd:3d:bc:
b5:e0:a3:ce:fe:d6:dd:69:16:b5:a1:72:56:6e:12:
d5:2e:c6:b3:d2:f9:9a:39:16:cd:77:13:8d:b7:02:
22:45:99:13:de:b3:00:bf:e9:4a:b7:96:c9:a8:37:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:36:F9:A1:F2:F8:37:A1:40:B8:9E:4D:6A:07:7F:22:47:21:A8:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7zb5ofL4N6FAuJ5Nagd_IkchqJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:77:02:5e:d1:d6:e7:8a:49:7e:84:8f:aa:32:55:6d:f2:39:
ab:13:2e:e8:1f:2f:ed:7c:b0:01:ae:ea:db:1f:81:6d:0e:b9:
06:48:1e:12:3c:cc:f2:bb:5d:6c:2b:12:29:50:7e:2e:6c:f5:
ed:5e:bb:4a:45:ab:7d:d7:ce:8a:31:06:60:96:ce:6f:5e:a7:
a9:53:48:d3:8c:03:57:35:ec:0e:1b:fe:ee:2c:59:8b:9e:28:
d8:8d:28:fc:79:90:e1:68:24:9c:86:cc:06:8c:4f:a2:f3:f9:
a2:72:4e:43:76:a0:ae:84:db:39:c9:7b:3b:56:f8:13:18:66:
d8:cc:b2:04:16:50:a2:3a:24:ea:a2:d5:11:d8:e7:af:3b:b0:
27:bb:8d:63:9f:63:8a:ef:f0:44:bc:c6:23:79:cf:31:dd:0e:
3c:17:53:fd:49:9e:55:2c:ae:23:79:61:5a:42:df:1e:b1:30:
54:43:11:bd:62:74:d7:1c:cc:52:2d:48:6c:5a:7b:8e:a6:68:
cf:f0:d9:7d:a8:c5:35:61:c5:82:aa:a4:e0:d4:97:94:a8:89:
10:23:95:57:c8:5a:bc:e9:d7:eb:0e:74:20:a8:59:63:05:52:
b4:3c:00:6b:b7:3d:a9:1d:56:23:55:b4:4d:fc:82:47:20:6e:
69:a7:fc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:21 2025 by rpki-client