Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E_7NIkaACzd9SNiJamlu2WoOJC0.roa
File: E_7NIkaACzd9SNiJamlu2WoOJC0.roa (raw, json)
Hash identifier: T6y0XYOXVIXlv1R2UaKQ/5jXFKB/Jo31jYrrt5MQAcA=
Subject key identifier: 13:FE:CD:22:46:80:0B:37:7D:48:D8:89:6A:69:6E:D9:6A:0E:24:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 78DD1487
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E_7NIkaACzd9SNiJamlu2WoOJC0.roa
Signing time: Wed 06 Apr 2022 06:10:31 +0000
ROA not before: Wed 06 Apr 2022 06:10:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027754631 (0x78dd1487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 06:10:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13fecd2246800b377d48d8896a696ed96a0e242d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:c8:42:f8:14:aa:3e:64:0c:3d:40:3c:ba:
b4:e3:02:17:3c:c4:b7:38:b3:df:1d:d5:b5:07:b1:
18:87:12:56:73:62:4f:e5:76:e4:d2:84:98:59:1c:
36:ac:6f:59:73:a3:ad:a8:d9:07:90:8d:95:28:5f:
31:b1:69:98:dd:a2:5a:3c:86:53:4d:95:b9:58:66:
c8:8b:15:1a:c7:7c:6c:e3:71:d0:dd:08:bb:49:55:
bc:e6:96:e1:e8:d2:a9:cc:3a:22:63:20:02:c7:a3:
9c:e1:2b:f9:6a:aa:79:41:52:35:f9:b0:77:29:e6:
f7:3e:38:50:71:2d:89:be:34:92:17:3f:a9:6b:57:
16:be:af:e6:e1:d1:dd:53:2a:8f:ca:90:21:16:5d:
57:d7:62:ac:be:d2:a7:5e:bb:cd:a1:b4:b9:c4:ae:
cd:e9:22:9f:9e:86:a6:15:f4:d8:5f:10:6b:b4:b9:
8a:2b:59:c2:40:3a:dd:4a:8f:ff:d4:61:50:b8:45:
fc:56:67:1c:bc:37:a3:ad:3f:bc:89:10:90:64:bd:
01:0b:4c:7d:91:ff:11:4a:86:58:4e:a1:72:59:d9:
ef:41:85:ee:a4:8a:d7:26:9f:e8:f3:74:69:98:3d:
b6:a1:c8:14:3a:9b:3a:c8:95:31:72:ab:09:a4:d9:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:CD:22:46:80:0B:37:7D:48:D8:89:6A:69:6E:D9:6A:0E:24:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E_7NIkaACzd9SNiJamlu2WoOJC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:92:bc:06:64:8d:b5:c5:9f:f6:88:a4:0e:da:75:96:b1:25:
2b:ca:f7:25:e5:8b:58:07:3c:31:c8:75:37:de:a7:70:ca:27:
c6:9b:a7:c5:1c:ac:26:da:c3:78:d7:2f:96:6c:7f:76:4e:60:
7b:6d:dd:c8:50:93:d3:24:8a:96:31:fe:59:e6:46:24:53:68:
ed:72:c2:3f:bd:f7:40:51:3b:06:e5:08:0d:5f:28:56:55:8c:
97:12:0a:1a:06:6a:22:a7:5b:2a:1c:bb:1b:b9:88:72:d8:bc:
0a:26:ee:8a:02:24:5d:be:5f:8c:dd:6c:24:86:e7:d5:c0:90:
b2:d3:d2:1d:ba:8d:cb:05:29:47:f1:23:ad:f4:49:ca:4e:3e:
08:1a:7b:4a:50:ad:c1:70:2a:03:a6:33:63:34:66:cf:6c:01:
9f:5a:3c:92:d8:e4:94:87:96:46:ad:c5:e6:d3:2e:aa:97:1c:
10:e5:06:d1:4a:00:c4:42:d1:37:8b:74:a1:d0:16:e0:8b:89:
22:d5:fb:bc:1f:15:6b:4c:1e:38:d2:97:15:c7:52:c8:01:1c:
2a:21:29:0e:f5:83:09:84:c0:39:7d:f5:d3:84:c5:c5:95:b1:
e3:ef:5b:66:d0:27:c2:7c:69:3f:64:dd:09:5b:e4:e5:0e:d6:
3d:cd:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:21 2025 by rpki-client