Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R7B9A7KjeiKSYnRc_sq7OOrG5Ic.roa
File: R7B9A7KjeiKSYnRc_sq7OOrG5Ic.roa (raw, json)
Hash identifier: fgmBIN5yyV1iFiRL02lFWNapsrH7t0m5a5yyp0sG6Tc=
Subject key identifier: 47:B0:7D:03:B2:A3:7A:22:92:62:74:5C:FE:CA:BB:38:EA:C6:E4:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018930791C7C7A5AE1D84D908AA431A0929B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R7B9A7KjeiKSYnRc_sq7OOrG5Ic.roa
Signing time: Fri 07 Jul 2023 13:09:50 +0000
ROA not before: Fri 07 Jul 2023 13:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:79:1c:7c:7a:5a:e1:d8:4d:90:8a:a4:31:a0:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 13:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47b07d03b2a37a229262745cfecabb38eac6e487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:eb:20:77:47:7d:42:af:f9:15:0e:3e:b8:
1a:0f:62:d1:06:6b:62:4e:0c:25:0f:1f:f6:46:e9:
2a:2f:91:6e:a9:69:49:70:13:fc:42:ef:f9:62:5c:
64:fc:27:a9:9a:29:3f:33:5a:aa:34:cf:f9:b0:cf:
37:a8:b2:ef:ec:78:ec:be:4a:89:75:ae:54:2c:7d:
c2:1f:2e:fc:e9:34:d5:b3:75:d9:ae:07:05:a2:18:
ff:84:0b:e9:90:f5:11:61:e2:a7:9c:59:f6:99:4d:
41:0d:6a:85:09:26:bd:79:9b:8b:1c:ca:33:da:6c:
8d:3e:4b:af:b4:f0:41:5e:21:6d:e7:3b:66:6d:91:
b6:7b:1d:cb:09:1b:ca:67:3a:40:42:11:67:e9:86:
a5:22:4e:5f:ee:41:cf:0f:25:25:9f:db:1f:09:15:
0d:0b:d1:16:8f:34:19:4e:07:c3:12:0f:75:9c:09:
e0:55:ce:d8:56:c1:9c:75:94:6a:ea:45:ba:e1:42:
5a:14:3d:12:96:5d:46:57:1b:d7:a1:fd:67:e7:a9:
83:5c:94:33:27:51:b0:39:a3:86:1e:ca:84:39:8b:
c9:13:62:97:46:be:74:43:84:df:2c:c2:63:e0:1f:
1c:3e:fc:0c:94:3f:74:2e:91:43:53:23:30:70:b6:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:7D:03:B2:A3:7A:22:92:62:74:5C:FE:CA:BB:38:EA:C6:E4:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R7B9A7KjeiKSYnRc_sq7OOrG5Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:d1:87:33:84:56:f5:02:2e:a3:3e:28:53:3a:f6:da:e5:1b:
d0:b9:2c:f3:f4:b6:90:4b:04:f4:b8:4f:68:5b:33:9a:bc:bf:
10:0b:51:10:74:91:95:97:3b:c6:49:18:6c:4e:46:9d:ac:d7:
ab:cd:ef:98:eb:01:dc:06:c2:3b:87:9c:e7:ed:d6:0a:8f:bd:
0e:08:13:d1:fd:89:34:3a:76:28:08:2c:ef:39:b8:f6:28:f3:
32:83:3a:9d:5b:db:d0:f6:9c:2b:7e:c4:51:a7:7f:45:82:f3:
6c:ac:ad:c3:2e:a6:f5:dd:2a:26:fb:ed:3c:6a:f0:f6:65:39:
27:16:ab:14:d4:a2:2e:bd:be:5a:2b:7d:08:48:5c:6a:c1:8e:
c9:aa:7b:a5:a0:3c:12:e6:19:ef:3c:17:51:43:f4:95:72:eb:
ac:b2:54:6d:23:52:b7:db:e4:43:a0:77:69:bd:35:e3:aa:aa:
62:6c:0d:d4:9c:0d:f8:29:b3:a9:40:92:f6:19:2f:10:ea:12:
96:0d:ba:c5:df:7a:49:64:d0:e1:65:47:05:2f:e4:0f:35:30:
73:7d:5c:d3:6f:7d:ec:c1:a3:a1:9a:80:39:9c:13:cd:82:d3:
64:42:01:16:0c:b1:6c:de:af:73:83:cc:ea:85:d2:13:f3:4f:
90:f4:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:09 2025 by rpki-client