Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R7cJ7CsIddrR3Q2q5WNtVX2wOgM.roa
File: R7cJ7CsIddrR3Q2q5WNtVX2wOgM.roa (raw, json)
Hash identifier: mvpR13llL1OX3QECl3XYzsCXlzXk8e091nFffCbx540=
Subject key identifier: 47:B7:09:EC:2B:08:75:DA:D1:DD:0D:AA:E5:63:6D:55:7D:B0:3A:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A09372D73C6C19C6A477E3808B6BBF870
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R7cJ7CsIddrR3Q2q5WNtVX2wOgM.roa
Signing time: Fri 18 Aug 2023 15:15:25 +0000
ROA not before: Fri 18 Aug 2023 15:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:37:2d:73:c6:c1:9c:6a:47:7e:38:08:b6:bb:f8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 15:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47b709ec2b0875dad1dd0daae5636d557db03a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:bc:12:d9:c6:81:f4:d0:18:44:1c:26:9a:
7c:7b:24:d3:72:62:45:23:1b:f2:34:fa:33:6c:34:
fe:ce:24:58:e3:d7:74:f2:73:42:d3:47:7a:0a:83:
73:7b:47:d7:1d:ac:92:87:5d:eb:35:d7:03:34:5f:
3c:31:7c:bb:02:49:1d:a4:54:30:82:d0:bb:f7:60:
2f:24:4e:58:b4:0e:ee:d6:73:e7:97:cb:d7:dd:4b:
38:ad:fc:a3:7b:10:64:b1:f0:1d:21:14:82:ed:9c:
95:3b:86:f6:f2:75:c5:43:5b:d6:36:2c:07:b6:af:
bd:4d:43:79:9f:04:d9:c9:ad:cc:60:6c:9c:a1:25:
10:0d:d1:0d:a9:14:32:0a:52:3a:12:3e:31:1e:5e:
cc:82:1f:45:e7:8e:66:fc:d9:ff:ec:b8:c3:22:d8:
cc:00:b4:d4:c6:d1:47:52:26:e7:19:a2:32:0a:1b:
66:a1:db:e2:4a:69:f6:25:7c:b7:e2:6d:40:9c:9c:
47:12:1e:52:00:b0:2d:69:81:70:37:cf:80:ba:4f:
d5:90:01:90:ce:ae:de:96:a5:6a:a3:53:ce:79:8f:
99:7e:60:bd:93:0a:32:96:a5:d4:16:0f:2d:ce:ec:
4b:bb:21:96:b0:d8:7e:fc:56:11:f1:36:bf:dd:66:
f2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B7:09:EC:2B:08:75:DA:D1:DD:0D:AA:E5:63:6D:55:7D:B0:3A:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R7cJ7CsIddrR3Q2q5WNtVX2wOgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:77:c0:39:e9:71:13:18:d8:65:9e:ef:24:5c:30:eb:43:ea:
2e:fb:a0:35:e2:01:5d:e1:d4:09:3e:f3:2f:9d:9b:52:48:a6:
d9:85:a4:35:8d:b9:eb:e9:ea:8e:00:a9:82:28:51:e3:32:99:
7c:3e:ba:0c:84:90:99:37:0f:a3:21:71:d3:42:35:48:fd:c8:
76:50:54:dc:a4:10:09:97:3e:01:2f:0e:ae:be:d2:37:29:66:
a2:b7:c8:46:47:2d:34:f3:26:b9:f4:e7:cb:47:19:79:18:5a:
3c:f3:30:0a:98:c3:e3:14:79:2d:3e:12:42:d1:c2:8a:58:4b:
00:d2:94:63:e9:d6:52:ef:c2:35:f0:3c:e6:30:3e:31:6e:2b:
5b:71:ea:1f:be:31:5a:ec:a7:89:ff:29:aa:0a:d3:0c:a2:54:
bd:e9:52:fe:16:14:35:4d:bc:c8:e6:7c:50:29:0c:82:72:71:
19:b5:52:bc:18:e5:8f:c0:85:b1:67:b0:b8:af:e0:36:32:2b:
78:2c:7c:0f:11:87:f9:cc:7d:e2:be:37:ad:c1:00:2a:37:bf:
39:bc:d9:d9:a0:82:80:ca:d8:1d:94:1e:ec:a1:99:62:82:78:
e5:6d:a0:5a:c5:02:ad:d6:0c:a2:bd:a5:46:a7:b5:fe:19:da:
b0:a5:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:23:32 2025 by rpki-client