Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a2-7_J_8wOfgZY7nHurK9ZQqVDQ.roa
File: a2-7_J_8wOfgZY7nHurK9ZQqVDQ.roa (raw, json)
Hash identifier: Pn7dN7MvT0Erk9FblXODhm8ZBEl0A5tshxbRYD6IMjk=
Subject key identifier: 6B:6F:BB:FC:9F:FC:C0:E7:E0:65:8E:E7:1E:EA:CA:F5:94:2A:54:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183775C68A8F6FDE35437EDC7A7D86BBE5E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a2-7_J_8wOfgZY7nHurK9ZQqVDQ.roa
Signing time: Mon 26 Sep 2022 01:14:48 +0000
ROA not before: Mon 26 Sep 2022 01:14:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:77:5c:68:a8:f6:fd:e3:54:37:ed:c7:a7:d8:6b:be:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 26 01:14:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b6fbbfc9ffcc0e7e0658ee71eeacaf5942a5434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:ca:8d:4a:da:ae:75:61:7d:17:7d:32:30:
a2:76:90:84:00:19:f7:93:c4:04:d7:e6:4b:43:c5:
f4:ee:93:1a:4f:98:31:d1:71:30:1c:01:96:44:41:
46:35:8e:ad:d8:bd:be:5e:51:63:41:a1:f2:db:b2:
3d:ba:1b:40:50:94:3a:f1:e8:ed:0e:32:ca:b5:b0:
3c:87:cd:74:18:9a:80:5a:63:a4:4c:74:6d:af:d8:
f2:0d:d5:54:ca:bc:c9:23:09:19:17:c2:eb:d4:a7:
ee:db:0d:d9:64:eb:d5:03:90:ee:c1:79:85:14:10:
e6:8d:f5:d1:6c:49:bc:b5:4f:b2:6d:b3:19:3d:ea:
50:52:2e:1f:5d:32:91:5b:a3:33:ca:d4:65:cf:67:
e5:5b:d8:18:40:07:5a:1c:a3:92:f2:1c:75:61:55:
a5:98:91:25:14:61:fd:f4:e1:7f:5b:bf:7e:31:81:
4f:2c:dd:8d:99:e6:1e:77:a9:11:d0:86:2c:ae:62:
3b:a0:56:c7:5e:ee:07:83:d7:e4:d9:23:06:aa:b4:
b8:79:ad:bc:87:33:31:58:75:bc:0c:92:c7:3d:07:
e2:36:b4:e5:a6:3d:f6:59:b7:69:1b:8a:6d:f6:6e:
02:9e:09:67:ec:bf:72:e7:c3:06:a7:51:fa:11:fc:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6F:BB:FC:9F:FC:C0:E7:E0:65:8E:E7:1E:EA:CA:F5:94:2A:54:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a2-7_J_8wOfgZY7nHurK9ZQqVDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:88:42:9a:af:de:1b:2a:91:5b:44:55:01:18:68:6f:7a:57:
4a:31:bb:f8:8f:a9:fb:6c:86:74:d5:f6:06:d8:e1:2a:b9:a1:
30:ff:45:3a:40:b9:9e:b7:cb:81:93:35:1f:c0:8a:ce:5c:e6:
77:5e:81:a5:e4:3e:24:b6:b4:ed:1c:5d:8f:a0:9d:eb:fc:9f:
70:75:a6:3f:72:d0:21:29:23:c7:73:0b:cf:8f:49:b5:05:ba:
69:7f:a6:a5:f9:f7:52:d7:a3:76:96:dd:55:c4:ca:9f:d1:52:
27:bc:2a:71:ff:ba:ee:ee:cd:f8:64:b2:c2:9a:41:8e:21:a1:
ad:ee:57:7d:b3:00:dc:29:8b:d5:b8:1c:d2:36:7f:0f:b3:60:
c6:2e:87:60:0d:23:69:b0:99:26:82:2b:ca:5b:00:d5:24:e0:
ac:03:1f:44:65:94:00:dd:d9:57:66:04:a7:c8:6e:e0:94:00:
f7:9e:95:1d:af:10:1c:a6:c2:68:2c:4c:f4:b5:30:33:b5:97:
66:b9:82:a2:93:a1:36:2c:e1:22:cc:e2:68:05:13:a2:f0:c0:
fc:fc:83:8d:3c:35:6d:ea:fe:ee:b6:16:30:43:98:17:52:fc:
6e:83:85:32:c1:0d:a3:83:d1:4e:73:2b:36:db:88:75:79:b2:
85:e8:92:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:56:05 2025 by rpki-client