Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c7jdxYwYRRwts0EBWOX2oP3q8y0.roa
File: c7jdxYwYRRwts0EBWOX2oP3q8y0.roa (raw, json)
Hash identifier: o/xRWBiIcVPBUmou4+dLWlteMJ6JprqD3sBtpVuvfsw=
Subject key identifier: 73:B8:DD:C5:8C:18:45:1C:2D:B3:41:01:58:E5:F6:A0:FD:EA:F3:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AC4CB8E9DF9D9F7508198900EC1FE5CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c7jdxYwYRRwts0EBWOX2oP3q8y0.roa
Signing time: Sun 23 Apr 2023 04:08:41 +0000
ROA not before: Sun 23 Apr 2023 04:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ac:4c:b8:e9:df:9d:9f:75:08:19:89:00:ec:1f:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 04:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73b8ddc58c18451c2db3410158e5f6a0fdeaf32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d1:85:28:3e:49:5c:1f:7a:4c:fe:c2:b4:d5:
16:c2:29:bd:7a:03:e6:95:af:6f:65:9f:21:57:b1:
ce:ff:ab:13:ac:10:c0:ca:a8:7d:5d:f5:eb:72:d8:
80:c7:b8:29:7e:4a:1b:ae:cb:2e:8d:8b:10:f3:d8:
cb:f4:bd:db:4d:c0:e4:7e:61:b5:b0:63:1b:72:bf:
3e:68:df:16:d7:7b:40:48:dc:c5:2c:9e:1f:f8:20:
0c:c6:b7:ec:91:d4:f2:d8:bc:7a:a4:f1:55:0a:24:
71:87:37:8b:bb:69:be:7c:70:be:84:91:16:f3:4f:
8a:74:79:e5:bb:f6:e2:ce:81:f3:69:03:8e:8f:5d:
c4:4a:94:fe:5b:fc:d8:4f:f1:a3:50:84:44:2a:1e:
df:7e:df:3c:7c:c1:b9:07:b4:b9:52:63:41:01:4f:
96:6a:37:d1:5e:cc:04:43:16:e7:d7:57:b9:92:02:
7c:e8:4a:8e:c2:22:25:01:0b:9d:c8:84:48:cf:35:
9c:69:ed:ec:7d:3f:e0:d7:dc:c3:7a:e3:00:03:69:
73:65:49:ee:38:da:17:09:f5:ee:c2:62:f0:be:34:
69:f7:41:9a:d8:1a:02:f8:1c:14:72:16:5b:67:25:
2f:c6:84:71:65:1b:b1:99:06:64:b1:2e:d9:fe:83:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:DD:C5:8C:18:45:1C:2D:B3:41:01:58:E5:F6:A0:FD:EA:F3:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c7jdxYwYRRwts0EBWOX2oP3q8y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:2e:ec:8b:ab:f3:b4:b2:ce:48:e6:bc:26:6c:fa:99:8e:32:
15:1f:52:8f:d2:e6:85:cc:6b:29:30:ac:e4:be:49:64:e6:c2:
cf:43:3b:bb:a6:73:f2:55:bf:a5:7d:92:60:ce:81:1c:93:12:
cc:01:9f:04:ee:c7:1b:0b:b2:b0:cd:ae:8e:7c:40:c9:d1:fa:
25:6e:1e:c8:35:c8:fb:58:60:49:54:5b:99:e3:c1:6c:70:f5:
fe:70:3e:3e:b2:02:19:40:5f:d9:3b:cc:70:82:29:53:e9:37:
b6:67:81:b0:f8:f9:15:0b:1d:cb:48:9b:c9:12:b8:c6:0e:ca:
49:0e:72:bb:83:1d:18:79:c3:92:1c:d2:80:28:55:2f:7f:92:
ef:bd:af:ce:13:d4:f6:4b:80:8b:d6:83:b1:a7:f1:83:32:12:
5b:5b:60:54:be:8d:78:69:ab:f9:21:81:19:09:06:9d:8a:c8:
51:8e:9b:a8:74:14:1c:3d:48:c8:ae:97:91:ee:7f:db:f2:b9:
7e:ed:24:cd:fa:ef:14:50:69:26:97:5c:d0:3e:f3:bf:03:4e:
02:04:ec:83:5f:33:9f:8c:4a:c3:50:be:5f:49:47:26:30:71:
1f:c2:73:8c:68:f3:ee:d0:1a:d4:70:9f:1c:f8:6a:3e:8b:be:
18:d2:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:53:34 2025 by rpki-client