Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e7A3w1YATuwbq-l29MOyUQyqBfM.roa
File: e7A3w1YATuwbq-l29MOyUQyqBfM.roa (raw, json)
Hash identifier: umVX0cCM+vl3CKCBVc5trDl8J4OQZMZQCHKJ0cygHps=
Subject key identifier: 7B:B0:37:C3:56:00:4E:EC:1B:AB:E9:76:F4:C3:B2:51:0C:AA:05:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886A33E1A4587C84F442F06583DAEB1B0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e7A3w1YATuwbq-l29MOyUQyqBfM.roa
Signing time: Tue 30 May 2023 01:09:24 +0000
ROA not before: Tue 30 May 2023 01:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6a:33:e1:a4:58:7c:84:f4:42:f0:65:83:da:eb:1b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 01:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bb037c356004eec1babe976f4c3b2510caa05f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:81:f2:f4:03:34:33:02:2d:b5:45:37:99:
7d:b2:4b:f9:c9:53:e4:f0:a7:fc:0e:02:26:3a:c7:
2b:a0:5e:72:de:4c:94:4b:92:6c:24:ad:f7:2a:bd:
41:0d:06:ad:5e:f5:c1:05:38:b4:d8:fa:72:8a:07:
57:cb:5e:9d:18:24:c6:49:6b:8b:08:8e:6f:2a:d2:
6b:11:1e:b4:de:cc:da:f0:1a:43:52:40:8f:70:b2:
0f:c4:ee:c8:c2:d6:fb:7d:8c:9f:eb:37:42:53:b5:
5e:ab:e5:c0:4f:1d:33:44:6f:87:6b:cf:16:d1:77:
3b:2b:f9:03:ba:4f:72:74:37:47:e4:90:f6:12:8e:
9a:5d:44:a7:df:84:18:75:b5:ed:21:c6:de:48:ca:
0c:0b:b0:42:ea:a2:68:b0:12:9b:12:92:3c:a4:46:
f9:d0:b6:40:34:96:6e:81:43:6e:81:28:f1:8c:da:
89:a1:72:19:ed:0e:2e:37:9c:51:b6:4d:d0:b8:6d:
15:7b:ca:90:0d:49:ef:a8:d4:bd:e3:a3:2d:16:d4:
63:fe:2b:85:a3:54:e4:2d:22:f3:9f:b6:84:5b:da:
f0:bd:bc:b6:46:cc:bc:68:4c:be:8c:90:40:1e:56:
0f:07:f3:5b:3a:1b:17:94:4f:f4:47:73:9f:78:8f:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:37:C3:56:00:4E:EC:1B:AB:E9:76:F4:C3:B2:51:0C:AA:05:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e7A3w1YATuwbq-l29MOyUQyqBfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:95:21:57:75:c5:3f:c8:26:c3:c4:87:35:7e:1a:dc:21:51:
c1:bd:96:c3:3d:86:01:a3:1a:c7:64:13:bb:41:5f:50:07:b2:
d6:5f:36:01:f1:4d:aa:30:55:d5:d1:21:c2:d1:ee:51:c7:26:
aa:26:1c:d0:bf:aa:69:62:c5:fc:97:c7:f9:ea:80:eb:dd:f0:
93:d1:c5:52:b6:2b:f1:9d:2d:bd:17:b8:48:12:96:1b:11:78:
0b:3a:d5:da:ca:e0:95:8b:36:c0:4f:ea:32:95:3a:39:04:59:
37:f5:63:e7:83:08:12:9d:87:1c:1f:30:37:1f:b1:29:3b:c8:
cf:97:72:86:0f:c6:2c:8b:69:c6:d7:84:29:71:a9:b3:74:ad:
89:ca:70:54:95:e1:cb:bb:f5:91:b1:34:96:16:d0:d8:eb:08:
a2:ad:24:82:79:43:fa:e4:a5:dd:90:9f:73:d3:12:40:8c:7d:
31:86:e1:39:5b:13:d1:6a:cc:a9:60:92:4c:d5:52:6e:25:c2:
c8:1f:9b:9d:fe:7c:bc:ea:4c:cc:87:60:c5:f8:eb:9f:67:6c:
a3:4a:84:c1:0a:43:78:54:29:59:37:4f:9c:21:fe:d8:a1:94:
85:ce:e9:31:04:03:cc:57:e3:78:02:37:a3:97:39:b3:f2:da:
25:a6:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:36:39 2025 by rpki-client