Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ee7RHh9UV6FA-wLCB6qaUFpCbo0.roa
File: ee7RHh9UV6FA-wLCB6qaUFpCbo0.roa (raw, json)
Hash identifier: r2O3mE5Et+OeeV/Z/DYmvtxa3JLfKAZsNSVU29BgyfE=
Subject key identifier: 79:EE:D1:1E:1F:54:57:A1:40:FB:02:C2:07:AA:9A:50:5A:42:6E:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B1DB0F789F73309FD5082083085432F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ee7RHh9UV6FA-wLCB6qaUFpCbo0.roa
Signing time: Mon 12 Jun 2023 23:05:03 +0000
ROA not before: Mon 12 Jun 2023 23:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:b1da:62e2/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b1:db:0f:78:9f:73:30:9f:d5:08:20:83:08:54:32:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 23:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79eed11e1f5457a140fb02c207aa9a505a426e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:9e:08:af:e5:82:93:fe:a4:65:17:9f:8b:
36:c3:33:58:78:0f:1f:ca:8c:25:eb:21:5f:67:68:
39:e8:7b:59:79:d4:1b:0a:6e:81:7f:d7:e8:5e:04:
91:a4:2a:f7:95:05:3d:f5:d6:11:d8:7d:43:6a:e6:
d8:0b:f3:e1:1a:f8:71:e9:aa:39:fc:6f:33:06:e3:
19:4a:4f:7a:61:01:70:0b:cd:2d:fe:ee:28:9b:7e:
72:40:d5:99:d5:93:02:92:e2:6e:90:30:cd:a6:45:
06:f1:ab:5d:08:5c:37:9e:25:b8:68:a3:e3:1b:68:
63:55:18:82:13:2c:c9:a0:fa:f2:b1:9e:43:bb:c8:
97:65:29:6b:d3:59:25:f0:a0:45:44:31:26:ec:c9:
1c:a9:8c:9f:38:aa:86:f5:d4:7b:d4:b7:0c:49:bd:
a0:8c:e1:9e:5e:ce:58:67:c4:8e:1f:35:7f:b9:a9:
1f:3c:51:41:4f:19:7b:1b:a5:a2:be:7b:b2:86:d2:
de:01:27:81:28:d7:6b:d8:43:2a:95:50:6d:6d:a5:
81:60:0e:6b:17:af:f2:ed:33:09:ec:0a:54:00:40:
89:a4:69:4f:01:a7:4d:cb:de:cd:e4:de:90:77:52:
eb:8e:68:7b:bd:95:27:72:84:30:be:0d:40:fe:52:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EE:D1:1E:1F:54:57:A1:40:FB:02:C2:07:AA:9A:50:5A:42:6E:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ee7RHh9UV6FA-wLCB6qaUFpCbo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:f4:7d:14:65:9b:6b:17:63:bd:d1:c9:e6:fc:cd:e8:10:9a:
04:ed:d2:16:72:f7:00:bd:0d:b1:33:b1:75:3e:7f:69:e8:2f:
4b:b5:74:a0:79:77:43:ac:90:9a:19:4c:ba:a7:06:f2:4a:c8:
04:0e:4e:b0:36:a6:22:cc:19:c0:15:d0:ed:67:03:bb:6c:e8:
c2:67:f8:77:96:28:5d:d2:c2:8c:69:cd:d9:09:d6:33:8e:c5:
e1:50:47:85:0f:15:0e:e4:97:3f:66:bd:eb:d5:1c:fd:23:10:
cf:fe:fc:94:11:62:ae:90:b2:8d:a5:77:26:9e:1b:5a:86:e3:
43:4f:1b:43:c2:30:06:24:b3:b9:84:07:98:b0:b8:d5:87:51:
9d:7b:64:5a:ab:01:d9:82:bc:f8:e2:0d:af:7a:4e:37:02:40:
da:d8:60:d9:d6:c4:45:02:89:d0:e8:b7:30:dc:07:ac:c7:93:
7e:6d:ab:2c:6f:0f:18:1a:29:32:67:cd:d2:70:6c:38:1f:ac:
53:48:bf:f5:f7:6e:0e:20:9e:92:54:a0:50:23:f7:83:2b:fc:
3e:51:76:1c:fe:8b:d3:e4:0c:ee:5e:04:7e:33:3f:58:79:71:
75:24:a1:42:ba:39:45:ac:59:38:88:e6:84:f3:8b:c9:96:3c:
5c:72:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:51 2025 by rpki-client