Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k7MSmr2MZBcXnAaAW87ecGz3uQo.roa
File: k7MSmr2MZBcXnAaAW87ecGz3uQo.roa (raw, json)
Hash identifier: 8aF0oOm0VvUK6oaMhq7PAkz+VB9EHsd4JEpI4HZNJCQ=
Subject key identifier: 93:B3:12:9A:BD:8C:64:17:17:9C:06:80:5B:CE:DE:70:6C:F7:B9:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01830C0ADF80195FCC22571EDE630A2D1581
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k7MSmr2MZBcXnAaAW87ecGz3uQo.roa
Signing time: Mon 05 Sep 2022 05:06:22 +0000
ROA not before: Mon 05 Sep 2022 05:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:183:c0a:5500/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:0a:df:80:19:5f:cc:22:57:1e:de:63:0a:2d:15:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 5 05:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93b3129abd8c6417179c06805bcede706cf7b90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:1d:9f:6e:e6:84:98:91:54:a8:2b:26:e3:
3b:be:64:4d:e7:34:d2:64:50:21:47:7b:1d:87:3b:
7c:b3:0c:fd:e0:da:c2:b3:1e:42:e5:44:50:78:30:
b8:0b:2e:3d:fc:cb:a7:2a:a0:7a:c5:16:55:9c:41:
63:06:8b:1a:c7:8f:0b:34:96:13:1a:e9:dc:da:b3:
c5:df:37:ad:ae:5b:c8:3b:05:f6:b1:74:43:9f:34:
fa:ee:09:c9:67:ff:8a:dd:f3:bc:42:e9:b1:05:47:
71:88:3f:5b:f9:f2:00:d2:7b:de:5c:1d:c7:23:ee:
75:29:9a:27:27:09:c9:1b:44:94:dc:2a:5b:ed:88:
6e:da:e6:45:40:5a:df:0e:88:5b:57:61:ec:be:69:
83:23:21:c1:c2:5d:43:fd:7b:a2:49:8d:cb:b6:21:
be:09:b8:2e:6e:e3:cf:64:61:30:51:ee:f1:82:58:
51:2b:2a:bf:65:b4:29:4f:54:3a:81:42:72:9b:d1:
03:3f:ab:7c:5d:a2:b0:fa:d5:c1:1c:55:2b:1a:80:
3b:c3:ce:cd:db:c7:9d:f9:7d:14:e1:4d:db:a4:c4:
9e:f2:2d:86:6e:f1:ca:98:a4:18:4d:1e:e0:c6:ff:
33:ff:11:81:ba:ee:2d:eb:e2:f0:91:3d:0e:7c:75:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B3:12:9A:BD:8C:64:17:17:9C:06:80:5B:CE:DE:70:6C:F7:B9:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k7MSmr2MZBcXnAaAW87ecGz3uQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:a1:72:eb:93:58:87:53:5c:bc:10:51:17:3f:4e:9c:05:32:
49:2b:95:ec:9a:bf:d2:19:dc:5f:e4:46:4f:38:1e:31:33:37:
7d:b4:9a:51:75:7e:ee:d5:31:c1:01:5d:43:72:3a:c4:fa:86:
02:de:8b:6a:cd:85:eb:69:7c:36:0b:b3:26:27:4e:f5:9e:ae:
80:40:cb:ed:ff:98:6d:a7:b2:2d:cb:1e:13:61:b5:cc:00:87:
0b:3a:6a:f9:ee:92:7e:40:cf:62:be:5c:d7:dd:87:93:16:d7:
56:c6:07:ce:34:a8:4f:ca:cf:d9:bc:d3:e8:92:5a:34:9b:66:
44:f2:d2:1e:ae:de:51:c3:36:d7:d9:ce:e6:83:a3:0f:40:54:
4a:8a:e1:2c:5e:48:95:de:b8:ee:ef:ba:6e:6f:ef:76:33:f5:
ed:b5:f0:1a:ca:06:ab:f7:74:25:d4:8c:99:ad:80:ce:43:38:
4a:53:63:84:d7:06:e7:d8:fc:32:04:a8:b1:51:11:e2:b0:c2:
fa:09:f6:bd:1c:37:32:19:9a:a1:ee:90:d2:97:0e:99:8e:ba:
6a:f7:3b:b6:75:9d:91:bf:65:43:d3:f8:f0:79:f8:da:e7:80:
33:2f:57:5b:5e:21:c7:d9:0f:20:4b:58:ed:81:16:88:0b:4b:
23:ac:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:09 2025 by rpki-client