Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p7x66-W9FN3XaQfIvlRaio8jzbg.roa
File: p7x66-W9FN3XaQfIvlRaio8jzbg.roa (raw, json)
Hash identifier: iEm3bHgDv0aT0oHZD7SHf97/PiVuHFqL/tNTnhPxH6o=
Subject key identifier: A7:BC:7A:EB:E5:BD:14:DD:D7:69:07:C8:BE:54:5A:8A:8F:23:CD:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6EC72CF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p7x66-W9FN3XaQfIvlRaio8jzbg.roa
Signing time: Tue 01 Mar 2022 15:07:35 +0000
ROA not before: Tue 01 Mar 2022 15:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858546929 (0x6ec72cf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 15:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7bc7aebe5bd14ddd76907c8be545a8a8f23cdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:90:bd:7c:2c:09:ec:ad:25:43:6d:6b:6e:
18:cb:8d:90:ec:fb:fc:dd:21:c8:87:92:8f:db:90:
fa:0b:6d:06:f2:16:f5:4c:4e:f5:62:20:3f:58:dd:
4a:9e:2a:61:09:c6:e0:72:69:1b:98:23:ff:35:72:
25:48:f6:04:2c:1b:e6:55:2a:de:7f:73:0f:4c:22:
16:09:0f:ae:c9:a3:00:9d:57:cc:fe:cb:1a:4a:f1:
b7:b5:5f:11:f5:a7:a4:82:40:25:59:06:65:94:a0:
ea:ef:5e:64:d4:9e:4a:0c:c7:55:00:5b:71:3f:c4:
49:ef:d4:e1:d7:e1:eb:bc:12:29:63:22:15:27:7e:
c6:4c:b5:d6:c2:7e:ef:f5:93:60:ab:db:31:93:67:
3f:88:29:a1:1f:2e:27:e2:67:04:85:49:f4:29:2c:
bb:70:32:da:31:6b:92:68:42:26:e9:c4:c7:6a:f4:
66:66:fb:51:18:e1:e9:dc:0d:c0:0d:a4:ef:07:08:
c1:6b:bc:1e:c1:03:7a:18:06:81:26:56:03:86:82:
20:7e:49:8c:c5:b0:85:77:62:0c:7c:4d:1a:1b:78:
e4:03:5a:ff:42:e2:84:63:a8:b2:25:17:d9:2d:dd:
a5:4d:26:a7:b9:ef:89:5f:f0:b9:3b:91:e4:c6:45:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BC:7A:EB:E5:BD:14:DD:D7:69:07:C8:BE:54:5A:8A:8F:23:CD:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p7x66-W9FN3XaQfIvlRaio8jzbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:3b:7b:62:ef:f2:79:52:80:cc:19:07:67:02:e4:9b:46:f1:
23:25:51:ac:f7:cf:d7:2c:07:09:ab:c5:bc:5f:00:3c:35:c7:
12:26:ac:f3:5e:fd:a7:35:1f:d9:8f:4b:ec:00:ba:8b:d6:99:
0c:7b:f6:e2:2a:ca:d9:8f:c0:42:b6:32:4b:90:36:a1:d5:95:
e7:80:c5:8c:7d:47:ef:0d:25:79:22:77:c2:83:d2:af:16:b2:
4c:f5:40:4f:13:7b:f1:74:95:0e:ea:41:c0:af:51:33:4f:e7:
0e:f1:41:0f:bc:35:a1:d0:ee:49:a4:a7:3b:4c:4d:39:7a:fe:
0f:4b:f1:a9:e6:a1:b8:fe:33:22:b1:00:32:3f:46:d4:b1:80:
54:83:ce:51:ef:1d:b9:39:ce:32:5d:37:33:5e:f1:21:db:1c:
f7:29:47:b8:12:a1:e8:28:d0:b2:30:bd:99:8b:9e:2f:1a:5e:
50:76:75:79:42:f4:d4:08:b1:6a:64:60:c0:35:b8:f7:cf:7e:
e0:66:55:e5:ce:f5:df:6e:05:76:5c:7f:89:af:27:38:b6:a0:
06:c1:f1:e5:d0:76:22:47:ab:f3:68:52:eb:53:b6:ec:e5:95:
38:3b:2f:4d:84:83:f9:a6:f4:4d:a8:51:02:19:1e:6d:21:4d:
6e:e9:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:40:32 2025 by rpki-client