Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rs7WvVyBW2kGA7OiAe2ziFp4rQ4.roa
File: rs7WvVyBW2kGA7OiAe2ziFp4rQ4.roa (raw, json)
Hash identifier: 065iLw8R81ziCeRS0TP+SWvhzJatoWpXKT4+1Ule8C0=
Subject key identifier: AE:CE:D6:BD:5C:81:5B:69:06:03:B3:A2:01:ED:B3:88:5A:78:AD:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E4F157CA1F6A9186B819CEB5ABB2F0F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rs7WvVyBW2kGA7OiAe2ziFp4rQ4.roa
Signing time: Wed 15 Mar 2023 11:04:27 +0000
ROA not before: Wed 15 Mar 2023 11:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:e4f1:632/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:f1:57:ca:1f:6a:91:86:b8:19:ce:b5:ab:b2:f0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 11:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeced6bd5c815b690603b3a201edb3885a78ad0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:98:0f:83:a5:23:eb:b8:50:30:0d:f3:9d:
80:eb:b6:3b:5b:6a:c6:f5:db:ae:f7:0b:41:dd:34:
7d:a0:2b:5d:38:80:cb:17:6f:a9:5d:c0:b0:de:f0:
8f:b2:16:d4:75:c4:42:f8:ee:9e:04:1a:ee:f7:51:
4a:94:55:c9:df:e0:87:1f:ca:a7:63:c3:ef:2f:6b:
f6:1f:f8:97:23:a2:3f:e1:30:bb:48:84:a0:b2:41:
7c:37:8e:82:a7:34:09:ca:db:88:fe:c7:b4:d5:3d:
a1:ec:d3:29:3d:d3:f8:63:43:f2:52:8c:2e:0f:0c:
7c:04:de:d7:75:5e:91:b5:34:67:fb:da:fa:69:c5:
b1:08:5f:d6:63:0c:45:ab:c3:cb:fc:1e:6a:03:d1:
c4:00:fc:ff:62:9b:bf:f3:31:a6:ef:f4:5a:5a:6c:
78:63:3a:5c:2c:9c:1a:85:44:90:a2:c5:0d:19:f8:
97:92:80:7e:62:82:6b:6d:0c:53:57:ad:c2:09:4f:
bb:74:61:2f:83:61:f4:0b:bc:d9:c0:63:27:5a:60:
51:a1:77:eb:2a:71:e7:83:61:56:9b:db:f4:c3:25:
92:ce:fa:27:6c:8e:7e:2d:53:58:9c:55:d1:9c:af:
c0:5f:ea:99:2e:15:cd:a3:e6:a6:ae:e6:06:f4:3b:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CE:D6:BD:5C:81:5B:69:06:03:B3:A2:01:ED:B3:88:5A:78:AD:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rs7WvVyBW2kGA7OiAe2ziFp4rQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:ec:17:33:d5:c9:a4:f5:2a:83:01:58:66:49:de:35:be:2c:
35:1a:3f:91:80:f3:03:a4:38:42:5f:89:97:f5:3b:cb:02:c7:
8e:1e:1e:5c:5b:fe:f2:02:8a:59:f5:10:3a:1b:21:d7:66:cf:
2e:67:49:27:01:14:1e:82:a5:f3:60:f1:3b:f1:52:27:f0:2c:
91:9c:34:61:e9:8b:06:21:90:8f:b8:a7:a1:7e:90:02:63:79:
87:b4:be:63:1f:f2:c7:24:4b:1c:61:a4:c5:f4:bb:f9:35:4a:
52:14:17:a0:59:35:a6:d5:7e:22:df:f1:84:01:5c:5c:b7:7a:
f1:c4:a1:57:91:bc:58:0c:4b:0b:6a:ef:2c:f8:e7:dc:64:01:
b8:9b:9b:39:8c:ac:cb:ac:3d:55:c1:81:e4:16:b9:ee:54:fa:
d1:68:5b:ef:36:31:4f:de:16:4c:5c:4f:a8:67:e8:a3:98:d6:
58:8a:59:7b:a6:1a:af:07:3b:c0:20:ae:04:40:5c:b4:00:b6:
29:64:8e:3e:45:ac:3c:be:40:8b:58:a7:b1:3c:5c:b8:10:0d:
e4:6e:9a:30:65:be:1a:14:fc:6a:f9:26:9e:99:81:f2:f0:5a:
68:71:53:74:d9:47:3c:e5:8c:5a:22:cd:02:83:cc:ea:c7:2b:
43:76:f7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:26 2025 by rpki-client