Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7BrnOWKq0L7DarqnMMckn9QE3TQ.roa
File: 7BrnOWKq0L7DarqnMMckn9QE3TQ.roa (raw, json)
Hash identifier: tkEcNW8ew5yNeyck7BWIAdER1FBJLmx2mGV0oNsK6jk=
Subject key identifier: EC:1A:E7:39:62:AA:D0:BE:C3:6A:BA:A7:30:C7:24:9F:D4:04:DD:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018945F1F2B2058C01AFF7CAFEAFC5E0D1E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7BrnOWKq0L7DarqnMMckn9QE3TQ.roa
Signing time: Tue 11 Jul 2023 17:13:51 +0000
ROA not before: Tue 11 Jul 2023 17:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:45:f1:f2:b2:05:8c:01:af:f7:ca:fe:af:c5:e0:d1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 17:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec1ae73962aad0bec36abaa730c7249fd404dd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:9d:4a:48:3a:13:1f:5b:8c:37:2e:29:bb:
7d:22:16:a5:1a:77:83:2e:68:54:4f:e1:78:6f:0b:
67:d7:93:1d:7f:1d:78:bc:c5:da:54:ad:bb:71:be:
bd:3c:ce:ee:a2:10:f7:c8:ee:27:79:70:89:82:ec:
02:e7:67:72:db:23:51:b2:2f:01:c3:5e:1d:95:17:
ad:d8:06:65:fc:d2:43:64:e3:37:dc:79:1e:a2:c5:
21:79:88:c5:8e:a1:d2:e3:a4:19:31:cc:5e:42:21:
7f:47:51:be:69:7a:ac:cf:7a:80:c1:00:92:7e:97:
52:13:3a:62:9c:cb:3f:50:ee:2c:e2:31:cb:c0:e7:
b8:23:9d:ed:6c:2e:f2:eb:c1:af:fb:8a:0a:46:d5:
b9:0e:75:24:fe:47:4a:ce:a3:2d:7a:8c:6f:b7:9f:
27:aa:9e:4c:94:86:17:fa:df:9c:81:20:01:43:51:
a0:31:c7:61:45:bd:6c:d9:42:11:69:03:57:da:45:
e4:6c:22:2a:53:17:b4:e1:74:04:0b:ad:61:33:09:
21:10:3a:27:13:75:e9:5a:23:95:44:4c:92:e8:92:
47:92:84:f6:77:70:23:cc:75:14:52:0a:53:e3:20:
0f:62:d5:fa:fb:d1:5b:09:2b:2c:76:7c:b8:0b:09:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1A:E7:39:62:AA:D0:BE:C3:6A:BA:A7:30:C7:24:9F:D4:04:DD:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7BrnOWKq0L7DarqnMMckn9QE3TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:b0:23:be:e0:33:de:f8:1f:77:6d:53:89:32:1f:dd:8c:9a:
91:20:7b:dd:db:55:3c:d1:f0:8a:bb:01:bc:01:8b:51:2f:55:
55:e0:6e:af:98:27:18:59:4a:00:be:17:6e:1b:e3:7b:39:a4:
e1:25:3c:1b:f5:6e:05:34:71:49:22:7c:00:9b:bb:2d:ed:0a:
95:27:99:de:73:cc:bb:b9:1e:d5:6f:5d:2d:c6:9e:86:66:60:
63:41:5d:57:02:67:9a:7f:9d:8a:ee:79:67:d6:35:ad:28:f2:
8b:24:a1:ad:50:ac:1e:b7:9a:d7:51:89:8d:eb:5e:cb:f2:3c:
8f:c2:ec:6e:18:10:3c:e8:70:a6:00:bf:73:8b:35:aa:a0:15:
b0:14:f2:bb:7d:2a:a6:b5:a1:51:54:15:05:9d:03:e9:34:ba:
f0:a0:58:d8:dd:ce:cf:a3:d6:9d:05:95:0f:89:8c:34:05:f1:
d6:52:53:53:fd:f7:ef:e3:9c:60:7f:f2:5d:57:90:82:a6:52:
e2:84:b8:bf:7e:08:3e:c8:ed:06:f9:27:76:75:2a:e6:75:11:
db:f2:7d:1c:1e:e2:a0:a9:d8:90:44:3c:a6:c0:8b:11:fb:4f:
19:d8:57:22:ee:63:1e:00:6e:66:f7:a1:10:8b:47:5d:7e:47:
ee:e2:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:15:25 2025 by rpki-client