Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MJl340xtroLxr5fINgoNouYi6Y.roa
File: 7MJl340xtroLxr5fINgoNouYi6Y.roa (raw, json)
Hash identifier: 7uQNXX9lfoBciWYSe4p+6AY9BURs8swtIOa1pswf69c=
Subject key identifier: EC:C2:65:DF:8D:31:B6:BA:0B:C6:BE:5F:20:D8:28:36:8B:98:8B:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C6405398BD3963BB0239D51A90677799
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MJl340xtroLxr5fINgoNouYi6Y.roa
Signing time: Fri 16 Jun 2023 22:08:04 +0000
ROA not before: Fri 16 Jun 2023 22:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c6:40:53:98:bd:39:63:bb:02:39:d5:1a:90:67:77:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 22:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecc265df8d31b6ba0bc6be5f20d828368b988ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:57:0e:47:da:ee:95:79:0a:2f:08:4c:56:
6a:32:7c:ec:63:78:e8:c2:f7:70:32:c7:d6:8c:c1:
89:71:51:bb:88:6b:18:8b:34:51:0c:4d:7b:88:54:
51:7e:60:a3:b6:f8:ed:94:9c:0a:91:83:c1:b7:76:
44:e8:24:21:8d:90:1e:c8:a4:bf:a5:62:1f:c1:2d:
45:e0:0b:83:d2:9c:2f:1f:14:44:da:f2:f5:fc:bf:
0e:f8:5d:fa:1a:a4:74:c0:d8:c7:7c:25:89:bd:41:
9c:8c:98:b3:ef:d6:06:e8:25:d8:e1:6d:d1:51:b6:
e2:b7:78:e3:7a:fa:15:27:4a:f7:d5:31:8b:5b:f2:
ec:d8:f2:62:26:7e:48:31:9c:9c:e4:c5:44:02:01:
58:cc:4c:68:cf:24:52:2a:df:f0:42:fd:25:28:3f:
2c:e1:59:59:ab:cc:aa:92:57:9d:8f:3c:50:70:cc:
2c:57:78:8d:93:a3:d6:e8:1f:de:24:ed:ea:4e:5d:
82:43:ed:84:1d:bc:d5:0d:f6:85:ef:48:9f:a3:f5:
2c:89:e5:e7:ef:5e:ee:4c:ae:c3:82:2f:17:86:be:
3d:a0:bb:be:9c:c3:6f:10:d5:f6:35:79:b3:88:91:
43:87:e2:47:75:cb:fb:27:cc:bb:37:59:82:c5:29:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C2:65:DF:8D:31:B6:BA:0B:C6:BE:5F:20:D8:28:36:8B:98:8B:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7MJl340xtroLxr5fINgoNouYi6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:03:c6:a3:c3:4b:9a:95:6d:00:2b:27:4b:99:bc:5e:e3:a1:
20:64:49:63:c0:4c:43:e3:f1:4b:b0:49:2f:63:d1:e5:e7:f7:
ce:04:58:bf:ab:7c:1e:90:66:02:b8:da:9e:26:44:d4:3a:06:
df:5f:c9:7a:8b:74:0f:71:f3:b2:8e:51:4b:ba:78:67:81:ee:
66:86:fa:3a:b5:f6:01:ac:21:aa:06:66:75:77:c8:f2:da:48:
38:b6:87:cc:41:e3:bb:40:c8:28:19:8c:7b:83:bf:5d:b1:67:
6c:90:34:bd:3a:85:91:ed:3f:66:da:b8:56:6e:6f:a8:6f:45:
99:90:b7:4c:55:cb:bc:4e:36:fa:34:35:bb:c8:50:70:b3:bf:
87:ec:d8:88:a8:f8:db:e0:ca:84:09:64:32:ce:42:9d:19:8e:
c0:ad:69:93:e3:eb:7e:56:6e:a1:ad:f3:b0:86:ce:a2:f3:e2:
18:59:a8:a2:ce:e9:09:b9:2e:26:c5:44:ad:ac:e6:fb:4f:2a:
6b:c6:e1:79:45:90:94:08:49:fc:da:f8:a9:4a:26:fe:3a:d2:
03:1f:ca:cb:80:46:87:53:f6:b7:37:69:34:fe:ce:71:28:7c:
a3:3c:e5:08:df:9d:a2:08:c7:d8:9e:10:48:f5:73:8f:76:37:
b7:94:c0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:18 2025 by rpki-client