Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7OjJD-E5x9mq9nsepYVByOJOomw.roa
File: 7OjJD-E5x9mq9nsepYVByOJOomw.roa (raw, json)
Hash identifier: iedodgjDeeVW3PLMiAogsbku/iTn83A7pNjeSGCNMSo=
Subject key identifier: EC:E8:C9:0F:E1:39:C7:D9:AA:F6:7B:1E:A5:85:41:C8:E2:4E:A2:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3B63EEB7158A6282F4F6B938962E82FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7OjJD-E5x9mq9nsepYVByOJOomw.roa
Signing time: Mon 28 Aug 2023 09:05:19 +0000
ROA not before: Mon 28 Aug 2023 09:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:3b63:235/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:63:ee:b7:15:8a:62:82:f4:f6:b9:38:96:2e:82:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 09:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ece8c90fe139c7d9aaf67b1ea58541c8e24ea26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:dd:06:b7:ec:c8:4e:5a:2f:f0:4b:c8:ea:
9a:7f:e7:7b:fe:d4:d6:e9:f2:c3:4b:13:5d:89:d3:
81:6e:ff:1d:b2:80:7d:bf:5c:bf:9d:ad:e2:ce:a6:
47:79:69:61:de:4d:64:bd:c9:66:24:7c:59:28:1f:
e5:f6:14:37:83:f2:0a:ee:12:56:d5:0c:9a:57:5f:
af:bf:13:20:38:fe:27:40:5d:32:86:ba:5b:ed:9a:
d1:1b:7a:26:37:4b:6b:ec:87:71:5f:0b:49:3d:9a:
3a:dd:27:8d:2a:fd:a4:53:41:b4:43:00:f9:59:44:
84:9f:2f:48:b4:65:4c:37:b5:69:64:4e:af:e1:c2:
21:3c:99:0c:1d:5e:91:2d:a6:af:23:e4:b9:8d:4b:
7d:ed:1e:4f:51:71:14:48:9e:7d:9c:90:d4:06:28:
00:4c:3a:bd:d0:d4:78:75:7e:a2:0a:bc:bb:c8:96:
9e:b3:5c:39:e1:fc:83:bf:3e:e9:fc:36:27:e5:e7:
be:0a:3e:6c:f5:b9:65:17:3a:2f:47:35:91:56:95:
44:a8:56:10:c2:b3:6a:2c:77:d8:2b:d6:a2:f7:02:
ac:29:b0:57:32:b6:b7:c2:65:c0:d0:0f:b3:e4:d1:
a3:b7:3f:5f:e1:6a:e4:3d:b4:d4:76:82:78:30:15:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:C9:0F:E1:39:C7:D9:AA:F6:7B:1E:A5:85:41:C8:E2:4E:A2:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7OjJD-E5x9mq9nsepYVByOJOomw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:f7:d8:e6:fd:99:90:04:ad:76:db:f0:d5:73:ed:2a:3c:3c:
1f:2f:b6:26:d6:8c:b0:b4:27:63:98:5a:78:79:14:2f:9d:39:
ba:00:50:96:c0:42:72:a2:5a:4e:35:ef:3a:12:ba:ec:d1:0e:
63:06:92:11:fc:fb:9a:ba:95:4e:79:1b:86:8a:31:6c:40:c8:
27:e7:fc:b4:7e:8f:11:98:e8:63:f7:b6:a8:4c:fc:e2:1f:d8:
b1:ff:2b:63:c4:51:f8:6e:44:02:44:ec:28:2f:48:75:5a:19:
50:b3:c6:4a:95:85:96:b1:4d:c1:a0:14:db:fd:56:97:ff:2c:
ef:9d:fe:d0:e1:c1:df:d3:91:39:a4:c2:32:a4:3f:82:72:fa:
1b:57:a9:e9:4d:00:5b:87:df:55:17:02:e1:b1:11:a9:0d:c4:
2e:67:04:36:4f:e1:39:36:69:53:d3:e2:b8:35:86:b3:2c:7f:
9a:ca:49:22:a4:e5:28:ed:71:52:ae:c3:76:c3:09:91:46:41:
fa:3d:4b:48:ac:51:8e:88:90:ac:0c:4b:5c:91:1f:c6:a1:fc:
84:47:f5:e6:22:0f:c1:fe:02:b0:2f:68:22:d7:b9:8f:a4:c9:
ba:91:81:b3:6d:69:1d:30:10:4d:d3:88:ac:51:6e:24:e6:ec:
f3:f3:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:42:52 2025 by rpki-client