Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7WXJL2XsTpwvDELROSPTSlks7vE.roa
File: 7WXJL2XsTpwvDELROSPTSlks7vE.roa (raw, json)
Hash identifier: 5AuwMQcQhRL3pHHG6XQj14teTPxCoAhObASKCGD45Lo=
Subject key identifier: ED:65:C9:2F:65:EC:4E:9C:2F:0C:42:D1:39:23:D3:4A:59:2C:EE:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E8D77B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7WXJL2XsTpwvDELROSPTSlks7vE.roa
Signing time: Tue 26 Apr 2022 03:09:46 +0000
ROA not before: Tue 26 Apr 2022 03:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2123200439 (0x7e8d77b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 03:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed65c92f65ec4e9c2f0c42d13923d34a592ceef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:56:c5:96:d3:4e:92:79:af:86:61:8f:42:
40:31:2d:f3:3d:44:94:7b:da:6b:db:8e:4c:61:60:
f4:24:34:29:cf:34:df:00:2a:0d:91:9b:8a:a2:f4:
91:83:35:5d:fc:6a:9c:39:95:9b:73:b4:f2:6e:2f:
c9:5c:df:20:91:03:d9:05:d4:98:2a:8e:9c:34:ee:
60:65:e2:47:a6:b4:a7:08:e6:ba:a0:f8:20:66:a2:
50:74:cc:d2:07:40:ec:84:f0:88:05:7c:e7:64:b3:
8a:0a:02:e5:ea:a8:1a:52:96:0a:0e:54:7d:2a:25:
aa:fb:3e:30:3f:74:8d:af:ee:00:2e:96:c3:4f:e1:
e1:44:b7:73:fa:3c:d0:29:2d:66:61:28:ae:5f:af:
43:54:f0:84:56:c1:35:f6:35:f4:70:82:55:01:3a:
d1:3e:83:9e:b5:2d:de:b0:28:c4:73:32:69:09:44:
84:90:98:82:fe:49:c0:a1:9a:9e:f6:1a:b5:46:d6:
0f:98:ad:ed:6a:97:4a:da:5d:ec:a4:20:8b:00:78:
45:45:7e:c5:ef:c0:cb:6c:d9:e3:f4:7f:af:c4:8e:
01:d4:f3:4f:4a:ab:42:f9:94:a5:7f:18:7d:a6:ff:
2f:56:85:9a:f1:1c:10:a7:c7:23:e5:68:f3:5c:e9:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:65:C9:2F:65:EC:4E:9C:2F:0C:42:D1:39:23:D3:4A:59:2C:EE:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7WXJL2XsTpwvDELROSPTSlks7vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:e1:15:51:ae:97:1c:5c:b3:01:bd:52:75:0a:cc:9e:e0:15:
22:3e:00:df:89:12:ee:c3:54:1a:48:cc:6c:3e:77:8d:5e:14:
e2:86:08:c5:f7:4e:04:42:6d:a4:cf:81:68:13:c2:5d:6e:d0:
9f:92:83:af:ed:9c:e1:68:40:b1:67:1c:ca:f0:92:18:48:e1:
cf:40:a6:15:dd:6e:e6:6e:4d:d6:d8:8d:24:1f:bf:53:37:56:
8f:82:90:0f:a7:eb:04:0e:a8:12:af:5c:74:e1:f6:a6:c8:f7:
7c:9d:f4:f8:09:62:a2:f1:b5:17:49:5c:03:c7:cb:d2:ee:a2:
f5:15:8f:e4:b6:38:ab:a7:fd:2e:7a:29:9c:90:2f:7e:36:7c:
5b:17:ce:40:71:af:49:8b:f4:10:d3:e3:5d:26:00:33:cc:20:
5c:c2:78:bc:5a:36:55:20:17:f2:7e:c2:77:0e:35:e7:fe:51:
d6:8e:91:ed:fb:ad:08:36:6c:99:ad:d9:64:5e:d0:d3:4c:23:
e9:1a:85:94:b5:97:58:8a:db:90:4b:27:5f:49:34:65:30:dc:
a4:2e:40:c0:52:c1:65:6b:16:67:b2:7f:60:f7:75:12:46:16:
5f:ad:37:f4:e8:98:04:7d:cf:da:59:64:5a:07:ac:b7:11:20:
9e:09:4e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:44 2025 by rpki-client