Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7v14JD5NGbU23wwK9RtkhTSTyg0.roa
File: 7v14JD5NGbU23wwK9RtkhTSTyg0.roa (raw, json)
Hash identifier: 5VFpOiImFuSjneLHTpG7xYZaV85AZbo95bwVrtLXa50=
Subject key identifier: EE:FD:78:24:3E:4D:19:B5:36:DF:0C:0A:F5:1B:64:85:34:93:CA:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018996988DDD548C50C2F565D15ED326B456
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7v14JD5NGbU23wwK9RtkhTSTyg0.roa
Signing time: Thu 27 Jul 2023 09:05:27 +0000
ROA not before: Thu 27 Jul 2023 09:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:9697:a354/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:98:8d:dd:54:8c:50:c2:f5:65:d1:5e:d3:26:b4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 09:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eefd78243e4d19b536df0c0af51b64853493ca0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:1a:e0:a4:29:6b:8f:21:44:1a:5c:d1:e5:
20:4f:ac:66:ca:7c:a9:92:5d:16:08:63:46:84:b2:
5d:c1:d8:5d:e6:95:17:91:35:5b:7d:a9:47:94:43:
0c:b4:29:dc:08:97:a7:d7:64:42:35:ad:ef:6e:76:
6f:b2:77:1c:a4:a2:90:6e:27:6e:4b:b9:a1:2f:d4:
20:97:eb:5a:0a:2a:81:73:ab:18:51:6a:34:61:68:
45:1a:67:54:e7:85:af:0a:3b:53:31:1e:4f:f2:b2:
55:01:04:18:8d:ac:a1:80:12:e9:1f:f7:f7:90:63:
d2:79:02:00:ce:c6:cd:5d:eb:ce:f1:69:48:20:10:
ea:43:1d:38:89:d2:9c:02:d4:bc:90:61:0c:40:fd:
53:a4:d9:cf:cc:80:7a:2b:42:2e:ed:e1:85:d7:39:
af:cd:66:84:77:9b:23:63:65:68:82:3b:7a:a3:01:
b8:06:57:60:d2:f0:1a:62:95:98:03:af:aa:5d:56:
2c:47:9e:cd:41:0e:20:7c:d8:7e:6d:c2:52:f8:8f:
93:f5:c6:70:d2:5f:c0:54:42:3f:a3:d3:04:6c:08:
64:f5:2a:db:ab:bf:d1:71:ab:bc:64:7e:71:04:96:
d2:09:b8:e1:83:10:ea:c1:d1:25:61:81:4a:4c:b5:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:78:24:3E:4D:19:B5:36:DF:0C:0A:F5:1B:64:85:34:93:CA:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7v14JD5NGbU23wwK9RtkhTSTyg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:e3:56:9f:15:11:7f:b9:5f:59:8b:3f:39:5a:65:71:6d:bd:
95:9e:dd:5b:2a:dd:53:f5:bf:c8:c9:e9:47:b6:2c:d2:74:59:
a6:f9:f9:3f:b1:c8:ff:5a:c9:3b:c5:b2:f6:ff:88:ca:cd:e6:
85:c6:d7:af:98:61:2f:8d:dd:0c:3a:ec:06:4c:f8:44:5e:73:
75:10:ef:dc:88:c5:a0:2b:4b:8d:c4:1d:45:c2:3f:c2:ae:9f:
4b:0d:ef:41:84:5e:59:a5:cb:3f:b2:d3:2b:12:d2:4a:55:80:
c4:b2:ff:81:c3:17:3f:7a:81:cb:87:5d:f7:58:71:69:2e:57:
d4:f5:e5:81:33:a4:07:44:b0:26:59:81:f2:d4:45:1b:87:00:
ba:13:52:31:14:c2:5e:18:bb:c2:55:fd:3e:91:f6:ec:b1:21:
8e:16:74:11:e3:55:9c:d0:f5:ca:2f:57:0c:f3:1a:b3:b4:89:
59:4b:30:58:0b:21:95:92:7b:a3:3d:5d:12:1e:c5:da:2a:69:
11:6a:3e:b8:38:f8:84:f7:08:d1:46:92:c7:d3:fc:72:57:6c:
06:4e:7f:cd:8d:81:98:71:1a:cc:27:ab:8a:27:03:e5:a1:74:
d6:8a:c4:e0:39:70:21:fb:8b:d2:63:03:0e:b5:ed:99:18:e2:
0c:98:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:28:38 2025 by rpki-client