Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7w8Gl0cahJLSg-SMQvnmucxhw4M.roa
File: 7w8Gl0cahJLSg-SMQvnmucxhw4M.roa (raw, json)
Hash identifier: myWs7l+f/V8xmDa1h2LjqVzFFnVUHOj8ot3eovd1Tfk=
Subject key identifier: EF:0F:06:97:47:1A:84:92:D2:83:E4:8C:42:F9:E6:B9:CC:61:C3:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BEF781BF5F9D3A0E914EE3C660BA58EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7w8Gl0cahJLSg-SMQvnmucxhw4M.roa
Signing time: Fri 04 Aug 2023 05:13:58 +0000
ROA not before: Fri 04 Aug 2023 05:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:be:f7:81:bf:5f:9d:3a:0e:91:4e:e3:c6:60:ba:58:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 05:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef0f0697471a8492d283e48c42f9e6b9cc61c383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:75:2b:9a:8c:06:ad:cc:c6:ef:53:14:e4:97:
ca:44:b4:be:2a:78:13:57:11:b4:ce:f0:09:85:03:
8d:09:1b:50:77:6b:8e:db:cd:b1:a6:a0:1b:6d:5e:
ad:ed:d5:aa:0f:37:71:20:cc:f3:8f:62:da:03:54:
fc:3d:ad:dc:ea:16:40:80:1e:bd:a4:bc:6f:11:dc:
66:3a:70:b8:5f:55:58:22:4b:74:7c:7a:f6:19:31:
1d:2b:d2:53:d5:a9:65:aa:67:2d:47:2c:13:64:b9:
d8:60:97:57:dc:e1:d5:da:f5:57:df:d8:09:da:b5:
db:56:03:c5:77:5c:16:2d:76:48:4f:6a:ce:39:1b:
3e:a4:dd:35:0a:d2:7a:e8:23:fd:33:eb:33:50:34:
e4:c9:39:a8:22:55:a1:6e:e3:83:eb:0d:53:a6:ea:
a9:5f:3b:4e:00:eb:e3:01:b4:4e:4b:6f:9a:ed:8c:
59:de:bd:68:a4:fb:ed:f6:1b:a4:69:44:7c:e1:dd:
72:0a:c7:f9:58:2f:e9:69:51:59:db:0e:69:fe:42:
c5:a9:aa:8d:e7:c2:31:58:7b:18:db:11:23:60:7c:
25:0b:00:59:29:93:7f:6b:2a:ff:bf:d2:eb:0f:1e:
f3:c2:8a:9d:bc:30:4b:22:40:19:39:de:ea:a2:46:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0F:06:97:47:1A:84:92:D2:83:E4:8C:42:F9:E6:B9:CC:61:C3:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7w8Gl0cahJLSg-SMQvnmucxhw4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:ef:30:31:b9:a4:54:55:6b:58:c1:62:d6:35:4b:5a:1b:ca:
d7:ff:80:22:0b:5c:ea:32:ab:ec:df:d7:da:34:27:ed:0c:2b:
d0:e2:ef:1c:0a:87:92:20:85:92:07:f5:a9:de:99:9e:24:72:
22:b0:cf:bb:ce:39:16:ff:6e:8a:58:e9:23:ea:31:d3:5c:d5:
86:93:0e:91:05:a9:27:4f:98:7d:91:7d:6d:9a:fb:5d:c2:51:
b0:c0:97:d4:c4:53:e5:9d:22:9d:38:15:34:ac:97:bb:73:a6:
35:5a:06:c3:90:95:8d:a0:e6:bf:99:29:2d:d5:3e:33:68:37:
ab:da:4b:39:c3:66:ca:25:df:d8:fe:d2:e0:af:fd:45:a6:08:
56:5b:45:74:4e:72:a2:f5:0e:e0:9e:d5:7e:a1:fe:64:1b:2e:
b7:d2:06:c1:56:60:75:32:8d:3c:f5:75:17:84:81:dc:5d:b6:
8b:ef:8f:5d:d9:af:c9:71:78:a5:95:04:f4:fe:6d:e2:a1:b6:
45:35:e7:eb:e4:85:48:d4:1c:27:e8:30:75:1f:b5:70:03:bb:
05:56:64:31:82:3b:ae:25:ca:48:e9:f6:80:63:9e:89:f6:0b:
d5:c9:64:ce:f1:a2:d9:99:8b:5f:a4:93:2b:b8:fd:82:3b:ed:
ff:9c:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:58:49 2025 by rpki-client