Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/73kcUHdAtWmro8iC2zgrWqHayTE.roa
File: 73kcUHdAtWmro8iC2zgrWqHayTE.roa (raw, json)
Hash identifier: H6R9EtgjSPNg5z57pRA61lwFtg9IRMarzvJoQw3JA7U=
Subject key identifier: EF:79:1C:50:77:40:B5:69:AB:A3:C8:82:DB:38:2B:5A:A1:DA:C9:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D08E11B56865DDCBCB95A03AD1024605
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/73kcUHdAtWmro8iC2zgrWqHayTE.roa
Signing time: Mon 07 Aug 2023 15:11:58 +0000
ROA not before: Mon 07 Aug 2023 15:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:8e:11:b5:68:65:dd:cb:cb:95:a0:3a:d1:02:46:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 15:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef791c507740b569aba3c882db382b5aa1dac931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:f3:a4:80:30:9b:1c:c8:93:eb:23:a1:53:
1d:de:7f:03:72:50:f6:28:59:75:04:08:53:f9:19:
ad:e5:70:4e:f6:1b:37:ae:86:e1:34:76:da:c0:e4:
e0:1e:47:4b:0a:ba:6c:d8:c9:37:4f:22:94:97:fd:
47:f4:b2:ff:4f:f1:df:ad:3b:7f:6a:50:7e:44:e7:
3e:5b:25:94:17:5e:8d:0a:ed:6b:24:8b:5e:e5:b1:
d6:16:f4:89:d0:ce:a8:51:24:2b:89:dc:69:97:27:
2c:84:09:14:28:85:4c:83:23:f8:96:56:cd:66:cf:
1c:c3:26:d9:0d:7f:6f:10:f5:5a:9f:a2:ec:74:36:
79:a9:5f:58:6a:2a:1c:c7:f0:70:a8:e3:ca:04:8f:
c4:f0:12:12:01:0e:af:d2:91:d5:21:dc:90:59:3f:
30:b7:a2:39:47:5a:4b:88:03:32:09:57:1b:54:c9:
21:db:ea:36:25:25:e2:e0:3f:42:37:2e:ef:a7:36:
14:8a:13:1f:14:9c:46:b0:e8:e9:fc:26:db:d4:5f:
ed:7b:2a:50:69:de:8b:0d:a4:6f:20:1d:9c:42:b6:
dc:12:5e:86:fa:01:91:41:48:ec:74:e6:06:53:e9:
84:5d:1c:8f:a7:b9:31:90:2e:3d:b6:a7:18:c9:12:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:1C:50:77:40:B5:69:AB:A3:C8:82:DB:38:2B:5A:A1:DA:C9:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/73kcUHdAtWmro8iC2zgrWqHayTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:86:c8:8c:75:39:ce:c8:54:bc:48:4e:00:4b:c0:e9:d1:6d:
f8:61:e1:4e:1b:93:7c:df:42:9b:bb:af:94:7b:39:f0:b3:03:
35:ab:36:3c:7f:fc:1e:cb:86:78:e6:46:97:68:53:7a:8d:37:
81:5f:2c:66:32:2a:c6:a4:64:98:59:7d:c8:24:35:61:36:8b:
fa:0f:15:ed:29:13:60:89:e3:e6:6a:99:df:f8:2f:22:48:3a:
5f:a2:1f:bd:d0:3c:9e:cf:77:72:4b:a1:c2:c4:5a:fd:22:99:
aa:d6:22:aa:c8:7a:42:47:3d:c9:30:56:0a:9a:f6:a1:64:01:
a7:58:77:22:31:6f:bc:4b:55:9c:b7:87:88:fc:01:19:4b:30:
98:21:67:fd:ac:18:9e:31:69:fe:e6:52:98:ab:47:27:8f:46:
44:cb:3d:e9:cf:92:f4:78:2c:d8:40:4f:c8:71:ea:5f:94:e8:
a7:f3:9a:67:a6:5a:17:b2:9a:c4:fb:3a:47:ec:b2:d8:75:fb:
19:08:f4:e2:d1:6e:1d:a7:73:11:67:6a:4f:e4:c4:88:3c:77:
a1:46:51:85:b0:09:39:1e:44:63:bd:08:ca:cd:90:0f:3b:05:
03:ac:02:35:81:ae:9b:2e:ce:62:be:a8:c3:55:df:f8:c3:04:
03:94:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:12:30 2025 by rpki-client