Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/777eFV6ex4-WUwmjJLuH9xZJcUQ.roa
File: 777eFV6ex4-WUwmjJLuH9xZJcUQ.roa (raw, json)
Hash identifier: XY9XR7f9eBGB1/eCO1T3qqFNyirSH3QS3C3kLrkshrQ=
Subject key identifier: EF:BE:DE:15:5E:9E:C7:8F:96:53:09:A3:24:BB:87:F7:16:49:71:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A096C46D5A7E8B52C10CECB0E4E2DF81E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/777eFV6ex4-WUwmjJLuH9xZJcUQ.roa
Signing time: Fri 18 Aug 2023 16:13:25 +0000
ROA not before: Fri 18 Aug 2023 16:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:6c:46:d5:a7:e8:b5:2c:10:ce:cb:0e:4e:2d:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 16:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efbede155e9ec78f965309a324bb87f716497144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:7b:62:38:9e:cb:2e:07:d6:5a:ea:ef:0e:
9e:e2:f8:91:a1:b7:fb:61:a4:fe:3a:b9:22:2a:35:
0f:3d:21:94:c4:c0:39:aa:45:18:00:09:a5:20:1a:
40:e7:b8:39:e2:94:8a:69:aa:9f:91:8d:59:1d:a2:
f3:09:5d:12:f4:51:9e:fa:a6:89:3e:ba:cf:df:1a:
7e:11:f2:58:61:52:ba:a7:dd:b8:b8:f7:68:3a:33:
18:31:fe:a0:8b:1a:92:c7:94:a3:3e:d0:f9:52:a4:
57:c6:fb:ab:43:77:45:c7:bb:47:4c:71:66:cb:d3:
e6:ce:78:7e:78:7a:24:13:d8:95:a2:1d:d9:86:2e:
b4:a1:b9:62:ff:4f:19:fc:dc:6d:92:b3:e2:b3:3a:
15:01:1f:b0:85:07:d1:4f:e4:7c:b9:aa:ac:c3:17:
41:7c:62:96:1a:3b:35:9c:81:e0:a7:db:dc:f2:2b:
f3:d3:19:03:3e:3f:6f:9c:4c:98:80:e6:93:25:4e:
6c:9a:39:21:a4:04:42:d2:09:9a:e5:ee:ef:33:36:
c4:86:7f:6f:0f:79:f9:dc:e8:97:9e:77:fc:79:86:
ca:01:0b:dd:31:01:e8:61:a6:0d:83:91:1a:98:5d:
8c:12:b1:c7:a4:ce:ba:4a:d6:88:d7:9c:a4:b3:cc:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BE:DE:15:5E:9E:C7:8F:96:53:09:A3:24:BB:87:F7:16:49:71:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/777eFV6ex4-WUwmjJLuH9xZJcUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:a9:f2:ef:55:a6:72:79:50:9d:26:b3:a7:0a:f4:f9:9b:32:
b7:e3:b4:7b:d6:c8:4e:fe:be:7f:78:3d:4b:7c:97:e5:87:b6:
a4:b2:c0:c1:cb:a4:42:26:dc:2d:38:cf:4c:c1:de:24:4f:83:
9a:23:24:52:28:d4:55:89:61:c6:b0:50:95:8b:d4:5a:d5:fa:
51:a0:75:6e:24:68:c3:dc:08:c0:d9:3b:cc:18:6a:1c:de:b6:
97:e6:ce:e9:e0:17:1b:6a:0e:56:7b:2f:bf:57:d0:5c:95:33:
75:f3:fa:22:0b:12:e6:21:b2:fb:c2:00:9f:eb:44:6d:8f:80:
06:cc:f0:34:b6:73:d6:d8:b4:22:a1:ad:c4:90:a8:84:9f:72:
8f:2a:d4:81:c6:f3:31:75:bc:cc:ca:b1:63:00:9d:2c:b4:c5:
a3:cd:79:3f:b3:a5:1b:d8:fc:c0:dd:73:5f:f0:3d:bd:85:27:
16:33:dd:6d:17:79:f0:c2:d6:3e:94:c0:e8:78:be:3e:93:6a:
cd:be:08:68:3a:5d:e6:64:f9:d6:3a:6d:8c:88:d3:a0:7b:ee:
8e:ad:48:24:00:8a:1c:b2:07:97:78:24:ae:7c:b5:db:d8:1b:
97:eb:ca:9c:80:41:92:51:02:13:3a:7d:7e:6d:d1:32:89:8f:
55:79:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:47:49 2025 by rpki-client