Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/77RrI9tgiymSaKGPViVAHh4OKfg.roa
File: 77RrI9tgiymSaKGPViVAHh4OKfg.roa (raw, json)
Hash identifier: /lAeqsk2VwFXcWzUKd2Q0QvRo81LRNRIGy9cFoXISBc=
Subject key identifier: EF:B4:6B:23:DB:60:8B:29:92:68:A1:8F:56:25:40:1E:1E:0E:29:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A100BD1906130CE4853DCC5ABE2C4E57E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/77RrI9tgiymSaKGPViVAHh4OKfg.roa
Signing time: Sat 19 Aug 2023 23:05:24 +0000
ROA not before: Sat 19 Aug 2023 23:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:18a:100b:2f7c/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:10:0b:d1:90:61:30:ce:48:53:dc:c5:ab:e2:c4:e5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 23:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efb46b23db608b299268a18f5625401e1e0e29f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:70:74:ce:56:b7:60:3b:c9:e9:7c:b8:8a:
41:b7:13:4a:cb:4d:50:e5:29:21:a9:a3:84:0c:56:
d2:9a:f3:39:4b:71:db:4c:75:1d:c7:b2:8f:c3:76:
15:05:53:22:5a:d2:35:39:30:f2:d3:3f:7a:30:0a:
7a:fe:0d:fd:df:36:9d:2b:4b:cf:03:d6:14:66:82:
1d:e0:2d:89:24:da:bc:eb:b4:1d:1d:d7:86:61:2b:
07:8b:a4:cb:e9:12:8b:17:7a:0b:cf:29:2a:cd:d5:
7d:64:ca:ca:17:3a:0c:ee:29:c0:b7:99:36:41:90:
20:cc:e4:04:e7:ce:73:fe:cc:bb:66:44:78:e9:bd:
95:70:56:fe:7c:d4:bf:10:b1:00:f5:c7:4e:37:18:
a2:86:a9:62:93:c2:cb:10:9a:87:81:93:be:4b:0d:
76:ad:15:d5:7b:f3:5a:82:02:ff:0b:ec:11:2e:97:
6a:9f:5e:2b:fb:76:b2:45:e7:24:88:12:0a:4f:c2:
53:9d:3a:3f:0a:59:cb:2b:e0:43:bd:b6:17:51:c7:
f4:1a:4f:01:e0:2f:7d:e9:86:a7:3d:8a:40:7a:40:
ba:da:ff:58:d2:5c:df:56:2d:c0:e9:cf:2b:da:85:
78:6c:c9:af:30:ea:7a:73:5f:61:38:8d:3a:c4:a7:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:6B:23:DB:60:8B:29:92:68:A1:8F:56:25:40:1E:1E:0E:29:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/77RrI9tgiymSaKGPViVAHh4OKfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:8b:6b:bb:b9:3a:93:87:da:23:8d:94:75:6f:6c:a2:27:0c:
a5:bc:0b:8a:a3:e3:00:32:9c:10:8e:1b:dc:32:19:fb:c1:10:
56:b9:b7:5b:65:cf:f8:c7:b8:43:4c:13:69:6f:4b:2d:85:e4:
43:8d:6e:05:ef:fc:4e:5a:42:97:fe:51:56:8f:78:74:6b:1b:
2d:11:7f:04:c2:ab:33:c5:86:6e:57:b4:b5:c0:5c:ca:18:8a:
a4:25:fe:19:67:5d:d1:32:52:13:8b:51:a3:f0:b4:10:ce:2a:
06:06:4b:d6:ae:0f:9b:a8:52:66:7d:05:6a:92:7a:2b:24:cf:
bb:4c:2c:18:1f:44:3d:cd:73:fb:08:5f:d1:76:6f:ca:8c:ce:
51:cc:d1:e2:2f:d4:57:56:f9:66:6d:73:5b:c3:f8:72:3b:97:
e5:af:93:c0:a4:eb:e9:aa:fa:51:23:c9:c0:26:5d:6a:ed:8c:
6a:0d:aa:cd:b7:40:af:ba:e4:cc:f8:8c:65:b0:a6:bb:52:c8:
86:90:19:79:40:c9:25:47:26:ec:6f:56:41:1e:d7:8c:85:73:
12:1c:3f:1d:34:ec:37:0c:91:93:1b:03:fb:58:56:4f:a8:ea:
01:46:b5:a8:3b:d3:94:33:38:cd:44:70:8e:06:36:f9:e0:a4:
48:46:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:18:41 2025 by rpki-client