Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/77hIvwZ74abdtueWJcaCLVkTaMs.roa
File: 77hIvwZ74abdtueWJcaCLVkTaMs.roa (raw, json)
Hash identifier: 8qo40SiU4g3kg/zfGTYo6ftBPYyiYXEGaDLXAA8lpNg=
Subject key identifier: EF:B8:48:BF:06:7B:E1:A6:DD:B6:E7:96:25:C6:82:2D:59:13:68:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865C104C2A41973924B2429E78728C9FA4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/77hIvwZ74abdtueWJcaCLVkTaMs.roa
Signing time: Thu 16 Feb 2023 21:10:17 +0000
ROA not before: Thu 16 Feb 2023 21:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:10:4c:2a:41:97:39:24:b2:42:9e:78:72:8c:9f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 21:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efb848bf067be1a6ddb6e79625c6822d591368cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:aa:eb:9b:2a:28:0f:ac:a8:d5:5d:0a:dc:
b9:5f:84:88:10:8f:96:39:a3:62:fd:87:38:2b:fc:
e2:02:24:a1:33:be:a5:04:73:d4:ee:6b:a5:ef:dc:
98:26:d1:2f:b6:94:61:2b:69:a8:bc:03:76:91:e5:
d5:9e:c0:2d:32:bc:31:6e:b3:93:35:cc:8f:ff:18:
81:da:4b:76:55:82:81:04:d9:3e:66:c2:65:14:08:
9f:a2:b9:62:70:3c:dc:e6:39:58:f7:e2:e7:f4:95:
1b:a9:b7:ba:67:54:7c:2b:fe:93:a5:d6:a6:0e:a3:
79:1d:1b:83:9e:c6:59:14:da:5a:4d:09:bb:b7:ca:
dc:6b:1e:a5:31:07:57:e6:d9:b0:1b:79:fa:20:b7:
7f:46:da:15:3c:d4:28:25:35:9f:be:93:41:f4:c2:
1c:0c:e2:9a:3c:30:52:cf:54:b5:d2:0e:3a:1b:7a:
cc:a5:da:a1:f1:9d:17:a0:20:a2:26:3e:5d:04:b5:
1e:ff:ab:7b:0e:81:70:03:3a:54:e7:b7:53:4d:f8:
0c:33:54:46:e7:59:2f:22:9b:cf:d4:ed:fe:88:b2:
77:3d:80:55:e2:49:a1:c8:17:94:32:7d:8b:8f:4f:
51:7f:1e:77:f1:d5:ab:08:56:b9:a3:25:ae:2b:ff:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B8:48:BF:06:7B:E1:A6:DD:B6:E7:96:25:C6:82:2D:59:13:68:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/77hIvwZ74abdtueWJcaCLVkTaMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:69:17:db:a1:8f:45:53:e6:11:50:f0:28:cb:21:9c:a1:71:
28:a8:08:a1:c3:01:8c:e1:09:67:16:a8:a8:66:0e:4e:11:df:
e4:67:a0:0a:8d:fa:e8:96:f8:3a:f1:42:88:0f:39:ce:d9:b8:
c2:b5:60:48:d1:12:24:9d:ab:41:7e:aa:94:d9:93:4c:90:97:
a0:94:a8:5c:25:c6:01:66:d5:4d:39:17:ea:75:af:6f:ae:4a:
7e:a1:9f:af:4c:82:a1:21:9e:11:b0:31:2f:00:44:16:27:e5:
66:7b:ca:5a:13:17:d9:de:ff:f4:88:87:18:4d:22:cd:00:c1:
22:60:50:88:c3:65:74:25:59:d6:25:7e:a4:a8:13:a2:02:df:
50:e1:5a:ae:45:cc:f7:b8:b6:0b:08:0c:47:b9:d2:b4:b8:1e:
c9:84:e9:96:91:44:27:98:e9:bc:f0:d6:13:c8:32:b3:2b:07:
78:03:4e:65:57:d4:c4:02:7e:f3:32:be:20:2a:45:c0:27:cb:
8e:1b:ec:37:09:4a:ba:74:10:92:d2:87:0d:32:91:a1:16:44:
12:84:db:14:fa:a4:d2:48:b6:df:35:5a:20:4b:70:c5:de:df:
a0:37:f7:66:f4:ba:d4:10:34:6f:dd:bf:24:ee:6d:06:3a:7e:
e5:4e:7b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:15 2025 by rpki-client