Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/78X-bmMjv50ebvyhleG53DpddHQ.roa
File: 78X-bmMjv50ebvyhleG53DpddHQ.roa (raw, json)
Hash identifier: J5warFniysW69CCz83CbcB4vPcgjgjUC+rkf667ddGQ=
Subject key identifier: EF:C5:FE:6E:63:23:BF:9D:1E:6E:FC:A1:95:E1:B9:DC:3A:5D:74:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F35EB67DFCFC034E01E9FB7483E5666F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/78X-bmMjv50ebvyhleG53DpddHQ.roa
Signing time: Thu 08 Dec 2022 20:13:01 +0000
ROA not before: Thu 08 Dec 2022 20:13:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f3:5e:b6:7d:fc:fc:03:4e:01:e9:fb:74:83:e5:66:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 20:13:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efc5fe6e6323bf9d1e6efca195e1b9dc3a5d7474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:36:ce:3a:d7:14:e9:51:95:ea:1d:2d:e2:
fd:d9:78:fb:37:a3:14:22:80:53:ea:3b:4f:b0:36:
bc:bc:d3:24:f4:cd:5f:f6:4e:55:09:56:0c:9e:70:
e8:2d:f3:4e:df:bc:d2:ce:6a:54:58:06:90:b7:ec:
18:fc:10:64:36:29:a3:6a:8e:ed:1a:d2:a3:cc:d6:
44:5e:7a:74:08:01:13:d1:f3:aa:ab:c4:a7:9d:32:
65:d0:3c:be:f6:44:ce:b3:fb:63:71:f9:f4:f7:b7:
c8:6f:a3:31:9c:42:d4:14:08:28:ad:27:04:dc:c2:
7c:90:55:61:de:64:de:cc:4a:45:93:36:1e:12:12:
05:17:c8:cf:18:0d:43:66:af:a0:8a:0a:0d:74:77:
b4:4f:ea:69:50:6a:19:44:2d:3f:f9:4e:84:57:f0:
d8:f2:91:c5:ad:4f:79:c6:b9:5a:48:9e:a8:dc:a3:
2c:0f:fe:5f:92:af:9b:e5:71:e1:72:87:8d:23:bd:
ff:5d:68:44:74:f6:a0:d2:d1:9e:5a:df:6e:98:67:
fc:6c:5d:7d:1f:76:11:be:1f:00:1c:fb:6e:66:fa:
76:f8:12:18:c5:0e:9d:96:0a:b5:c0:1e:c6:14:dc:
cd:ce:66:18:63:36:7f:90:4e:2b:4b:4e:21:1a:d6:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C5:FE:6E:63:23:BF:9D:1E:6E:FC:A1:95:E1:B9:DC:3A:5D:74:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/78X-bmMjv50ebvyhleG53DpddHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:c7:0a:d9:94:13:d5:0b:7c:20:c3:90:e0:c9:eb:78:45:1b:
d2:e9:93:63:2d:30:2b:d1:bd:21:51:0f:1d:d4:75:74:cd:9e:
26:00:cf:89:72:38:89:77:c1:0a:ef:1d:b7:64:e7:72:52:54:
6c:f3:fc:bf:a5:b3:81:a7:b9:15:87:fa:58:01:5b:57:73:7c:
b8:09:78:f1:93:81:c5:03:13:9b:c2:47:cb:6d:c5:e9:7e:41:
b1:f5:ba:15:d0:86:89:e4:cf:86:09:e4:8e:d9:53:c4:4f:9f:
b6:ab:dd:74:98:cd:d5:6c:0d:96:d2:80:a2:a6:e1:1e:29:1d:
92:fc:68:0f:b8:4b:06:5e:f5:20:e4:50:0e:a6:04:d1:36:cd:
36:cd:3e:fc:95:2b:b9:bf:2b:42:97:4f:0b:02:2b:59:2b:f3:
e2:e6:09:35:5f:6c:78:97:83:07:4e:75:23:a6:8d:5d:9e:57:
2b:7b:2c:28:71:df:65:27:93:35:ee:11:e4:e5:4a:64:7e:1c:
11:c8:ab:b0:6d:c9:ae:42:7d:60:7d:2f:6b:e7:a1:5e:50:da:
8f:3d:0c:66:7c:4a:9b:d0:d5:ab:fa:13:b2:70:fe:4f:3c:be:
de:82:ab:07:88:73:4e:f6:fc:06:a9:b9:7d:a5:4d:e1:d9:57:
87:04:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:54:52 2025 by rpki-client