Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/78w6gF4ShpSfwAe0Duuh8ECLsF8.roa
File: 78w6gF4ShpSfwAe0Duuh8ECLsF8.roa (raw, json)
Hash identifier: Xa17pZw1HzxvAg8PyseOmGFejEHQ89nGu+ymHRCpBPg=
Subject key identifier: EF:CC:3A:80:5E:12:86:94:9F:C0:07:B4:0E:EB:A1:F0:40:8B:B0:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B73C032F9DD68A8CDA9F30870A59E30D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/78w6gF4ShpSfwAe0Duuh8ECLsF8.roa
Signing time: Wed 14 Jun 2023 00:09:03 +0000
ROA not before: Wed 14 Jun 2023 00:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b7:3c:03:2f:9d:d6:8a:8c:da:9f:30:87:0a:59:e3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 00:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efcc3a805e1286949fc007b40eeba1f0408bb05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:e3:8b:d2:ae:5b:7a:a8:b3:af:a4:c5:67:
49:64:9e:1a:fa:b2:00:1c:95:5b:3d:ae:36:21:e0:
15:be:53:e0:c9:1f:ca:46:38:a2:64:e9:da:b4:a2:
79:22:5b:d7:35:13:21:ea:2a:5f:21:e8:d4:f2:d0:
6a:33:6a:e7:6c:ee:61:1a:5c:14:ca:63:9f:55:a8:
99:9b:33:66:68:75:68:a7:ef:f8:48:4f:36:e1:de:
e4:21:3c:9e:14:90:76:5a:d2:01:0f:89:1c:70:16:
fd:9e:e7:15:41:ee:dc:cc:a7:49:1c:7e:dd:84:43:
6d:fa:30:a9:d8:c0:0b:a4:8f:7e:4f:27:fc:2d:06:
cb:8c:0a:5a:cb:d1:3f:1c:10:49:ec:b8:1f:96:3b:
10:e2:73:72:53:85:d3:93:3e:94:d1:cd:c0:6c:93:
d3:9e:a4:9a:e7:3d:19:b7:79:e4:f9:da:4d:18:2e:
ca:2d:82:cb:48:0f:40:ff:65:ab:40:40:9b:73:6f:
04:99:4c:c5:8b:9d:42:d9:87:43:fa:04:e9:dd:2a:
2c:54:b2:f0:1f:87:49:c8:f0:85:9a:13:6e:4a:5f:
16:a0:93:8a:42:56:61:5b:39:3d:2c:65:3e:25:35:
23:60:19:da:3d:9b:2b:ef:f9:80:21:6a:a1:d6:12:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CC:3A:80:5E:12:86:94:9F:C0:07:B4:0E:EB:A1:F0:40:8B:B0:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/78w6gF4ShpSfwAe0Duuh8ECLsF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:b2:7e:85:59:93:49:7e:2b:22:22:43:0e:da:94:18:96:4f:
d6:0a:04:e0:46:38:a9:54:db:05:6d:aa:e7:bc:5b:f0:df:69:
af:ec:94:ac:8e:95:3a:fd:4d:e0:e0:25:c1:b6:69:35:6e:22:
bd:97:13:26:64:bd:9a:40:e1:ed:2b:cf:79:90:1c:ba:61:d2:
e4:dc:ec:e0:d4:68:59:4d:e2:be:a4:f3:01:b7:8c:77:ef:2f:
81:9f:19:f8:61:06:79:86:b3:d4:dc:3a:c5:d7:54:38:2a:c2:
a8:64:b5:b3:9b:07:11:80:66:e3:d2:23:72:7c:3c:5a:46:8f:
78:2d:c0:78:64:f8:6b:9e:24:a9:b8:21:22:91:29:51:a8:36:
f6:0d:75:c4:79:9d:00:a6:b1:e4:8d:a6:19:4d:45:4e:7a:b5:
5f:3b:a5:ea:8a:4b:f9:e4:83:13:ca:f9:c2:56:d7:58:7c:4a:
70:e0:07:51:1a:87:d4:ab:43:e0:81:0b:c3:74:fd:b5:17:73:
35:da:92:79:36:e8:98:b5:12:8f:09:71:46:29:78:9e:c8:e9:
19:4f:c1:e9:f4:fd:79:7a:98:d5:bc:91:16:3a:59:6d:d5:fc:
e0:d6:4e:21:70:2f:d1:d9:42:1c:e8:fb:0a:5d:08:c7:b9:a6:
ad:14:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:25:26 2025 by rpki-client