Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/79mRBFRFTrALGGvQ371FHG-HeN0.roa
File: 79mRBFRFTrALGGvQ371FHG-HeN0.roa (raw, json)
Hash identifier: qaE62zQMjF8lR2PYcrgA1r8MVMPdT/dUN959DWMYcDU=
Subject key identifier: EF:D9:91:04:54:45:4E:B0:0B:18:6B:D0:DF:BD:45:1C:6F:87:78:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FC1F7A83415D0962A5593D167167294F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/79mRBFRFTrALGGvQ371FHG-HeN0.roa
Signing time: Wed 16 Aug 2023 02:14:28 +0000
ROA not before: Wed 16 Aug 2023 02:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fc:1f:7a:83:41:5d:09:62:a5:59:3d:16:71:67:29:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 02:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efd9910454454eb00b186bd0dfbd451c6f8778dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:4e:72:1e:2a:1d:bc:4a:18:0c:b6:c4:f9:
91:b3:bd:f0:58:c0:7f:3c:d7:0f:ac:be:53:b6:db:
e6:ea:e8:e1:04:27:22:1b:f2:3e:3c:3c:57:77:28:
8e:51:b8:66:d7:c2:ae:03:20:d6:00:f8:4a:05:92:
e5:3f:f9:76:af:4b:6e:ff:da:72:dd:69:9d:0c:06:
af:a2:51:71:95:a4:2d:9e:47:76:6a:bb:ec:92:0c:
1d:53:19:72:2b:b3:11:8b:32:f8:39:79:77:80:c4:
b2:64:68:8f:8e:61:72:d2:61:80:dd:4c:56:c1:c7:
98:53:34:16:32:38:19:c6:4a:2f:67:dc:5c:28:a7:
b6:2f:6c:3d:d2:20:a3:23:a3:24:98:2a:82:98:d0:
c6:f3:b5:9f:f7:34:61:d4:ab:37:33:75:03:8a:82:
8d:92:4a:f4:20:0d:8d:36:7a:a3:3e:97:76:09:46:
4e:69:0c:1b:cf:2a:5d:36:14:b8:b9:fb:07:8a:6d:
3b:a0:3b:3a:95:4e:dd:0c:d8:31:93:0e:29:e0:c8:
4b:71:cf:64:67:b2:eb:51:69:cc:7e:bc:74:2c:bc:
0b:34:3a:b5:8d:78:63:13:65:eb:b0:9c:95:71:27:
9a:82:69:99:cb:63:15:77:10:39:0f:05:3e:4a:04:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:91:04:54:45:4E:B0:0B:18:6B:D0:DF:BD:45:1C:6F:87:78:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/79mRBFRFTrALGGvQ371FHG-HeN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:43:15:8d:bd:6e:8c:ea:fd:d9:37:99:16:f7:d7:52:f0:95:
24:5c:d0:1b:4f:d2:1a:af:7b:a5:1c:fa:ae:d1:75:57:67:3c:
69:0f:f3:a8:df:de:be:ae:3c:7a:3d:c8:ba:85:fc:37:6b:35:
27:3d:e7:40:b3:c9:1b:b7:fc:e8:c2:c0:a1:0f:1d:90:72:9d:
61:1b:f9:7e:e3:ea:d5:2e:b9:15:cd:26:71:88:f8:fd:56:a7:
3d:eb:5b:3c:02:60:11:13:76:08:97:25:02:ad:ec:54:d8:01:
0f:9b:99:98:69:d5:3d:6f:f4:8c:6b:09:59:f2:19:12:03:2b:
16:9f:21:08:f4:9a:ed:0f:5e:32:41:16:25:07:6b:65:95:59:
ef:3d:03:c1:17:2d:98:48:03:3b:7f:54:8d:97:07:50:fd:47:
5b:c3:8e:62:59:19:ae:d7:62:03:df:47:7e:12:43:f7:8b:3d:
23:9d:6d:d3:28:c4:21:ce:09:4d:2b:44:2e:56:2f:e2:eb:8f:
69:1f:ae:fd:21:c1:e2:36:81:72:17:86:29:6a:e1:24:f5:fa:
aa:a3:dc:eb:44:70:6c:db:cd:73:21:cd:2c:30:ce:2d:fc:94:
e9:70:b4:1e:e2:b4:c1:a8:ef:5f:30:97:bc:4b:b6:49:06:b3:
b3:f3:46:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:27 2025 by rpki-client