Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eXgNIVJOc07Z0yon9bngZkLdd7Q.roa
File: eXgNIVJOc07Z0yon9bngZkLdd7Q.roa (raw, json)
Hash identifier: BX8R2nf7Zl1Yklh4HEKUZ+T2IybeBaUDgz8QAUc/+Ps=
Subject key identifier: 79:78:0D:21:52:4E:73:4E:D9:D3:2A:27:F5:B9:E0:66:42:DD:77:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885D53FAFD90BDD81BDBE2FC99470E54FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eXgNIVJOc07Z0yon9bngZkLdd7Q.roa
Signing time: Sat 27 May 2023 13:09:24 +0000
ROA not before: Sat 27 May 2023 13:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:53:fa:fd:90:bd:d8:1b:db:e2:fc:99:47:0e:54:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 13:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79780d21524e734ed9d32a27f5b9e06642dd77b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:9e:5a:07:1b:e7:ea:f5:52:d4:c2:1e:9f:
0b:a7:e0:64:fd:ee:3a:14:f9:00:ac:bf:6e:b9:2c:
8f:3a:6a:f9:cb:3a:89:4a:70:da:ad:79:61:3d:f9:
d6:30:53:ae:2c:0f:e3:0a:be:08:f2:81:ac:39:46:
e9:af:dd:aa:20:d0:3d:cb:a6:9a:4f:7f:86:c0:7c:
04:11:d3:e9:7e:22:e6:b1:e3:65:b5:e6:30:3d:f2:
91:a6:22:da:bf:59:1e:67:e2:0a:b7:15:da:ee:ac:
ae:02:6b:c4:26:3b:5a:6d:09:ee:1a:6a:b5:70:16:
d5:a8:73:c9:90:ff:1d:38:b4:c3:d3:d4:65:bc:85:
d2:39:8f:8b:29:c4:ac:34:a9:7d:84:d9:49:3c:be:
e4:0b:1a:e9:32:26:6b:85:c0:5a:1d:7b:6d:39:ce:
b1:b2:4a:21:8e:2e:05:ed:e2:24:1d:15:9d:9a:57:
67:fe:ca:27:40:08:9b:8b:d2:cf:9b:94:9b:75:f8:
6b:b5:13:33:80:6d:b8:61:c4:f5:25:f3:fa:a6:87:
a1:87:4d:d7:1b:df:d7:c0:c5:c0:e9:d8:9b:8d:19:
4e:ad:e3:b3:e6:b6:31:96:5a:92:9e:c0:c3:97:c0:
43:f7:0c:48:c8:3b:eb:fa:5e:bf:27:da:36:6d:5d:
95:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:78:0D:21:52:4E:73:4E:D9:D3:2A:27:F5:B9:E0:66:42:DD:77:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eXgNIVJOc07Z0yon9bngZkLdd7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:b9:94:25:d1:fb:c5:3e:b6:bb:69:2e:ed:cd:a1:69:9f:3d:
01:78:b7:95:50:55:a3:a4:eb:ed:55:02:08:de:33:93:6c:57:
d7:cc:1a:61:bd:c1:3d:24:97:fb:e7:af:d4:ff:d7:56:36:8f:
fd:3a:63:42:92:83:bf:c3:5f:4f:17:11:e5:d2:55:23:dc:c3:
65:96:65:87:5f:e1:1f:d9:75:61:f9:20:70:b9:5f:b8:37:c3:
0f:c8:76:fa:2e:5e:d5:3c:9d:e2:77:c9:65:e2:84:5a:00:5f:
3f:40:32:2e:99:9a:f3:00:80:0a:fb:a2:52:66:9c:87:56:b5:
69:1c:3a:65:49:c6:45:76:d7:a5:82:43:df:8c:2b:72:3e:25:
66:af:44:ad:3a:be:9a:ec:d3:27:bb:34:a8:08:19:16:fb:7a:
f2:45:38:67:be:92:ba:e6:d9:2d:33:5a:9a:8e:7a:ca:80:fd:
79:bc:de:83:ad:8c:9c:df:9d:d1:aa:4b:19:8b:1b:eb:68:cd:
03:01:49:54:45:4b:6f:98:e6:5b:75:ca:70:9a:db:44:72:c9:
03:52:8f:d7:64:f5:9f:c2:73:6a:32:85:ef:ad:43:f2:31:e4:
34:eb:a0:2b:e2:5f:a6:54:0c:6b:fe:d5:d3:2e:91:d5:be:e7:
fe:17:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:20 2025 by rpki-client