Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eattM9x8WaZtpb-xfnwcsAwsi78.roa
File: eattM9x8WaZtpb-xfnwcsAwsi78.roa (raw, json)
Hash identifier: XzHQGT4AstqMGai5WZ4sVTIIWDJdCezlFDFdgHjohIo=
Subject key identifier: 79:AB:6D:33:DC:7C:59:A6:6D:A5:BF:B1:7E:7C:1C:B0:0C:2C:8B:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 675B9206
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eattM9x8WaZtpb-xfnwcsAwsi78.roa
Signing time: Thu 03 Feb 2022 01:09:24 +0000
ROA not before: Thu 03 Feb 2022 01:09:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1734054406 (0x675b9206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 01:09:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79ab6d33dc7c59a66da5bfb17e7c1cb00c2c8bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:3a:cf:de:a0:12:ff:6d:f5:1e:c3:db:48:
94:c3:a3:82:fc:c5:d5:12:bd:aa:b7:78:eb:7b:a8:
21:ad:70:86:ed:dd:54:15:9e:d8:cf:30:78:88:86:
c7:b9:eb:43:fb:84:e0:c0:f3:a3:42:b1:72:59:a3:
60:72:69:fa:15:6e:67:c8:92:6d:bf:f8:82:d0:5e:
29:d5:d4:47:42:b9:b7:88:3c:6a:ab:26:5a:51:6e:
aa:38:34:41:62:94:3b:8f:3f:c0:b9:e1:3d:3c:72:
72:3d:9d:6d:43:e8:e3:e5:31:fe:f3:ab:9c:a9:0f:
5e:8d:18:4e:79:41:af:28:1b:67:22:75:03:0a:ce:
5d:f7:51:c0:b0:40:db:a3:ba:28:bb:c2:8f:13:40:
7a:e8:4f:d0:26:26:4f:c5:73:18:b9:f1:4f:b9:a7:
b4:27:65:61:57:55:8b:4f:e7:47:e9:4c:35:4d:e9:
f3:df:79:a4:89:38:67:23:2c:db:4b:a7:86:1f:44:
6d:47:dd:77:97:2f:df:63:9e:50:4b:89:16:61:98:
e3:54:c4:55:89:fa:db:2f:31:bd:73:26:6a:46:80:
07:49:bb:0c:3e:df:c3:6b:c6:74:b3:54:83:98:49:
4d:58:4c:d6:0b:b8:bf:d8:3c:f7:62:a7:dc:a2:b9:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AB:6D:33:DC:7C:59:A6:6D:A5:BF:B1:7E:7C:1C:B0:0C:2C:8B:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eattM9x8WaZtpb-xfnwcsAwsi78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:bb:5f:3a:cc:82:90:0b:b4:25:8f:ed:22:ac:c9:cc:bc:83:
f8:2c:63:5c:a6:76:8b:b9:04:89:f3:27:b7:26:ea:2c:8f:b8:
4b:9c:77:3b:e7:14:c2:97:5f:17:f0:2c:b0:12:4a:e8:0e:bf:
18:dd:92:ab:87:7c:10:1a:a1:a4:70:99:4a:77:ec:9b:7c:eb:
94:3d:93:a6:b8:fe:78:53:b1:cd:8e:4a:2f:c5:ac:3f:cb:38:
f9:8b:da:43:e1:13:9b:7d:1f:d8:fa:70:fa:09:71:b6:d2:26:
9d:60:28:41:6a:84:15:43:73:06:ce:c0:64:f7:b9:64:9f:fa:
59:d7:32:ff:c5:62:a3:b9:72:5e:0f:a6:cc:57:24:41:d2:c7:
b7:89:8b:3b:2e:bc:cb:60:f7:1f:aa:a8:95:ef:02:22:ef:47:
e5:53:61:90:6a:34:e0:b9:fe:5f:f3:bf:15:ae:14:6d:85:a5:
c8:93:28:9a:b7:54:d6:fc:b4:f5:cc:0d:67:bf:57:ed:b2:83:
99:da:cb:ab:bd:de:a5:08:ef:ef:7d:3e:87:0f:f9:13:c9:4f:
2a:1c:d7:52:8d:62:45:2c:07:52:e2:a2:a2:dd:9b:eb:23:25:
c4:69:4b:8d:a2:e1:76:57:45:22:d8:94:ff:23:c9:db:c6:61:
06:89:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:48 2025 by rpki-client