Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ec79kXndPKDErGFEpqKLQVlZWdA.roa
File: ec79kXndPKDErGFEpqKLQVlZWdA.roa (raw, json)
Hash identifier: PaH3NONQVSn0AZnadSKAJfcicnoqF+NlvgK36Jtkc3o=
Subject key identifier: 79:CE:FD:91:79:DD:3C:A0:C4:AC:61:44:A6:A2:8B:41:59:59:59:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F7A8298
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ec79kXndPKDErGFEpqKLQVlZWdA.roa
Signing time: Fri 04 Mar 2022 03:08:03 +0000
ROA not before: Fri 04 Mar 2022 03:08:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870299800 (0x6f7a8298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 03:08:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79cefd9179dd3ca0c4ac6144a6a28b41595959d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:2a:cb:c7:bd:bf:6f:98:a2:45:6f:94:f0:
c4:7e:ac:ca:e7:f6:9f:92:3f:9f:12:29:5e:69:db:
da:0b:9f:eb:ca:2b:d5:af:92:35:66:85:46:af:4c:
20:61:5f:9d:7b:18:89:0a:93:75:a4:a1:fe:42:d3:
13:41:2f:2e:4a:02:09:90:13:f5:db:b8:bf:12:b1:
dc:e8:05:4b:4d:e6:32:2e:fd:d5:29:91:1a:74:65:
22:5e:43:39:26:af:89:3e:fe:98:3d:75:e4:89:a6:
84:a5:30:7e:28:bf:40:8b:7d:f3:c9:e0:bc:b9:f7:
99:ab:50:c4:9f:89:72:35:28:0a:bf:e3:be:7d:36:
75:7b:6d:7c:95:cf:7d:8e:f7:f1:a6:6e:ae:5c:83:
bf:5d:5d:f3:aa:cf:91:f6:45:07:91:a6:d3:f1:32:
1a:b9:40:50:80:99:64:f0:f6:36:d2:9d:df:7e:05:
d6:72:c8:a8:32:bc:3f:bd:51:de:11:d1:98:a8:dd:
6a:40:e4:58:fd:16:fb:e7:5a:c9:26:00:42:74:f8:
c4:1d:af:dd:1f:13:94:d7:ce:8b:5f:14:d8:66:55:
f5:3a:14:22:d6:cd:a0:bd:1b:cc:d3:c4:10:ae:b4:
f6:21:dd:bd:75:16:42:5f:9c:4e:ca:39:81:37:78:
96:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CE:FD:91:79:DD:3C:A0:C4:AC:61:44:A6:A2:8B:41:59:59:59:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ec79kXndPKDErGFEpqKLQVlZWdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:4e:5d:8a:d0:65:63:5e:c9:fd:1c:01:53:ca:ab:d3:5f:77:
be:c0:2e:d2:ad:5a:41:91:51:05:72:df:27:f4:82:97:13:28:
47:2c:2c:4a:be:3f:8b:2f:9a:8e:56:8f:33:96:e6:22:b1:67:
14:c0:ba:ba:b8:04:50:d9:f8:ca:da:af:ab:69:2e:f0:e7:df:
da:db:21:d4:18:85:74:c2:ba:74:8a:d1:45:d2:82:28:ca:71:
59:2d:07:04:47:7b:c8:48:88:2f:00:d2:d5:3d:2c:3b:83:f1:
92:8b:8a:ee:f8:46:62:f3:c2:3d:44:15:08:8e:6c:43:d0:69:
0f:b1:7c:d1:68:f8:a8:15:6f:b0:dd:66:a3:25:14:2b:f3:55:
e0:16:93:09:49:c2:1e:40:a1:a7:bc:54:a0:94:f6:2d:89:ef:
b9:a0:61:79:a0:34:83:42:3d:da:56:65:7a:a7:e8:dd:64:28:
3d:71:25:0a:9a:b3:7f:e8:31:06:b0:f2:50:f2:1e:0e:00:3b:
2d:31:3e:73:a3:95:11:0c:71:17:a7:c8:e3:4c:7e:73:78:8e:
eb:77:90:79:03:eb:7e:87:10:9a:cd:1d:be:45:f1:eb:aa:a3:
69:47:4d:27:ae:28:54:5f:ff:0e:60:9f:8e:df:ca:f5:02:07:
71:2a:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:10:18 2025 by rpki-client