Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/effwkNXtZrcvKMzLn8PQZ6QOT1Q.roa
File: effwkNXtZrcvKMzLn8PQZ6QOT1Q.roa (raw, json)
Hash identifier: z3rDqBThw8lLautxzlBK0DamApwE2Yi1lr5un28fWHM=
Subject key identifier: 79:F7:F0:90:D5:ED:66:B7:2F:28:CC:CB:9F:C3:D0:67:A4:0E:4F:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866D739836CE04EAB162461758648236C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/effwkNXtZrcvKMzLn8PQZ6QOT1Q.roa
Signing time: Mon 20 Feb 2023 06:12:17 +0000
ROA not before: Mon 20 Feb 2023 06:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:73:98:36:ce:04:ea:b1:62:46:17:58:64:82:36:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 06:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79f7f090d5ed66b72f28cccb9fc3d067a40e4f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:5d:d0:62:39:64:1a:88:98:43:05:fe:a2:
63:dc:ce:de:b1:89:c7:95:3b:e7:eb:2b:57:21:9a:
14:8b:cc:86:af:ef:5d:b6:10:78:c7:d8:87:e4:e1:
df:e4:e7:de:9f:fe:a4:7e:3b:12:c9:9d:85:e5:e2:
ca:02:a7:97:bb:85:42:fc:7d:40:ab:1e:2f:d3:9b:
ab:91:20:79:98:c5:2f:f8:63:1b:fd:63:7f:55:2e:
38:1a:be:30:8f:d0:f6:bd:e9:f2:7a:1a:b0:bf:ee:
77:66:83:cd:04:bf:27:07:05:77:6f:71:d6:aa:37:
dc:a8:79:25:06:0b:6d:89:8b:f6:d5:df:79:37:ea:
9f:1b:82:fe:54:9d:9c:ec:d0:39:e4:e0:37:cf:8b:
bf:ec:ef:94:82:57:54:e6:10:89:5e:fe:8e:ea:06:
49:2f:3c:69:ca:47:b1:dc:68:7c:b1:6d:cd:57:4a:
c9:c4:21:c6:8d:da:5c:a3:54:19:f6:5d:8c:1b:71:
38:86:a1:e7:7c:d7:55:f8:4b:d2:2a:2b:e2:bf:57:
ce:77:93:6a:e8:47:7b:f6:f8:6e:db:4a:63:77:06:
1f:20:0e:5b:1b:48:2c:1c:32:45:a8:c7:ba:d6:58:
7c:27:7e:19:a3:1e:02:40:c2:1e:d1:a9:74:e9:be:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:F0:90:D5:ED:66:B7:2F:28:CC:CB:9F:C3:D0:67:A4:0E:4F:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/effwkNXtZrcvKMzLn8PQZ6QOT1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:8f:8e:28:ae:01:5c:c6:5d:0a:9d:d4:ca:30:b5:e9:b3:80:
f0:b5:f5:5c:72:b3:1a:21:ad:75:4d:f7:7b:42:b7:fe:a9:0b:
a9:33:1d:a2:bf:d7:ea:d6:05:94:dc:eb:8b:6b:5d:db:73:da:
40:57:a8:3c:c0:9b:2b:e7:2a:c1:83:4f:00:81:2d:2c:0a:ca:
9d:17:1b:8b:ae:64:68:5d:e2:5b:e0:4a:0e:6c:2e:2b:9c:1a:
26:eb:d3:a2:79:00:53:4c:66:16:a7:fa:d1:45:60:ea:aa:c3:
08:a7:33:79:9c:7c:b5:75:79:a1:d5:cb:91:76:19:c3:88:4b:
cd:f2:f8:01:5d:f1:99:24:51:56:3d:27:22:43:c0:86:61:f7:
99:88:82:fa:e6:fc:d0:8f:b8:f8:f8:8a:d1:0f:31:64:1c:bd:
9e:07:c9:ed:f7:a2:37:8e:0b:e6:0d:c7:85:9e:a5:9f:d0:18:
6e:a9:c6:f0:c5:fa:cf:b7:88:07:f3:47:27:79:bc:0a:33:81:
88:8f:59:89:21:e4:45:8a:ee:eb:24:46:6f:3c:5e:23:f7:0e:
d9:1b:04:05:47:0a:da:67:b1:ce:ba:f4:53:ce:f2:60:dd:d3:
d6:89:23:32:4e:4c:0b:e4:f2:9c:a6:4c:35:ad:5a:7b:ef:4c:
6b:74:0d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:08 2025 by rpki-client