Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x79MyMJ3KWgTnvtZeKn2j1JtaLs.roa
File: x79MyMJ3KWgTnvtZeKn2j1JtaLs.roa (raw, json)
Hash identifier: wiGDgF8id7OQ56mVG9BQ5ykes6VStZ4Nm/9Av3nf9j4=
Subject key identifier: C7:BF:4C:C8:C2:77:29:68:13:9E:FB:59:78:A9:F6:8F:52:6D:68:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826C36223E30B3E99807BE9EFA7E52DC9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x79MyMJ3KWgTnvtZeKn2j1JtaLs.roa
Signing time: Fri 05 Aug 2022 04:14:23 +0000
ROA not before: Fri 05 Aug 2022 04:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6c:36:22:3e:30:b3:e9:98:07:be:9e:fa:7e:52:dc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 04:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7bf4cc8c2772968139efb5978a9f68f526d68bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:60:9a:d3:40:6d:af:72:76:13:53:9c:7a:
c8:bc:10:a9:a0:85:b5:4c:2a:22:88:12:88:cb:b3:
89:20:48:bb:42:b3:6c:fb:cc:7e:04:ca:35:ff:c9:
95:c2:59:b1:d9:74:a7:1f:ae:d5:ec:62:48:7d:e8:
2d:31:76:63:83:bf:29:01:49:af:7d:c1:ae:30:c7:
d8:26:48:10:b4:73:d5:20:a6:93:42:18:0a:15:96:
29:e3:33:b9:1e:7e:20:f6:fc:66:39:76:86:93:fd:
29:00:72:f6:bb:11:29:5c:4d:a0:e6:2f:a3:24:51:
4c:74:b8:fb:23:99:30:eb:74:ed:b4:33:14:73:54:
89:70:fd:2b:f9:5b:97:73:08:7f:79:05:de:93:dd:
12:2a:44:42:50:d9:91:0c:01:bc:91:60:29:3e:2a:
91:02:35:24:65:c3:5c:1b:b7:07:92:2b:16:23:3b:
6e:34:22:45:1e:7f:db:14:73:bc:01:b7:a0:75:40:
58:55:24:16:15:53:1c:50:01:f8:dc:35:b3:46:18:
09:87:e6:b6:3c:92:bc:7a:14:36:2f:27:66:77:de:
50:a8:d2:61:30:e1:d5:19:80:ed:18:d1:ed:28:e3:
9f:26:77:58:f8:71:20:74:b7:22:70:08:2c:83:49:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BF:4C:C8:C2:77:29:68:13:9E:FB:59:78:A9:F6:8F:52:6D:68:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x79MyMJ3KWgTnvtZeKn2j1JtaLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:af:a3:0d:9d:58:f2:18:d7:26:38:ea:30:31:a1:5d:ff:86:
63:8a:1a:a3:33:49:af:4f:74:0f:56:e8:29:5b:40:e4:15:c9:
e0:37:d5:3a:c4:8f:e8:93:66:14:10:43:ff:de:19:56:b3:65:
e8:2d:ef:c3:bf:a3:d5:07:0e:a8:4d:2e:8d:70:bb:ea:45:88:
42:44:bf:32:3b:2c:39:14:7a:c0:bf:b4:7e:50:30:73:d5:b6:
19:c0:93:48:9e:ed:58:c4:a0:06:95:d8:a6:ff:11:4e:9d:34:
ed:6a:b1:09:da:1d:d0:18:b8:c5:c3:0b:96:eb:05:41:f4:01:
7d:8b:61:55:04:2f:15:17:a4:d9:41:fe:18:53:c3:5b:00:43:
a2:0e:5e:42:c7:0e:b8:77:81:aa:67:c5:83:aa:42:3b:aa:87:
f6:4f:b4:64:ef:45:5d:a9:40:8a:82:40:3e:c8:c4:71:1c:89:
54:f7:53:2f:8b:3b:bf:77:07:27:6e:cf:9e:93:74:70:51:17:
66:ab:d6:ff:ef:f4:0e:7a:ac:91:2f:bc:57:ba:7c:2d:a2:fe:
c1:48:fc:14:8e:4d:4b:53:39:b5:f4:57:85:75:07:7c:d6:2a:
a6:67:f1:52:85:2c:c0:f0:c0:49:12:5b:c6:43:44:22:55:4d:
47:a9:5f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:10:22 2025 by rpki-client