Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/677ABS_XJncPsiAJt7jj4KE0u4k.roa
File: 677ABS_XJncPsiAJt7jj4KE0u4k.roa (raw, json)
Hash identifier: KV6iwAaitjXrM48WPkIyZS2tkAuqvcv7CIREi3s0zC8=
Subject key identifier: EB:BE:C0:05:2F:D7:26:77:0F:B2:20:09:B7:B8:E3:E0:A1:34:BB:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873495A300D1741098F48A353797C000A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/677ABS_XJncPsiAJt7jj4KE0u4k.roa
Signing time: Thu 30 Mar 2023 22:13:54 +0000
ROA not before: Thu 30 Mar 2023 22:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:34:95:a3:00:d1:74:10:98:f4:8a:35:37:97:c0:00:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 22:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebbec0052fd726770fb22009b7b8e3e0a134bb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:f5:83:55:51:91:1f:62:3c:be:15:3b:46:
d7:ba:85:36:a3:2a:8d:21:8e:bd:02:78:97:f6:6a:
ee:9f:5d:98:0e:f2:c4:ba:d8:af:ef:78:13:06:40:
d5:05:29:aa:17:32:26:d7:f8:33:43:37:5f:6d:93:
31:6b:1c:5b:cc:5c:bb:c1:47:8a:dc:92:a8:f8:f4:
6f:40:d7:db:63:04:50:ee:92:45:37:d3:98:56:f9:
02:bd:d0:bb:f9:0e:df:78:84:67:9a:45:67:0a:e7:
4d:7f:44:e2:e9:8e:52:98:a0:1f:0a:8e:2f:a7:25:
a8:29:d8:5c:bc:48:14:e3:4e:27:5f:34:1e:18:b5:
3c:47:16:a0:a7:30:5d:2e:4e:e5:76:21:7d:de:c1:
ff:7a:e1:34:ff:67:17:fd:96:55:45:e5:02:7c:fa:
bd:60:44:64:a7:fa:ff:7c:e1:50:14:88:64:ce:bd:
20:36:3e:c4:3e:2e:c0:37:07:c1:f6:bb:81:66:ba:
6a:21:9a:54:57:32:3f:f3:07:d4:0e:97:13:e3:62:
69:98:e5:31:c1:40:e6:c5:52:df:2c:69:ca:d2:48:
8a:db:45:be:af:f3:f8:c8:75:2b:8a:43:b5:f5:74:
a9:3a:9a:ca:5c:99:2e:77:25:6a:fd:2e:99:78:94:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:C0:05:2F:D7:26:77:0F:B2:20:09:B7:B8:E3:E0:A1:34:BB:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/677ABS_XJncPsiAJt7jj4KE0u4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:11:70:43:37:93:ad:51:50:24:b4:2c:ba:16:ef:43:e8:c7:
c1:7b:a8:ea:12:80:72:28:b2:20:d0:b1:97:c9:11:77:0b:a9:
6b:77:2b:04:ae:10:5f:0c:94:ae:e3:a0:59:80:0d:b3:68:81:
5b:59:44:f5:52:27:bb:ce:97:95:ee:19:5e:2f:01:e4:a7:3b:
76:81:f5:c5:39:12:8e:16:8c:96:4c:e7:73:8b:f5:6b:06:ee:
32:48:d4:07:16:5d:57:35:12:1d:4d:65:bd:19:8a:f9:71:6e:
a4:60:1b:17:c5:f2:89:5e:83:36:54:bb:59:89:e7:1e:66:d8:
da:c4:fa:e3:e8:bd:0f:fc:88:2b:1c:81:9e:29:17:15:e6:35:
ee:68:13:03:ca:ec:e0:a6:f3:0b:19:52:54:80:2d:be:ba:68:
ef:df:28:c2:82:e7:3c:21:a3:9e:99:84:38:98:e5:b2:31:a3:
f9:5e:88:fe:aa:99:a9:ff:dc:91:a0:ed:c3:e2:2d:49:cd:c9:
42:65:29:e0:80:dc:82:53:f0:57:6f:c7:e2:75:b4:ea:dd:f7:
ac:c7:98:df:98:1c:ed:35:32:0f:b6:4d:05:81:2c:dd:ba:88:
7d:f4:f9:33:89:34:7b:64:06:c1:17:bf:cb:a0:bb:40:82:c2:
94:2a:bc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:02:03 2025 by rpki-client