Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/35CPXZf9kfgMn2byzRrNuHMAJ4c.roa
File: 35CPXZf9kfgMn2byzRrNuHMAJ4c.roa (raw, json)
Hash identifier: wy8qyECvG8HTO/bkR8nIF+vRPlS/hm1va5bi895jOyU=
Subject key identifier: DF:90:8F:5D:97:FD:91:F8:0C:9F:66:F2:CD:1A:CD:B8:73:00:27:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826EF716D0A0EF75670766701E44DA4F30
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/35CPXZf9kfgMn2byzRrNuHMAJ4c.roa
Signing time: Fri 05 Aug 2022 17:04:23 +0000
ROA not before: Fri 05 Aug 2022 17:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:6ef6:d82b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6e:f7:16:d0:a0:ef:75:67:07:66:70:1e:44:da:4f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 17:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df908f5d97fd91f80c9f66f2cd1acdb873002787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:de:3f:86:16:78:ab:40:62:a0:b2:63:9a:
d2:ed:1a:1d:64:a9:c6:3b:e5:eb:6d:fd:1a:e6:64:
4a:fe:35:e7:0b:84:c5:0c:ae:bd:d6:89:44:b3:be:
56:ca:57:1a:9b:44:ab:29:8f:97:1c:8f:c3:d6:43:
0d:5c:f5:c1:99:08:f0:62:99:63:0b:d7:19:34:b9:
3b:06:28:c6:d0:af:6b:38:3b:07:f6:49:b9:3b:9a:
5c:cc:9a:2f:bc:6e:30:b6:eb:05:63:fd:f4:b0:e6:
8f:67:b1:6d:9c:fc:80:bb:9f:34:b8:0b:69:d9:51:
ba:8f:0a:76:62:2f:cd:a1:2f:89:b9:bb:57:b0:1a:
fc:9c:33:fb:8d:79:9f:d1:a8:de:ed:94:94:6c:99:
79:ae:eb:df:ee:b1:83:88:e7:f0:3b:a8:8f:00:28:
39:58:aa:01:77:cb:e8:c2:81:a5:b1:5f:89:0e:0f:
29:d8:98:ac:8c:7d:d5:8b:35:be:43:d9:e2:59:a7:
ca:6d:a5:46:26:3c:55:50:01:84:5a:c0:a8:34:d3:
89:51:ba:a4:8a:fb:c6:b6:4c:6f:cc:f8:2d:6e:27:
48:ab:37:2f:fc:cd:7e:44:2f:f7:6c:c0:35:fc:f9:
24:99:1d:0e:42:3c:32:41:1d:23:dc:44:91:72:72:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:90:8F:5D:97:FD:91:F8:0C:9F:66:F2:CD:1A:CD:B8:73:00:27:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/35CPXZf9kfgMn2byzRrNuHMAJ4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:87:dc:75:df:b0:7b:84:5f:68:e7:cb:3e:ee:bc:a1:42:be:
62:29:67:8a:63:56:63:06:a4:06:50:b9:89:24:7a:ed:16:64:
e5:06:08:fa:eb:cf:32:f4:9e:b3:5b:bc:80:45:b5:93:29:f3:
0f:d0:f6:c1:cb:3b:0a:33:d0:41:61:70:49:a5:a2:d1:9e:44:
9f:dd:52:ac:b4:cd:e6:b2:19:08:c6:7e:6d:fd:d9:8f:78:db:
67:74:84:bd:23:63:c2:24:99:94:46:9d:ba:03:7c:17:5f:de:
24:58:34:71:32:16:83:1d:e3:45:5d:bb:e4:24:88:2a:ec:ad:
25:a1:e4:8e:aa:90:b2:8c:42:67:03:a1:83:0b:2d:82:52:ca:
47:28:bc:4d:9b:e3:fb:97:76:d8:07:17:f9:47:6e:92:f1:95:
87:c2:18:26:aa:9a:e3:69:0a:a8:3d:cd:d3:fe:73:7c:e9:c4:
a4:cb:72:e8:13:02:4b:e2:47:a2:8f:23:fc:20:1b:7a:e7:e3:
e8:07:8c:f4:5b:be:1e:01:56:e7:9e:c1:95:fc:e3:df:a5:6d:
eb:b7:12:0e:b7:b7:31:59:b9:9b:8e:bd:6d:c7:69:f3:ae:3e:
41:0e:dd:36:d4:30:62:b3:04:09:18:f8:62:da:c9:b5:ed:7a:
83:a7:dd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:01:31 2025 by rpki-client