Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C0OJ_SXwxwXyII4BvoJtqFnLI14.roa
File: C0OJ_SXwxwXyII4BvoJtqFnLI14.roa (raw, json)
Hash identifier: MMQ2xum4vs11+q86HZ22soy7rN7Fld2x0RSKHdTiUZY=
Subject key identifier: 0B:43:89:FD:25:F0:C7:05:F2:20:8E:01:BE:82:6D:A8:59:CB:23:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D7D35356F6ABD501BE829435ECD25725
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C0OJ_SXwxwXyII4BvoJtqFnLI14.roa
Signing time: Wed 09 Aug 2023 01:04:58 +0000
ROA not before: Wed 09 Aug 2023 01:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:d7d2:c72b/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d7:d3:53:56:f6:ab:d5:01:be:82:94:35:ec:d2:57:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 01:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b4389fd25f0c705f2208e01be826da859cb235e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:25:4d:40:67:d7:5c:1f:89:03:8d:b0:4c:
2d:b9:3f:a6:f2:46:c7:92:b6:62:1a:77:af:9a:2e:
a2:e4:bf:04:d7:01:85:61:ad:46:8e:9b:a8:97:68:
dc:12:5e:80:c0:90:3f:4e:65:d5:c2:ca:64:2b:9c:
ae:44:3b:22:72:37:00:17:8a:77:62:5e:ed:cd:26:
7c:ee:53:d3:ed:f6:13:cd:a9:b8:70:32:d4:16:9e:
f3:4a:1b:e6:e9:b4:6e:db:35:b1:62:e5:28:2b:f5:
71:9f:90:ad:f0:a4:01:74:8e:b7:93:ab:79:32:80:
87:4a:e0:53:67:af:ff:86:36:31:14:26:15:9f:80:
0a:73:74:9e:b7:69:3d:be:55:d9:03:66:7b:71:53:
8c:f2:4b:b4:6e:a4:e0:f4:70:41:86:5c:13:a5:dc:
db:3b:28:b9:37:ca:9c:6e:01:cd:58:e8:05:2d:f6:
ff:2f:4b:73:e2:6a:9c:1f:7b:f1:94:78:6b:41:b9:
09:18:42:41:0b:f4:8d:ea:25:8f:60:23:68:3b:73:
cc:2b:0b:8c:f5:2e:d7:70:9d:4e:87:47:14:83:75:
43:73:73:e7:68:b8:67:2c:49:62:88:33:53:56:fb:
9d:fe:07:32:1c:7f:f4:a1:52:47:ba:7d:ed:3f:c7:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:43:89:FD:25:F0:C7:05:F2:20:8E:01:BE:82:6D:A8:59:CB:23:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C0OJ_SXwxwXyII4BvoJtqFnLI14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:7d:9f:cf:8f:45:cb:81:30:26:ae:c6:17:0b:9b:81:6a:8b:
f3:9e:6c:ec:00:c9:39:aa:ec:5d:fd:f6:dc:08:11:8c:0e:f4:
e9:1b:0f:04:b7:b6:18:e8:0d:71:3f:39:0d:ee:f8:a0:94:30:
63:3d:b8:40:5f:bc:e9:09:8b:b5:8d:95:bf:4a:20:0a:ff:c1:
a0:0c:65:73:1a:64:28:3c:fc:89:4a:b4:e4:b0:b9:3f:cd:10:
36:ff:a7:0c:ba:af:aa:89:82:d5:c3:0a:18:c7:46:34:ce:5c:
60:14:d8:c1:78:f5:99:2c:3f:4c:c9:44:79:5b:36:b9:b2:c2:
80:5d:73:f3:0c:ea:2b:65:7b:62:87:0d:fe:af:67:87:f8:64:
51:04:c6:4b:5f:00:15:cf:50:76:14:42:7a:58:40:8a:3d:bc:
e2:bf:f4:5e:9d:2d:4e:32:55:9a:f1:f2:1e:c5:b5:04:37:f5:
77:76:a3:70:13:b5:07:7f:5d:9a:b6:12:e2:9d:a1:4a:2c:dc:
40:19:ce:02:9f:2b:13:0a:67:a8:31:55:68:bf:01:87:b7:d2:
6c:9c:2a:ee:58:29:ae:c8:fa:21:7e:9e:ea:46:34:bf:46:29:
f0:2b:80:bd:8f:c4:99:23:67:eb:15:d6:fe:af:b7:aa:a6:da:
de:13:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:53:59 2025 by rpki-client