Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C1AYlL6sr0uZR9SWRRcklL9RO1I.roa
File: C1AYlL6sr0uZR9SWRRcklL9RO1I.roa (raw, json)
Hash identifier: IS2yQeiQyW00XCL4EgElnMojlw1HGmDlZjzpb1ufnTs=
Subject key identifier: 0B:50:18:94:BE:AC:AF:4B:99:47:D4:96:45:17:24:94:BF:51:3B:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018506086BEC26F6F66EBA6DA864AAC50055
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C1AYlL6sr0uZR9SWRRcklL9RO1I.roa
Signing time: Mon 12 Dec 2022 11:11:33 +0000
ROA not before: Mon 12 Dec 2022 11:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:08:6b:ec:26:f6:f6:6e:ba:6d:a8:64:aa:c5:00:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 11:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b501894beacaf4b9947d49645172494bf513b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ee:6b:7c:fd:b9:e6:a4:45:c3:42:6b:dd:90:
81:1a:5a:42:0c:9d:c6:f0:ec:67:07:da:48:87:32:
ea:52:e3:db:f7:e2:be:03:5b:08:83:d5:e0:b6:14:
ab:3f:da:a2:95:72:5c:82:d5:fa:dc:10:41:66:e3:
32:2b:36:a7:62:c5:62:69:b8:10:a3:ef:44:17:1f:
fc:9e:8b:0c:3e:90:49:5f:c4:aa:59:56:af:55:de:
a3:03:08:f7:4b:a4:4d:3a:50:0b:20:2c:f5:b3:4d:
66:79:d0:5d:10:0e:a1:14:18:73:b0:44:15:a9:5c:
d6:da:72:f9:a8:82:25:cf:05:e8:8d:f1:59:5b:ee:
52:c1:bc:11:96:7d:90:5b:6c:c8:26:93:c3:0e:e9:
4b:a1:88:75:c4:db:7c:bb:e5:38:f9:ef:0b:ba:bc:
e6:97:89:68:ad:90:96:77:14:73:de:af:ee:f1:5e:
e8:de:f5:03:41:64:57:3f:a5:df:76:41:d0:c9:d4:
44:bf:3f:73:88:01:f2:02:76:7b:cf:92:66:11:f5:
c4:b2:d2:16:a7:c9:a6:fe:b3:47:14:41:5a:87:9d:
41:c6:d4:80:15:db:ca:c4:4c:c4:eb:7b:db:f7:cc:
6b:cc:71:9d:08:9a:ad:f7:aa:b7:a4:fc:10:03:d0:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:18:94:BE:AC:AF:4B:99:47:D4:96:45:17:24:94:BF:51:3B:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C1AYlL6sr0uZR9SWRRcklL9RO1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:af:c4:bf:81:76:87:21:10:80:fc:10:e1:f8:61:06:7e:7b:
fe:74:aa:71:f0:20:ed:51:e0:ea:f9:c9:75:3e:d3:54:f5:a7:
7a:4c:24:35:92:0d:dc:96:1e:df:ee:86:de:75:46:f7:e7:04:
52:60:59:f7:f2:65:14:0a:7c:c3:17:24:40:eb:3a:d6:42:b5:
87:13:a9:81:c6:87:bf:11:2f:ae:89:39:e1:55:0d:4d:25:0c:
53:9d:c8:00:ef:a1:b1:ae:39:55:0f:11:16:a1:98:79:2b:99:
d2:ce:e8:20:3e:e2:3c:b6:d5:89:15:44:bd:96:d3:3d:81:07:
b6:bd:81:3f:d4:33:06:f5:fb:4f:fb:74:fe:ba:2a:05:75:9d:
8f:3c:e4:ed:fe:f5:86:36:6e:e4:7e:04:b2:4d:2d:17:31:3d:
38:c0:62:f5:43:df:0b:38:c8:6c:d7:a2:0f:a2:f3:ca:fd:b2:
d2:37:00:67:15:9e:6c:17:a7:08:8a:51:c2:b1:57:cd:3a:9c:
90:a0:6c:76:38:0a:2b:c0:39:69:b4:ed:bc:6c:fb:7c:b4:63:
ea:4d:ca:ca:75:6c:3f:2a:fc:c7:a2:ff:56:d9:ce:84:cf:d4:
94:4a:82:c7:bd:25:3b:cd:59:e4:64:49:be:0e:4c:8e:0c:3a:
bc:de:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:43:59 2025 by rpki-client