Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C2rapi2b6fiLHg49q0NmwkUNs8g.roa
File: C2rapi2b6fiLHg49q0NmwkUNs8g.roa (raw, json)
Hash identifier: YDHpLPHbYUH7fS7veOnwOBjCRTWixFXLsQUk1W1iKFY=
Subject key identifier: 0B:6A:DA:A6:2D:9B:E9:F8:8B:1E:0E:3D:AB:43:66:C2:45:0D:B3:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E737444
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C2rapi2b6fiLHg49q0NmwkUNs8g.roa
Signing time: Mon 20 Jun 2022 17:10:44 +0000
ROA not before: Mon 20 Jun 2022 17:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2389931076 (0x8e737444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 17:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b6adaa62d9be9f88b1e0e3dab4366c2450db3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:c1:8c:c0:7a:d9:7e:f7:28:5d:33:c5:3f:
e3:53:2e:67:b4:37:7d:c4:e4:99:29:42:7a:90:a1:
bf:51:6c:17:47:9e:ca:d3:12:de:ee:23:3e:21:07:
99:64:b3:2e:ff:ee:d7:c9:99:32:4a:c9:c2:ab:bd:
a7:62:51:bc:6c:35:12:61:6b:23:a8:f9:38:d4:23:
d7:e4:b9:dd:b9:9f:1e:49:80:4f:2d:5c:5e:e3:f8:
4f:a9:28:b7:a7:6f:d5:b1:eb:8a:29:ff:b2:14:05:
4f:14:9b:46:c7:ba:8a:1d:21:2e:90:25:dd:db:d0:
51:1b:05:35:ca:89:30:d8:4d:bb:be:02:dd:95:0a:
68:94:f3:fb:06:42:49:ae:11:65:cc:ad:11:e8:da:
8b:44:d5:d1:d5:37:a2:9f:8c:ed:4f:26:6c:b0:46:
6e:a1:b1:a4:7d:a7:98:87:1c:7e:a3:99:df:13:d0:
9a:0c:30:17:69:ed:79:ff:1f:04:d2:08:54:f1:bb:
65:5a:8a:c0:7e:40:15:59:9e:33:a2:c9:0f:3a:3c:
b1:3d:ee:18:c7:7a:fc:aa:8f:f7:da:42:59:83:08:
b1:50:f0:cb:54:da:56:98:1b:f9:d8:25:09:4d:d7:
68:1d:bb:26:67:35:a2:bf:ac:95:92:73:24:7f:e6:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6A:DA:A6:2D:9B:E9:F8:8B:1E:0E:3D:AB:43:66:C2:45:0D:B3:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C2rapi2b6fiLHg49q0NmwkUNs8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:49:1e:08:fb:9a:dc:25:87:a3:36:1a:89:f4:88:bf:07:97:
f8:75:08:fc:98:80:60:ce:ae:62:af:f8:e8:87:0a:50:36:ee:
35:06:af:bd:ab:39:ac:79:3f:1a:cb:74:75:96:26:e5:e1:f5:
cd:43:76:f8:8d:04:fe:0d:4f:d8:dc:8e:52:b6:9b:8b:f5:48:
13:98:43:38:e1:90:d4:ac:d3:77:c9:3a:86:62:f6:ea:31:a2:
dd:99:40:98:16:d1:83:69:7d:dd:c0:21:bd:06:b4:fb:fb:51:
0d:6a:55:7a:6a:75:b8:2a:68:f6:75:e8:b8:60:f7:e4:5c:47:
ff:6b:87:0b:87:ea:e5:bf:f7:3e:c1:f9:c0:25:49:32:21:04:
e7:db:02:e4:46:a0:6b:63:b1:c5:40:46:39:6e:10:eb:cb:75:
ed:08:33:c7:9c:73:b9:db:ed:26:2c:64:8e:4f:48:01:14:c1:
09:b9:52:61:e2:1c:cc:1c:20:85:0c:07:76:f4:97:31:1d:b5:
d9:d8:da:91:03:09:44:1d:10:03:75:98:ac:de:a4:40:7d:f3:
b7:11:76:12:12:2a:69:7b:29:86:67:c1:55:84:57:8f:3f:7d:
d4:6a:ea:ae:cb:dc:6c:e5:75:19:9c:cf:17:5a:d9:81:9e:16:
d1:b9:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:27 2025 by rpki-client