Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C3hB2-37IRa7PPBYdDHZogyWaNA.roa
File: C3hB2-37IRa7PPBYdDHZogyWaNA.roa (raw, json)
Hash identifier: NCddPsSHYhLM3l9kvyqHWzc+1h/S3StjQIb4+E3C0Dk=
Subject key identifier: 0B:78:41:DB:ED:FB:21:16:BB:3C:F0:58:74:31:D9:A2:0C:96:68:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A412EDD7A78A765BDA6D37AB53F5D4F39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C3hB2-37IRa7PPBYdDHZogyWaNA.roa
Signing time: Tue 29 Aug 2023 12:05:04 +0000
ROA not before: Tue 29 Aug 2023 12:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:412e:42ff/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:2e:dd:7a:78:a7:65:bd:a6:d3:7a:b5:3f:5d:4f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 12:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b7841dbedfb2116bb3cf0587431d9a20c9668d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:ff:da:16:70:81:05:ba:f6:28:7f:23:ca:
d3:99:4b:4a:7b:31:5c:28:5f:17:05:37:d9:cd:21:
cf:8a:08:45:73:98:12:e1:ac:e8:66:0e:9e:93:48:
91:1a:f8:cd:0e:4c:33:72:4c:b1:33:5c:6e:31:c0:
f2:32:b8:74:b4:82:e9:b3:6e:c5:4e:ed:68:41:c5:
52:5f:08:86:6e:d7:57:b9:af:15:43:25:82:c0:da:
9e:8c:8b:3a:9a:6c:4e:bd:d6:30:a5:3b:9c:54:d6:
32:24:8e:be:03:23:b4:80:2a:27:ee:cf:6f:57:2a:
04:b5:58:12:68:76:05:37:c8:75:72:3b:ca:bc:5d:
ea:b0:eb:1b:9f:43:23:39:19:aa:51:d4:7b:9a:be:
95:c7:df:76:ec:4b:ba:4a:e5:19:4f:c4:85:d1:c7:
fd:21:07:50:d7:78:d9:5c:a4:2b:a8:57:60:09:2b:
c6:89:eb:32:26:89:9f:60:70:f3:0e:0d:8e:ad:6a:
64:b1:4a:6a:cf:4d:bf:24:93:2d:b6:43:54:2f:a0:
83:82:04:bc:36:16:88:5f:68:1a:e4:e9:a5:30:fd:
b3:74:d6:a6:da:3f:04:a5:14:39:0a:a3:8d:17:11:
20:59:a8:ca:57:a5:9c:1d:f7:6a:a6:dd:31:bf:58:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:78:41:DB:ED:FB:21:16:BB:3C:F0:58:74:31:D9:A2:0C:96:68:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C3hB2-37IRa7PPBYdDHZogyWaNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:11:51:d8:84:f4:a7:4f:fd:df:91:9f:95:20:91:16:1c:3d:
7d:a6:be:7a:ab:46:01:b9:2c:02:79:f7:ae:98:9c:ce:5d:9e:
66:2a:4c:73:02:74:ce:f7:7e:f3:3b:ae:ea:91:52:fe:85:ae:
f0:74:01:b4:63:fe:e5:92:33:e6:2b:7e:79:ac:91:a7:83:f1:
44:e0:b2:70:e1:8a:c0:24:2e:78:50:00:4d:fd:90:45:65:56:
f9:21:22:96:72:dd:4d:26:f5:a2:bb:ab:89:55:44:03:3c:6c:
82:08:35:65:58:ba:a0:80:6c:77:52:f3:e0:02:77:66:f0:c8:
1b:4b:76:97:a7:83:a5:6c:2c:46:ee:c9:ad:f8:f1:5c:2b:48:
d1:d0:f1:74:bd:89:57:95:7c:1e:0f:71:ad:42:08:61:ee:5f:
21:0e:1e:55:fc:e3:85:57:ee:55:eb:ac:ad:fc:d7:1c:f9:1c:
3e:f6:da:ac:ff:5b:b3:6d:e1:b3:d1:dc:af:0d:f5:20:cf:d4:
eb:8e:ad:d6:9e:4a:ed:cc:9b:15:e5:65:d0:ad:e2:f6:29:0d:
4e:09:e5:84:4f:c5:a7:71:eb:90:2a:76:b8:f0:2e:ac:94:b1:
ee:eb:cc:d4:df:3a:22:5b:c6:74:1f:9b:f4:69:9d:42:e2:a8:
eb:36:0f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:55:38 2025 by rpki-client