Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C5Ff3sq9b_ufc51VOFVkZcWfeiw.roa
File: C5Ff3sq9b_ufc51VOFVkZcWfeiw.roa (raw, json)
Hash identifier: rlaIRwW10YTq8HfgPVEtEXma8csvXNSf8YIsGdOiztY=
Subject key identifier: 0B:91:5F:DE:CA:BD:6F:FB:9F:73:9D:55:38:55:64:65:C5:9F:7A:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A243704071B7564868D1129426362DA7F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C5Ff3sq9b_ufc51VOFVkZcWfeiw.roa
Signing time: Wed 23 Aug 2023 21:04:59 +0000
ROA not before: Wed 23 Aug 2023 21:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:18a:2436:6b7d/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:24:37:04:07:1b:75:64:86:8d:11:29:42:63:62:da:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 21:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b915fdecabd6ffb9f739d5538556465c59f7a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:dd:f2:c4:73:d0:0f:e2:82:29:9f:8e:09:
16:35:be:a4:ae:fd:bf:0f:35:6a:53:26:e5:bd:e9:
83:2e:e6:a7:0b:86:24:be:1d:e8:49:28:e0:a2:45:
54:6c:d2:fd:48:19:24:21:a8:35:8f:ae:f4:f9:01:
e8:45:c5:21:0f:7e:14:91:43:62:40:ad:d6:e8:8a:
78:fc:36:da:a9:dd:20:31:f5:7b:ac:c8:52:3d:ec:
72:34:c8:e0:2a:67:89:6c:3e:fd:2b:91:c3:de:45:
07:69:87:1c:4b:67:b7:f6:3a:f6:3d:99:19:a0:b1:
52:e6:5a:c0:a4:37:7f:ea:21:6d:83:a7:04:64:32:
dc:c9:0b:c5:d8:d1:0e:c2:41:5d:9a:c2:bc:83:5c:
53:96:84:53:40:6a:c1:cb:3a:09:88:17:c7:99:7d:
72:c7:56:e2:53:c8:d4:37:9f:46:71:53:c6:8a:5a:
71:3d:8c:f1:98:08:d9:c4:60:f2:d6:7e:77:81:a8:
98:df:a1:02:9c:18:d9:19:e8:ad:e0:c0:e5:2b:30:
47:d7:df:14:8e:89:5d:88:a4:6a:db:81:af:99:7c:
8b:05:ed:67:76:71:6c:dd:c1:e2:27:3e:f1:d9:51:
82:b1:85:93:a0:7b:78:e6:1d:15:ff:7c:b3:26:0a:
38:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:5F:DE:CA:BD:6F:FB:9F:73:9D:55:38:55:64:65:C5:9F:7A:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C5Ff3sq9b_ufc51VOFVkZcWfeiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:e7:e4:1b:0b:5c:4e:ed:0e:36:b9:9e:6a:f0:2c:b9:24:05:
57:6d:f6:a5:78:2e:cf:52:5a:c0:fc:46:4a:45:94:ba:c4:fb:
71:4b:77:09:94:72:e7:98:98:bb:c5:4b:b3:ac:e4:16:27:ca:
32:9d:05:e8:2b:f0:d9:29:39:10:92:45:ae:00:3b:c5:28:e5:
3b:91:36:e9:51:90:e9:44:00:fa:c4:79:1d:fe:85:c1:6e:06:
53:ec:f4:19:21:20:d5:21:3d:f5:7f:5d:d0:70:7b:2b:ba:ca:
61:cb:5f:74:77:47:cc:73:ad:16:bf:64:55:fd:2e:08:2c:18:
17:51:64:37:74:d5:7c:da:00:d3:79:1e:0b:f0:7d:4a:4c:08:
8f:b0:49:b8:0d:00:37:4e:7d:26:55:06:26:62:33:a4:4b:29:
dd:51:a6:8b:71:20:60:30:b5:d5:ac:c0:48:e3:d4:d9:08:04:
42:43:88:bf:cf:d4:dd:97:9b:18:43:ab:6e:e3:c2:a9:b3:1a:
ba:48:fa:84:46:b1:96:60:bb:11:44:1a:6b:a3:ec:8b:01:fd:
17:89:d6:f0:a5:70:8f:83:58:96:82:cc:00:ab:01:a2:f3:ed:
f2:65:a9:c0:d8:b7:63:29:8f:fe:49:a5:10:95:fb:7a:7e:22:
f7:03:a6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:07 2025 by rpki-client