Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C5Xtok-mz-VEGm7UtcNsq2tADOo.roa
File: C5Xtok-mz-VEGm7UtcNsq2tADOo.roa (raw, json)
Hash identifier: Sc8zQiU9vnKc7KMXPrqtvFxyakJplh2Yfz3ZiN41S7U=
Subject key identifier: 0B:95:ED:A2:4F:A6:CF:E5:44:1A:6E:D4:B5:C3:6C:AB:6B:40:0C:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A0407E48A629B451D46C5FB8C0748A19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C5Xtok-mz-VEGm7UtcNsq2tADOo.roa
Signing time: Sat 29 Jul 2023 06:05:28 +0000
ROA not before: Sat 29 Jul 2023 06:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a03f:8c47/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a0:40:7e:48:a6:29:b4:51:d4:6c:5f:b8:c0:74:8a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 06:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b95eda24fa6cfe5441a6ed4b5c36cab6b400cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:66:e7:cb:ac:f0:5d:19:9d:19:19:f0:85:f9:
07:44:ac:b8:aa:f3:75:08:b1:db:9b:15:3f:2c:6b:
5a:b3:5b:ec:31:7d:0c:18:24:bf:3a:83:76:1d:e5:
a9:2f:d3:67:31:83:70:ae:84:29:f4:88:c9:51:57:
bb:14:7b:4d:19:57:08:f0:47:f5:60:39:42:4f:85:
4d:7b:69:f9:6a:aa:5c:92:13:4f:e0:de:74:2c:56:
69:2d:89:87:c9:e9:29:58:9c:f9:3d:50:0f:c4:24:
fa:68:a3:bf:ca:4f:ff:a2:4b:c3:44:38:72:42:93:
de:2f:7a:86:35:2f:00:49:94:eb:28:56:7e:4f:01:
fb:9c:54:cc:08:91:1c:c5:a0:b4:a2:db:98:bb:b3:
c0:be:5f:63:f3:14:93:52:70:f0:76:87:ac:de:b5:
1c:3b:4c:fa:37:45:a6:e0:c1:a1:e6:b5:86:a6:7b:
e0:64:57:2f:08:73:38:25:23:f3:47:89:15:09:9e:
43:12:38:51:51:67:17:2e:8e:a6:ed:6f:b4:5a:20:
0b:88:50:fb:19:db:64:0a:84:e6:8d:ab:23:51:5f:
02:6b:2a:98:7a:7e:17:8a:c6:53:0c:aa:a5:08:55:
c7:f1:b2:7f:27:0d:07:8a:0a:27:26:39:b3:d0:be:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:ED:A2:4F:A6:CF:E5:44:1A:6E:D4:B5:C3:6C:AB:6B:40:0C:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C5Xtok-mz-VEGm7UtcNsq2tADOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:9e:49:b8:c5:0f:3c:1c:61:5b:94:65:ed:10:22:7e:8d:72:
8f:e0:4c:a5:97:e4:3d:b2:3d:d9:bf:79:0e:d4:be:60:86:f2:
a0:1a:0e:db:ea:2b:eb:65:7c:41:d7:5c:14:0b:0d:7b:67:42:
d5:7b:f6:cc:80:79:d1:12:59:50:fc:87:14:8b:d0:5c:b2:9a:
7b:2a:0e:b4:77:a5:aa:b8:ba:b6:73:c0:6f:f5:8a:f3:79:2c:
cb:a2:a5:d4:27:c8:72:1c:5e:fd:70:f2:1c:cc:f1:53:4e:b2:
79:9f:86:0f:d6:dc:ca:4d:27:c6:57:10:d9:c4:96:7a:3d:b6:
d5:19:0e:3a:ca:3a:ef:5f:9b:1f:28:ff:bb:88:96:bf:15:76:
67:9f:1c:0c:44:d5:28:71:ef:af:d3:67:22:76:9e:a6:5a:01:
b0:b5:0b:dd:a7:0f:e0:8b:21:e0:be:34:07:12:84:09:39:be:
a7:39:e6:a2:e9:5b:50:e1:f5:a2:ee:ba:c1:56:fe:90:d8:59:
2c:e5:69:f2:8f:a6:e0:05:ee:67:69:f2:f9:ac:9a:a5:42:17:
c9:3a:b6:28:b2:ae:c6:19:6c:29:e9:e7:e6:7b:79:96:e2:15:
27:31:00:fc:54:23:ef:73:c1:b4:f5:18:11:56:b4:7a:1b:5c:
7a:41:f5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:51 2025 by rpki-client