Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6yTrW-rAndt4_ehQRA9sGrAso8.roa
File: C6yTrW-rAndt4_ehQRA9sGrAso8.roa (raw, json)
Hash identifier: +OXa1GoOaB7e21DY+ZNW8xc6vE6LSmmFUwAuf822fUs=
Subject key identifier: 0B:AC:93:AD:6F:AB:02:77:6D:E3:F7:A1:41:10:3D:B0:6A:C0:B2:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74831428
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6yTrW-rAndt4_ehQRA9sGrAso8.roa
Signing time: Mon 21 Mar 2022 19:09:53 +0000
ROA not before: Mon 21 Mar 2022 19:09:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1954747432 (0x74831428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 19:09:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bac93ad6fab02776de3f7a141103db06ac0b28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:d2:d9:9f:f6:6b:4a:b4:5b:3c:05:e8:d7:
b4:75:81:e5:25:32:58:af:cd:69:1e:c1:18:2f:f1:
ee:41:97:55:45:44:eb:0b:a2:b6:3d:4a:ce:a6:86:
2c:08:70:75:73:8c:e8:bd:43:44:58:90:79:86:46:
ec:a0:b3:18:24:78:ac:78:18:64:b4:6e:aa:a2:10:
ab:73:19:bc:ff:4a:e0:77:96:6b:6e:4e:b8:0e:df:
87:3c:a4:37:a5:92:11:27:3a:8d:9c:21:9b:8a:88:
56:b9:9c:68:09:3e:45:69:bb:c1:71:ed:de:61:2d:
7b:01:1c:75:a3:2d:28:2e:f5:91:34:e9:29:29:13:
50:3b:cc:74:25:41:ff:3a:cc:bf:90:00:dd:24:28:
3c:67:2f:b4:04:36:69:51:a2:eb:b6:ee:b1:61:4a:
ac:2c:8d:29:c8:c3:5b:63:56:c1:70:15:01:32:b8:
9b:18:7e:53:be:2c:aa:38:8f:17:0c:eb:30:3e:54:
24:58:f0:d7:2f:52:2f:cf:0d:23:3f:20:e4:69:95:
a0:50:85:bd:f6:13:dc:8d:a8:70:1d:10:93:03:73:
d9:d9:c3:a7:23:fb:9c:66:b9:33:d2:bc:b3:ad:c6:
13:38:59:4a:2d:44:33:9d:e2:56:c4:49:37:0e:ab:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:93:AD:6F:AB:02:77:6D:E3:F7:A1:41:10:3D:B0:6A:C0:B2:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6yTrW-rAndt4_ehQRA9sGrAso8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:5f:d2:ab:02:7e:63:0c:58:80:ee:cb:ea:50:e9:d3:3b:29:
2b:4d:a9:df:75:cc:a6:cb:65:55:7e:7c:d4:6e:91:80:10:8e:
db:c3:9e:55:df:a0:19:62:7e:b2:18:7e:83:8e:1b:e3:5b:fe:
47:ab:c5:a2:e1:7d:c4:f2:81:c9:8a:d6:75:29:b8:47:91:15:
8d:65:f6:a9:c7:50:a2:e1:3c:00:e0:3f:d5:ed:cf:b0:02:d5:
d9:0e:ed:fd:ee:0a:ae:10:a6:d1:34:3c:44:27:d9:9d:8f:a9:
06:df:7a:dd:f1:f7:e1:78:42:2a:84:79:86:21:10:7e:d0:ff:
23:ed:1a:60:e1:1b:e1:44:9f:3a:53:a7:03:fa:27:71:25:14:
a9:40:49:12:ee:c2:69:51:0b:2c:88:a7:27:2c:fd:91:7b:b3:
bd:b1:0d:6b:4a:e3:a4:6b:b3:15:88:d2:76:c4:aa:b3:86:a4:
84:88:01:7b:2c:b9:2d:d8:7b:61:1e:9a:20:b1:99:42:e5:17:
50:c6:1d:28:e0:93:76:e6:69:a0:ab:dc:fe:c8:e1:0d:94:0a:
33:12:c2:3d:5e:e7:79:a4:12:1d:e3:ef:dd:fd:40:61:60:09:
7b:c8:34:88:c9:99:a8:f7:a3:6a:6c:71:bd:0e:90:d5:6f:3e:
3b:e2:5c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:14:31 2025 by rpki-client