Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C71KiikEVTGpqjRiDXp-D1Z8Q2c.roa
File: C71KiikEVTGpqjRiDXp-D1Z8Q2c.roa (raw, json)
Hash identifier: 89Gsg+e14VrKWXw0Q8jexvA02Iz5+u1vjG7xMud2Y6Y=
Subject key identifier: 0B:BD:4A:8A:29:04:55:31:A9:AA:34:62:0D:7A:7E:0F:56:7C:43:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3A5A6EF2ABCACB444EEF52069B0BE9AF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C71KiikEVTGpqjRiDXp-D1Z8Q2c.roa
Signing time: Mon 28 Aug 2023 04:15:19 +0000
ROA not before: Mon 28 Aug 2023 04:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3a:5a:6e:f2:ab:ca:cb:44:4e:ef:52:06:9b:0b:e9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 04:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bbd4a8a29045531a9aa34620d7a7e0f567c4367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:bd:14:b1:b2:b3:b9:1b:4f:d4:3f:8a:55:
18:d7:a3:40:53:cd:a4:3e:6e:06:de:f4:a4:4a:0a:
dc:b5:18:cd:37:a5:11:0c:57:c9:fc:f0:c4:ee:88:
49:75:69:02:b5:19:9b:29:c6:ea:19:95:c1:4e:97:
48:da:50:29:7c:8f:0d:1b:75:cc:02:6a:ba:4c:59:
2c:a7:e0:d3:30:18:4e:4f:a9:6a:9c:22:88:23:3f:
05:92:8d:20:53:90:6b:ae:e1:8a:3c:0b:40:ed:59:
18:b5:f6:fb:2a:c0:3a:56:5c:f5:10:ee:4f:3b:b1:
6d:2b:ca:a5:c7:dc:3f:2b:49:7b:b3:fd:02:39:28:
83:16:bb:7c:a1:cb:e8:b6:31:06:79:c0:09:eb:45:
e8:52:36:32:8f:de:99:e0:32:d9:74:da:3e:0d:67:
e0:17:9b:5b:bc:c9:b8:46:8d:fa:34:8e:f6:96:0c:
b7:b6:c3:e7:d7:e0:a3:9f:00:c2:e6:45:7f:6a:d1:
f3:60:d6:99:70:d1:03:84:fb:dd:ae:d0:72:1c:80:
3e:ef:2c:67:1e:f4:3c:3d:a4:ec:76:66:a6:19:01:
65:ac:4b:40:e9:3e:03:71:6a:f0:9a:ee:46:82:df:
c4:b2:72:50:16:53:0d:c5:11:d2:c7:50:37:1a:75:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BD:4A:8A:29:04:55:31:A9:AA:34:62:0D:7A:7E:0F:56:7C:43:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C71KiikEVTGpqjRiDXp-D1Z8Q2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:0e:90:28:94:98:c4:43:1a:fa:67:c8:22:7f:91:08:24:22:
04:48:62:18:1b:99:b7:86:41:1a:c5:4d:28:59:d7:14:e0:1a:
84:88:b0:36:17:4d:14:cb:47:22:6e:36:6a:d1:60:20:b6:c3:
5b:67:d1:5b:0c:18:27:9c:da:dc:e8:fa:b7:c6:be:3f:29:2d:
0f:4d:83:bd:b2:82:b0:0a:7a:06:f6:c2:13:c1:11:00:9c:44:
11:bb:ff:a6:1e:a7:fd:d2:82:29:b3:6a:fc:70:32:87:50:a6:
09:5c:62:88:0d:87:26:0a:d9:c5:23:d2:17:d4:c9:d0:56:01:
ac:da:2a:19:e1:cd:92:de:27:5b:46:77:9c:0a:a2:b3:31:4e:
2a:2e:fa:ee:d8:cc:b6:22:ed:a8:80:b4:fc:db:41:8b:86:08:
d5:7c:3c:04:15:5d:78:30:bb:a3:5f:9d:dd:6d:f2:87:f9:27:
2f:9d:f7:09:08:29:a0:2d:ea:be:66:d0:5a:8c:fa:f4:1f:66:
a7:78:8a:cf:b9:ae:cd:dc:5d:7d:f8:9d:05:59:62:78:f2:42:
2b:ef:5b:e0:78:6a:bd:1a:0c:67:f6:c1:d1:44:a3:4b:95:b8:
27:5c:65:f1:0f:c9:0c:3a:b8:0c:cc:38:bb:7f:4e:01:f9:ae:
e6:0d:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:33:29 2025 by rpki-client