Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8UX0lM6qrIy4lE5rkDF6dZWAtU.roa
File: C8UX0lM6qrIy4lE5rkDF6dZWAtU.roa (raw, json)
Hash identifier: mz1rT6K5B2kpG2v3FWNsEpTVNj80W360G+0wSK8oaxM=
Subject key identifier: 0B:C5:17:D2:53:3A:AA:B2:32:E2:51:39:AE:40:C5:E9:D6:56:02:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C59623C1E376F20D761DC575D7A738EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8UX0lM6qrIy4lE5rkDF6dZWAtU.roa
Signing time: Sat 05 Aug 2023 12:04:58 +0000
ROA not before: Sat 05 Aug 2023 12:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:c595:6fc6/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:96:23:c1:e3:76:f2:0d:76:1d:c5:75:d7:a7:38:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 12:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bc517d2533aaab232e25139ae40c5e9d65602d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:d3:3b:7c:e7:cd:ae:59:13:74:e4:b3:54:
4a:48:38:b2:3b:47:43:5c:1c:1c:30:b7:4c:08:c2:
17:59:8e:46:c0:8d:82:ab:38:28:d2:26:57:57:98:
3c:4f:38:68:fe:ea:c4:de:63:e5:23:3e:57:01:ea:
00:09:31:33:34:e5:3a:55:b9:bc:f5:5e:75:61:4d:
86:74:9b:a2:64:75:8d:5c:f7:3a:0a:86:ac:94:94:
c9:e8:90:96:d0:db:c2:8d:ec:63:ed:88:9b:e8:07:
6f:bc:7e:f8:40:93:d4:f0:e0:32:ab:8b:18:58:82:
4d:1a:93:26:44:e5:9d:50:be:06:aa:6f:7e:de:ab:
8f:b1:9c:eb:36:15:1a:ce:23:43:c6:e6:b0:c4:81:
c2:3e:5a:ef:bb:aa:aa:81:bb:6c:d5:21:05:63:23:
52:1d:7f:e5:84:c9:29:0a:ab:b5:08:f6:5a:30:5a:
a5:fc:c7:e0:23:9b:50:70:82:cf:89:89:6a:79:a4:
7e:52:3e:b0:bd:9d:94:23:24:f5:f5:ec:2e:ea:57:
d7:c2:00:15:ff:82:4c:49:f2:21:6d:a2:32:cd:dd:
ff:73:ac:8c:4c:9d:6a:98:d0:6f:05:ac:b0:e0:93:
6a:f4:e6:f4:17:37:63:96:d0:69:c1:f5:8c:27:38:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C5:17:D2:53:3A:AA:B2:32:E2:51:39:AE:40:C5:E9:D6:56:02:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8UX0lM6qrIy4lE5rkDF6dZWAtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:a4:f5:c3:9a:42:48:08:91:ba:4d:a6:f2:3b:26:b5:8e:db:
2a:fe:1d:48:59:66:c0:89:c1:c7:b0:e9:2e:d5:bb:d7:2e:32:
d0:66:6c:74:af:87:ee:9a:bb:d0:38:2d:7f:f9:a3:f9:fa:d5:
46:ff:69:44:d4:68:2a:ee:5c:9b:68:45:da:21:9b:4d:f1:a9:
71:6c:19:e9:38:68:d5:5a:f7:c6:f2:09:56:5e:f6:6a:78:f3:
95:3e:1b:b4:f4:98:30:79:08:f6:fa:24:92:8e:8e:bf:68:4e:
ee:19:1d:e7:ea:cd:ca:35:9a:ec:5e:0f:1f:13:21:14:09:0d:
0c:5a:25:67:b4:7a:88:e2:44:2f:86:63:c2:1a:b8:f5:f6:2e:
5e:3c:28:85:bc:0a:d3:69:28:ab:c7:d4:6d:54:36:f7:88:b2:
6a:08:04:49:7a:bb:5d:6f:67:3a:f1:90:7f:b4:36:2e:b5:1c:
ea:85:07:f0:a5:2b:29:b5:ac:23:da:aa:61:ee:d7:b8:1b:0f:
85:c7:c0:59:98:ab:ad:d0:f8:ea:4f:5d:f0:ce:98:34:ca:bf:
37:e6:08:ac:65:93:cc:10:b1:40:0b:33:11:1a:86:e5:96:a2:
25:87:ae:97:5e:41:27:4f:5c:c5:70:c2:fa:82:f2:e0:f3:5a:
fe:79:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:22 2025 by rpki-client