Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CCl4dQXnoe8kvOqeWLdJgHObwws.roa
File: CCl4dQXnoe8kvOqeWLdJgHObwws.roa (raw, json)
Hash identifier: zvsoQTaoOlhDeM/agLOaQ4rbeYWv+ejEk10jWHP4pMc=
Subject key identifier: 08:29:78:75:05:E7:A1:EF:24:BC:EA:9E:58:B7:49:80:73:9B:C3:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879FDD6E3D4398698F0F6EDF80B66CB7C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CCl4dQXnoe8kvOqeWLdJgHObwws.roa
Signing time: Thu 20 Apr 2023 18:11:41 +0000
ROA not before: Thu 20 Apr 2023 18:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:dd:6e:3d:43:98:69:8f:0f:6e:df:80:b6:6c:b7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 18:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0829787505e7a1ef24bcea9e58b74980739bc30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:d9:f9:ef:d3:32:fb:c8:4b:ff:4a:78:91:
42:37:6f:e7:08:51:0f:da:24:c5:d2:27:9b:ea:1f:
86:1f:33:1e:0f:9d:e4:1b:fe:e1:82:9e:19:f5:b7:
e7:d8:55:f5:2e:81:1f:ba:80:9c:68:23:7d:52:07:
6e:84:65:d6:29:d3:b1:5e:73:ef:b3:75:34:c3:4f:
ab:60:64:6b:ff:08:71:28:8d:72:c3:bf:7e:27:11:
fd:b7:f4:3f:4c:b9:08:8f:ad:3c:bc:0b:78:32:6a:
3f:38:8d:52:36:53:eb:8b:61:ef:48:f2:8c:6f:16:
25:e6:a8:c4:ee:58:be:83:42:d5:f4:6f:2e:86:20:
9c:de:06:7f:11:36:e5:20:f9:c6:f8:da:a5:4c:8b:
32:99:72:19:d5:dc:4e:3c:be:75:72:7f:25:15:18:
fd:0f:5e:27:4d:3f:97:05:81:4c:0a:b2:86:73:5a:
ba:10:15:c3:db:cf:1f:68:93:e4:8d:63:8c:93:6d:
00:bc:c5:63:20:e3:3d:bf:27:66:b8:32:49:c4:e2:
a6:fe:29:7c:ed:10:d8:c5:a8:6e:10:e0:0e:58:c3:
e7:19:ac:f4:1c:2d:16:11:bf:68:8b:7e:c5:26:06:
57:5a:78:1e:12:41:10:5f:d8:06:fa:b7:cf:4e:48:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:29:78:75:05:E7:A1:EF:24:BC:EA:9E:58:B7:49:80:73:9B:C3:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CCl4dQXnoe8kvOqeWLdJgHObwws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:e3:6c:33:86:c3:18:a6:f6:dd:5a:38:fa:ab:29:be:c0:51:
4f:b2:90:04:47:13:79:fd:ae:cf:be:cf:e6:2a:42:9e:83:49:
47:1e:43:c4:cc:30:30:52:0a:29:62:fc:12:f6:38:f0:75:66:
a1:07:31:36:63:02:d5:60:4a:82:c0:e8:b2:f4:f5:18:81:6b:
67:ee:af:cf:9e:75:77:8c:1c:9d:d5:d3:cc:4f:c0:ee:17:81:
6d:ea:ed:cd:17:f8:57:17:3e:5a:14:82:01:f8:47:d0:a5:4d:
6d:f3:5b:72:07:71:a5:74:b5:b8:6f:d3:78:4a:69:87:a9:e8:
32:df:3d:9e:ab:a0:f7:52:72:ad:9d:9f:17:43:7a:ee:ee:0c:
bf:db:8f:4b:48:06:f5:89:93:4b:ee:94:cd:56:3e:a2:42:58:
25:6b:b0:a9:ef:60:33:90:83:c2:2d:b2:01:53:88:a3:40:1f:
18:bc:48:e1:b5:8f:a0:94:cd:d9:45:19:95:10:94:46:fc:44:
fb:7f:32:cc:8a:ed:39:f1:03:f5:f2:a7:fc:be:71:36:95:ed:
3e:99:e2:25:07:0c:3a:ab:77:47:70:77:75:a2:a7:93:f5:db:
1f:a5:c9:1a:e1:d9:36:13:b1:28:af:6f:59:34:4f:c8:ef:e0:
df:7e:c5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:12:16 2025 by rpki-client