Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CDUbyOCIdcQMcjJMzs0Nrkk1x00.roa
File: CDUbyOCIdcQMcjJMzs0Nrkk1x00.roa (raw, json)
Hash identifier: RE9jLT0TKCeX0tnHZ5eqd+yY4TGLskeRhfn6UdP/ygY=
Subject key identifier: 08:35:1B:C8:E0:88:75:C4:0C:72:32:4C:CE:CD:0D:AE:49:35:C7:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 75504F2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CDUbyOCIdcQMcjJMzs0Nrkk1x00.roa
Signing time: Thu 24 Mar 2022 13:10:34 +0000
ROA not before: Thu 24 Mar 2022 13:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968197422 (0x75504f2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 13:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08351bc8e08875c40c72324ccecd0dae4935c74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:f3:8f:52:86:e7:09:dc:63:69:4c:53:65:
cf:a6:0f:e4:b9:40:d5:bc:12:90:b3:f1:f6:f8:19:
1a:0a:a5:b2:01:77:f3:f9:ad:9d:ea:b2:db:2e:f5:
fe:74:52:6b:b2:d0:15:dd:ed:96:16:3a:ee:48:f2:
00:73:6a:e1:b7:26:5d:d7:ab:1c:38:28:7b:cb:b5:
ff:54:91:7b:84:e4:ed:28:a0:37:3e:14:89:01:20:
ce:fc:e8:50:3a:b7:b3:7f:28:a7:1b:c0:f4:c1:22:
3f:28:53:1a:ce:c9:28:ef:56:42:16:de:d2:95:da:
6d:df:07:e2:b7:9f:65:81:c3:b2:b9:0f:17:17:af:
6e:ec:35:9c:4b:71:55:e3:54:21:50:c1:68:87:91:
74:84:3a:a9:aa:e9:73:9a:0f:5e:d5:49:b0:43:63:
26:a5:58:1a:37:4e:51:ad:80:1a:20:49:c2:98:0f:
81:14:8f:55:40:89:49:50:7b:4d:cf:b3:30:49:ac:
f5:3e:fa:0a:17:33:d5:84:8e:d5:a2:be:d2:53:3e:
ca:5c:68:41:59:67:73:6f:87:4a:1b:27:48:29:59:
b9:19:eb:bb:04:bb:72:67:71:3a:26:73:59:9b:e1:
4a:6e:54:73:78:ae:6d:ee:df:da:71:8f:07:3d:f4:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:1B:C8:E0:88:75:C4:0C:72:32:4C:CE:CD:0D:AE:49:35:C7:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CDUbyOCIdcQMcjJMzs0Nrkk1x00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:08:40:20:ad:43:03:9f:3e:68:bf:10:d2:ae:48:20:8d:2d:
b9:ed:54:2e:23:7d:37:e1:00:2f:7a:d4:ea:4e:07:a6:7b:82:
b1:1e:b4:9b:e7:f6:52:f0:21:6a:be:76:2c:46:33:e6:8b:b9:
2e:79:de:2a:f3:a1:5f:35:1e:13:e6:1c:2f:6f:f6:54:9c:73:
cc:f8:d4:e0:29:78:08:50:f1:eb:47:86:c3:78:d0:26:40:23:
10:b6:3a:41:ef:28:ac:81:52:64:d1:4a:82:6b:a1:fb:a4:37:
b1:5c:d1:95:41:7f:92:02:38:3d:4d:83:53:c3:bb:43:0e:55:
d1:4f:c6:62:88:54:bc:8c:cb:3d:fe:e7:e7:c3:fb:b0:80:a2:
66:36:c3:93:8f:aa:1f:84:b8:4e:f2:8b:20:53:b9:20:b2:f3:
60:e9:b5:ee:2a:17:f9:ed:02:e2:26:08:6a:97:81:f1:b7:08:
75:5c:e7:f2:82:c5:6a:31:d7:cf:90:2d:9b:59:9b:f2:5f:df:
12:4c:a5:ab:99:9b:d6:50:c3:38:b5:21:d5:ea:a5:c8:09:f3:
71:02:63:a3:39:79:2d:44:ee:ce:25:68:e2:9a:6f:02:ab:8e:
c3:ba:f5:9c:69:32:1b:ed:94:2f:04:80:70:39:b2:30:5d:33:
67:f8:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:10:57 2025 by rpki-client