Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CEmUZG9IMBeTqcH2P_zZf7Hl6kc.roa
File: CEmUZG9IMBeTqcH2P_zZf7Hl6kc.roa (raw, json)
Hash identifier: OA6Auml5DhmnZsycVKgvdsyxgmj1blR3c52Vwc9nJhY=
Subject key identifier: 08:49:94:64:6F:48:30:17:93:A9:C1:F6:3F:FC:D9:7F:B1:E5:EA:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E006A0F3B58D4FA6C0EFF9CC19DDBCCC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CEmUZG9IMBeTqcH2P_zZf7Hl6kc.roa
Signing time: Wed 03 May 2023 05:12:23 +0000
ROA not before: Wed 03 May 2023 05:12:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:06:a0:f3:b5:8d:4f:a6:c0:ef:f9:cc:19:dd:bc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 05:12:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=084994646f48301793a9c1f63ffcd97fb1e5ea47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:70:3d:44:98:0a:50:4f:cb:18:14:b9:ff:
d1:25:23:a0:d3:06:23:92:99:32:31:22:b3:e6:8e:
ed:e0:59:ec:e6:48:8f:3b:4d:ff:71:56:83:42:71:
24:00:ec:27:75:dd:40:21:30:77:a8:bc:cc:40:b1:
24:4e:3f:fc:87:30:db:8c:7e:09:c7:07:98:dc:b2:
b2:fe:20:3c:63:9a:cf:63:20:4a:ec:1c:e4:f5:bd:
15:5d:f0:87:26:39:ca:da:dd:46:dd:55:0c:4e:1e:
f0:64:ae:bc:43:79:a2:46:f3:3a:3b:45:36:05:67:
53:5c:98:b5:7d:16:4d:44:37:69:c7:ad:99:13:59:
aa:fc:c3:70:e2:bf:e8:86:9e:e7:71:b5:bd:31:13:
48:b1:6e:e4:2f:b0:2c:6b:d7:b7:55:cd:5d:b4:01:
86:eb:37:d8:1e:1f:3c:b2:a8:38:40:4d:3e:3d:47:
d7:9d:c4:5c:64:3b:fc:51:c5:06:d2:17:4f:09:51:
7c:4f:1f:19:63:a2:28:76:14:92:fc:f7:14:cf:37:
67:1e:1b:4b:b3:49:c7:61:9a:72:33:c7:99:dc:9e:
a2:78:a4:ad:41:d8:d7:ea:7f:49:33:83:79:95:94:
db:e2:36:45:8e:ad:e5:28:3d:c5:f1:4b:fc:8c:47:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:94:64:6F:48:30:17:93:A9:C1:F6:3F:FC:D9:7F:B1:E5:EA:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CEmUZG9IMBeTqcH2P_zZf7Hl6kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:bd:96:80:3a:4c:03:e9:6e:e1:15:cd:96:27:10:98:ae:26:
53:97:1d:64:ab:a1:9b:c9:43:25:c2:29:34:a9:4c:99:39:13:
0b:38:a3:23:98:c8:38:18:16:75:6b:1d:a9:8f:86:14:46:56:
4f:7c:60:ba:e6:32:85:5a:5d:c0:63:07:9d:18:91:1c:6a:27:
16:2c:2f:50:69:d9:4b:cc:bc:a9:c9:3f:0b:e2:8f:0c:b0:1d:
16:85:a6:bc:32:29:aa:13:fa:53:1d:f8:8b:bc:85:86:e7:f4:
2d:36:ba:a4:98:20:69:c8:af:3d:e7:dc:e7:73:3b:0d:a5:fb:
ca:e9:21:42:62:89:5f:89:4d:fc:cf:f3:ef:e4:a5:c8:28:80:
a5:4c:47:54:a0:62:0c:f6:4f:7a:a2:0c:b3:09:f4:45:3f:04:
26:74:ff:54:f5:2e:96:89:c1:eb:3f:37:14:b4:7b:29:65:a8:
c3:03:8d:ce:c5:b9:0c:b9:9b:f8:c3:88:8d:03:e6:8c:60:68:
bd:7b:6a:fc:b7:db:87:d8:44:89:36:2b:b1:7c:bf:3c:0d:5b:
8d:5c:90:95:6e:cd:12:60:39:86:a1:3b:3e:1a:7b:d1:59:9c:
bf:f3:29:35:32:ff:10:c3:6b:4e:3e:e0:18:8a:e0:21:1e:6a:
01:ef:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:16 2025 by rpki-client