Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CEthUFV6eaqGPwNZwYqlU_svy8c.roa
File: CEthUFV6eaqGPwNZwYqlU_svy8c.roa (raw, json)
Hash identifier: Muy+Nx1flNZThmVMa+aoC1vt1hiM4c0mvNBYH8Jxk8U=
Subject key identifier: 08:4B:61:50:55:7A:79:AA:86:3F:03:59:C1:8A:A5:53:FB:2F:CB:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872F66A6D9B82539BFAAA62E33099F660F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CEthUFV6eaqGPwNZwYqlU_svy8c.roa
Signing time: Wed 29 Mar 2023 22:04:29 +0000
ROA not before: Wed 29 Mar 2023 22:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:2f66:6056/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2f:66:a6:d9:b8:25:39:bf:aa:a6:2e:33:09:9f:66:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 22:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=084b6150557a79aa863f0359c18aa553fb2fcbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:29:d4:a9:41:1f:e4:f9:76:98:a2:63:f4:25:
97:80:43:ae:d3:de:3d:d8:79:9e:1d:29:76:48:76:
84:53:3a:7d:6c:9b:8e:09:5e:4f:fa:69:fb:6a:d0:
e3:b8:1f:b4:82:68:9a:e3:62:f5:09:1d:63:1a:af:
51:70:27:37:f4:76:4d:cf:e6:99:07:3f:f3:77:c7:
66:68:88:b7:12:1c:67:e0:e9:68:25:0a:e8:5f:60:
38:19:83:1e:12:08:a4:a2:c3:5b:6f:63:db:0e:ff:
d6:96:ed:38:47:ad:86:93:8c:e4:1e:6c:d7:1b:ea:
d9:8f:46:23:a7:63:3d:7a:2f:18:7f:a3:3f:95:21:
35:e0:95:01:10:e5:40:14:33:de:1a:da:a1:92:28:
70:ad:73:88:fa:1b:71:a2:06:c9:23:42:85:b1:aa:
a0:69:fc:b4:50:11:48:9a:1a:a3:33:ca:e2:9b:f9:
87:27:72:26:01:dd:fa:dc:af:14:37:2c:b7:09:2f:
b0:aa:f6:c1:1c:de:b9:95:53:a6:62:1a:68:b7:bb:
5f:6d:8c:a3:59:9d:bb:1c:35:6f:ef:f8:22:96:7d:
a6:a2:b3:fb:2c:f8:ff:16:cb:83:89:ef:8b:82:ad:
75:d1:f0:c2:01:08:2e:0c:50:c0:00:2f:20:31:4c:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4B:61:50:55:7A:79:AA:86:3F:03:59:C1:8A:A5:53:FB:2F:CB:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CEthUFV6eaqGPwNZwYqlU_svy8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:35:0c:9f:cd:63:97:c1:66:18:29:c3:84:82:41:24:40:45:
88:a6:84:52:c6:fa:4f:98:dc:16:0e:af:dc:10:72:6c:f4:8f:
aa:5a:4f:f5:8c:9a:c4:8a:20:16:7b:31:55:2d:06:99:83:dc:
19:e0:e1:21:88:bf:54:b7:de:37:e3:6c:f8:aa:29:ae:31:b9:
24:93:15:d4:db:b6:73:cf:e2:29:fa:dd:c1:67:d5:61:20:2e:
79:82:7e:ce:3f:bb:80:4b:50:dd:a0:af:a9:de:31:5b:4f:87:
5b:d0:ea:1f:6f:cb:b7:36:a6:8d:f3:a4:a6:04:b0:8a:ac:f3:
f4:1e:87:94:a4:90:30:d0:fe:7a:9d:2c:c1:86:3c:f9:21:82:
9c:60:e3:73:d7:f6:01:d6:41:80:88:d2:e7:2a:53:23:e6:a1:
33:aa:f1:17:b6:d1:9c:32:8b:3a:3e:85:ce:d9:63:fc:25:d4:
77:87:c5:31:57:f9:19:bc:df:3e:ac:b9:aa:e3:c7:ca:72:f6:
05:06:42:80:8e:d0:18:76:56:83:1d:4d:fc:56:6e:b1:cd:c4:
42:42:10:f5:05:d5:17:57:d9:99:ff:a3:bb:fc:da:8f:50:e7:
13:24:c4:bd:3e:1c:71:e7:51:27:5c:e4:99:b1:e4:2a:12:f4:
5b:13:41:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:34 2025 by rpki-client