Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CGLDmnvQmr5uXrZmvlZeO8sh-14.roa
File: CGLDmnvQmr5uXrZmvlZeO8sh-14.roa (raw, json)
Hash identifier: qkIRDGu7oAfAdcgKr0rH5O5MyTJYojOuHlk1sDY5QVs=
Subject key identifier: 08:62:C3:9A:7B:D0:9A:BE:6E:5E:B6:66:BE:56:5E:3B:CB:21:FB:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88F1D0C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CGLDmnvQmr5uXrZmvlZeO8sh-14.roa
Signing time: Wed 01 Jun 2022 07:14:13 +0000
ROA not before: Wed 01 Jun 2022 07:14:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297548997 (0x88f1d0c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 07:14:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0862c39a7bd09abe6e5eb666be565e3bcb21fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:f7:f0:29:43:1d:ca:c7:e6:0a:30:62:ba:
fc:ec:30:e7:bc:f7:1a:11:3f:c5:d6:6e:0a:54:87:
94:39:9c:33:8c:2b:c1:cd:0e:0a:5d:87:0c:8a:15:
21:d1:a8:e8:fe:76:64:70:ef:98:a6:42:22:8a:10:
fa:0c:a6:e3:77:db:e4:6e:a4:b0:23:36:93:df:82:
1f:07:0c:08:f4:c2:f6:e5:bf:7d:a6:3b:ad:8c:94:
5a:46:58:52:1a:b8:f4:be:d4:26:67:eb:45:05:8d:
8d:a9:95:71:00:19:e9:d0:35:5d:26:4f:7b:78:98:
9f:ce:1d:98:e7:a1:fd:d1:a9:71:27:38:f7:0b:bc:
a9:c6:f1:b8:cc:5c:4e:82:05:76:d3:d8:bf:90:be:
b1:e8:bc:4c:aa:bf:17:4b:f4:96:ab:58:bd:ef:42:
19:d5:c5:57:ab:4b:5d:5d:f0:a3:29:c9:b7:3f:fe:
b2:28:69:f1:02:ea:cc:96:2d:ec:d3:c4:1b:70:41:
62:9d:93:6d:46:b9:6c:a2:ed:ff:a7:87:40:3d:86:
13:34:43:d1:2a:6c:9c:6f:51:57:2c:b8:33:8e:b4:
a9:93:3c:f1:2d:78:4a:38:15:49:3f:11:ae:02:58:
1c:b4:0f:53:c9:55:ae:8e:67:04:4a:35:54:57:69:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:62:C3:9A:7B:D0:9A:BE:6E:5E:B6:66:BE:56:5E:3B:CB:21:FB:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CGLDmnvQmr5uXrZmvlZeO8sh-14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:b0:ee:1e:8d:90:84:df:2a:c7:73:24:b7:2c:1a:9b:c6:08:
8b:15:43:4b:d1:8b:c9:e4:a6:3e:ab:54:3a:1d:41:ee:f9:46:
4c:6b:89:6f:75:38:b5:d8:a6:df:10:89:ed:ca:b5:3d:15:e3:
32:38:e9:de:e4:78:ec:f5:5c:69:bc:9f:8b:7f:2f:f3:3e:a7:
c5:07:45:ec:10:3b:62:da:51:57:e5:51:9c:bb:18:41:c7:1c:
16:ee:46:be:3d:38:fe:57:6c:c3:12:54:0c:2c:77:fb:00:b4:
a3:5f:ed:77:ca:92:99:fe:a9:3a:3c:73:2f:17:dc:66:d0:e3:
e3:5b:e9:ca:19:26:eb:1a:e4:fa:ed:28:fb:f2:6b:06:69:44:
06:a3:cb:f3:39:a7:ef:0d:d7:68:62:43:5f:f4:22:71:89:f4:
aa:d4:5c:68:f7:19:e1:ba:ff:e0:83:48:66:13:28:e2:05:5c:
62:78:fe:cc:ab:f8:6d:8f:57:9c:7f:74:c2:f1:06:cf:e2:7b:
61:34:f1:98:1d:1d:72:cc:ea:3e:23:bb:e3:fc:0b:93:0b:31:
43:bf:cb:af:9b:35:ce:5b:8b:27:2f:96:c7:f4:f1:bb:2a:4c:
5a:67:91:60:03:1b:f2:34:d7:3d:c2:45:b3:cb:3b:4f:33:84:
22:28:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:08:08 2025 by rpki-client