Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CHjgq3VEviPOFqi1OgARb27bEtM.roa
File: CHjgq3VEviPOFqi1OgARb27bEtM.roa (raw, json)
Hash identifier: fRp58DyoKmcgv2xJEd2/8imFHvmVDDNyLPRucJ4LjOI=
Subject key identifier: 08:78:E0:AB:75:44:BE:23:CE:16:A8:B5:3A:00:11:6F:6E:DB:12:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DCC92BB73F1D4542582F1665D893ABD4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CHjgq3VEviPOFqi1OgARb27bEtM.roa
Signing time: Thu 10 Aug 2023 00:11:58 +0000
ROA not before: Thu 10 Aug 2023 00:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dc:c9:2b:b7:3f:1d:45:42:58:2f:16:65:d8:93:ab:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 00:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0878e0ab7544be23ce16a8b53a00116f6edb12d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f2:f9:ee:97:fb:70:f2:ce:5f:48:d6:bb:83:
9e:cb:0c:22:13:ef:12:93:e8:bc:8d:78:88:ec:67:
28:9e:04:e8:4d:87:e0:91:05:75:cb:49:03:84:56:
32:27:3d:17:02:8a:4d:a1:d9:19:1e:5b:52:1e:49:
d3:98:9c:92:70:6f:99:c7:99:21:3c:55:62:3f:d4:
08:7b:fc:a3:cf:70:ab:48:58:0a:42:eb:e8:61:a2:
1d:82:89:6b:5d:e7:8b:62:15:85:47:72:50:80:84:
5f:87:27:9f:3c:c8:35:92:d4:9d:43:d4:0a:c2:80:
65:7d:e0:70:2d:ab:dd:d9:f4:7f:5e:6f:26:73:d0:
5b:bf:e6:c0:55:4a:42:ac:3c:cc:fd:af:16:bd:d6:
61:60:46:df:07:56:1f:56:02:e7:88:36:79:51:28:
c4:6b:5f:be:62:af:26:0b:65:80:0c:f9:20:9b:28:
9a:dc:cc:0a:f0:9d:34:5b:13:de:14:f1:4f:15:55:
35:a8:e2:cc:e6:52:c5:72:c6:6d:0e:a0:be:16:da:
79:7b:79:a6:2a:1b:cd:24:8b:ec:e7:aa:b2:bb:b0:
66:cd:71:98:50:6c:72:0a:e6:cc:5f:1e:d4:fe:ec:
fd:fc:f5:6c:6d:85:57:8b:d2:ef:7d:0f:85:28:ae:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:78:E0:AB:75:44:BE:23:CE:16:A8:B5:3A:00:11:6F:6E:DB:12:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CHjgq3VEviPOFqi1OgARb27bEtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:42:bf:2e:88:41:6e:bc:96:09:92:9e:44:68:5e:d7:32:13:
b3:b5:e9:71:01:8d:f4:f3:85:7d:b2:61:58:9c:d2:ce:50:43:
2b:bf:75:fa:80:31:91:44:41:0a:e1:d5:a5:65:1d:16:46:9b:
9f:38:ed:a4:c2:1e:08:6c:dc:58:f2:0b:f0:13:87:d5:11:34:
ac:5b:4d:ff:ec:f1:86:59:c4:5d:32:84:b1:2a:78:19:4f:7a:
f0:84:e2:5e:4f:c1:7a:63:06:51:42:59:cc:63:d3:4c:fb:90:
32:55:a9:60:58:fb:10:84:af:b6:05:a8:32:d6:7b:f7:37:e7:
bd:9d:4b:05:7d:bc:d3:a9:de:9b:d2:7c:4c:ee:8d:ab:11:58:
f5:49:a4:da:88:14:d1:fc:5a:aa:15:89:8a:96:de:4f:de:31:
90:f7:12:6c:0c:ad:3a:2f:94:2a:b7:2f:47:e1:ed:de:b5:3b:
68:29:68:b6:6d:d7:d5:98:5f:52:25:c4:37:35:2b:d1:6e:99:
93:b3:a8:ee:cb:71:96:28:13:68:b3:21:4a:78:24:86:b2:2a:
5f:57:47:ba:5f:1e:00:21:ea:68:cb:74:65:61:77:b5:7f:db:
33:34:ce:38:12:10:46:85:66:7f:46:13:7d:cd:c9:65:3a:c1:
37:bd:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:07:57 2025 by rpki-client