Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CMUYyyXWiv0vk9a4IajAGlFSYME.roa
File: CMUYyyXWiv0vk9a4IajAGlFSYME.roa (raw, json)
Hash identifier: WvW78RWbGDwNenqRpMO8d2Ca+ju0YY28+iaeM/yoBMc=
Subject key identifier: 08:C5:18:CB:25:D6:8A:FD:2F:93:D6:B8:21:A8:C0:1A:51:52:60:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CB38ED917DA27C12F7D90DBEF26054D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CMUYyyXWiv0vk9a4IajAGlFSYME.roa
Signing time: Thu 19 Jan 2023 18:09:43 +0000
ROA not before: Thu 19 Jan 2023 18:09:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:38:ed:91:7d:a2:7c:12:f7:d9:0d:be:f2:60:54:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 18:09:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08c518cb25d68afd2f93d6b821a8c01a515260c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:0b:5c:82:5a:f7:fa:d0:64:65:54:2b:4c:
fe:8f:2d:e6:71:6f:c7:9d:1e:c0:5d:eb:be:75:67:
bd:bc:e8:09:2b:64:04:5e:42:6c:ed:84:a7:6c:13:
e2:17:75:ff:01:93:a0:87:91:ff:1a:6c:f1:1c:cc:
cf:db:b9:55:fb:4a:cc:b5:d1:a7:51:d0:02:c2:5a:
e6:76:85:91:c6:2e:e1:de:e1:80:b4:b5:25:6a:38:
28:5c:3e:de:3e:ee:21:9c:f9:98:dd:41:91:1c:06:
91:a4:81:fc:f3:e0:25:66:40:6d:86:f0:f2:53:fc:
70:c1:f8:ec:cf:5f:bc:11:17:9f:03:46:3a:4d:72:
54:8c:8b:89:44:db:8e:a9:97:81:1a:0c:fe:6a:5e:
43:c2:e8:d0:51:86:8e:fb:24:b4:a3:f4:37:c8:7b:
81:6d:f9:dc:d8:6a:4d:95:d6:28:9f:05:30:5a:3a:
4e:ff:ee:c4:f9:bc:80:ca:ec:5f:f9:bc:53:d6:5e:
4e:a5:83:a6:ad:4d:95:04:78:ca:01:c5:b8:68:df:
96:ab:90:9e:a0:eb:11:5a:26:a3:c4:c2:f5:2e:c8:
e7:c1:eb:76:6c:87:8b:28:2e:78:dd:ba:af:61:1b:
7b:6a:50:da:72:ed:ea:00:28:11:e9:86:0d:f1:cb:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C5:18:CB:25:D6:8A:FD:2F:93:D6:B8:21:A8:C0:1A:51:52:60:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CMUYyyXWiv0vk9a4IajAGlFSYME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:e7:2b:f9:55:ba:81:18:95:5d:88:a8:af:f3:1b:d8:48:f9:
22:b5:c1:3d:e3:d3:6a:11:9b:1d:8f:bc:24:75:e5:46:3f:40:
23:b0:b0:c7:90:e1:c4:8f:c4:3b:b0:41:00:5f:00:20:65:e7:
2a:01:2e:de:c4:bd:80:9e:d4:a5:e8:00:bc:09:e2:ff:f4:fd:
05:1f:94:ba:4d:14:ef:3b:33:34:3b:ac:ba:0d:6a:5f:5f:10:
6c:19:b4:8d:91:62:d5:79:ac:5c:c4:44:56:63:b8:f4:92:5e:
42:6f:58:fc:0c:f8:f7:81:81:4d:d8:96:d9:e1:d8:ac:7c:ad:
45:ec:f4:99:6e:83:48:3a:bf:9c:25:7a:98:01:b9:94:79:33:
69:c3:a2:aa:e0:e4:d2:1c:0b:cd:a2:7d:d7:a6:37:ad:5c:59:
02:61:49:31:d7:2d:87:d7:bc:59:ab:ce:8e:28:c2:c5:20:df:
94:1c:6d:a7:16:8e:3c:86:7c:32:2f:1f:a1:ba:8a:8b:18:19:
25:de:31:e0:86:4a:c6:b2:4d:c6:7a:b1:9e:0e:59:5f:98:ba:
f6:cc:75:a1:f1:e1:bf:67:76:8d:43:d5:9f:13:ff:41:30:d1:
72:c6:c6:8e:e4:78:cc:bc:ca:53:85:5e:68:21:57:46:2f:0a:
c8:cc:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:55 2025 by rpki-client