Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CMsnQbb_qmOMegiZj5DtEuHooeM.roa
File: CMsnQbb_qmOMegiZj5DtEuHooeM.roa (raw, json)
Hash identifier: BHuEBBZannRE90aIhLYsEfE4SjGgQ6o++O3VB3KtnIc=
Subject key identifier: 08:CB:27:41:B6:FF:AA:63:8C:7A:08:99:8F:90:ED:12:E1:E8:A1:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018635DAAF6755232A317F07F238BC7107B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CMsnQbb_qmOMegiZj5DtEuHooeM.roa
Signing time: Thu 09 Feb 2023 11:06:09 +0000
ROA not before: Thu 09 Feb 2023 11:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:35da:2ab7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:da:af:67:55:23:2a:31:7f:07:f2:38:bc:71:07:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 11:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08cb2741b6ffaa638c7a08998f90ed12e1e8a1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:da:33:5f:b4:e7:ea:a3:60:d9:20:ee:bb:
34:67:fd:fc:e2:44:d8:d8:da:7e:8c:f0:79:57:3f:
1a:bd:57:c5:ee:c2:83:ed:c7:2e:79:54:1e:05:a0:
6e:88:e9:4a:55:89:95:2e:a9:76:0e:6b:32:f4:56:
67:fe:ba:bb:ee:f3:7a:63:bf:a1:68:4f:88:b2:a4:
b0:a4:8f:c8:92:60:a3:06:ac:6e:4f:5b:e6:50:0b:
91:ba:43:9b:2e:11:2c:fd:f7:7f:61:3b:64:7e:20:
9c:e4:d3:aa:08:0a:4e:8e:4a:f1:3c:d2:95:d9:d3:
06:89:75:9b:19:65:aa:37:33:7b:2b:1c:e5:80:0f:
0b:96:f9:f7:30:03:ad:b3:1e:71:ed:69:65:04:3a:
07:34:7f:6d:da:94:a0:da:fc:8d:76:d0:9e:ce:b5:
8c:d5:3b:99:47:db:c5:33:17:33:2c:ce:f4:00:65:
26:c2:ca:52:70:74:45:c6:fc:ca:00:a4:a4:50:72:
72:42:91:cc:a3:8e:0a:df:41:fd:79:c7:c0:d7:29:
57:9e:e7:b5:27:ad:56:ad:bf:0d:12:8a:56:e2:fd:
65:42:66:e5:6f:93:d5:80:bc:df:08:fe:30:46:f3:
72:64:66:7e:38:1f:f8:e5:0e:a6:26:4f:42:50:08:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:27:41:B6:FF:AA:63:8C:7A:08:99:8F:90:ED:12:E1:E8:A1:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CMsnQbb_qmOMegiZj5DtEuHooeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:17:91:98:5a:49:c0:bd:8b:c8:d6:ba:6b:8b:db:d4:21:90:
52:49:a1:3e:fc:65:77:0c:59:9b:3f:c8:5d:2c:cd:cf:d2:0f:
45:3b:ba:b1:ff:ae:76:31:7d:5e:8c:f4:ef:19:a9:aa:c2:a9:
c9:80:94:3c:d8:db:cc:d1:47:c3:b0:80:c8:2e:c2:fa:c7:93:
71:79:fa:35:64:62:a4:42:be:e9:c7:70:66:d3:04:9c:26:6a:
ae:8d:b0:2d:08:94:8d:c1:e5:55:0e:66:31:57:ea:8b:50:72:
6b:a2:46:05:d3:df:0a:fe:9c:dc:9f:4e:1c:b3:39:93:7f:a1:
0c:f0:67:4c:a2:75:59:cd:ea:e4:cc:f5:61:de:31:d5:6f:94:
a5:45:73:93:18:a3:03:50:f9:27:18:f3:72:cd:43:0b:4e:91:
04:12:fa:53:36:9a:9c:54:e5:9c:f8:4b:3b:d6:1f:16:09:99:
7a:a5:43:58:67:77:58:e1:1e:8e:99:d0:0d:6a:ac:99:f1:16:
5f:40:0d:a3:05:40:ee:c5:1c:53:16:81:2b:e5:55:82:5c:39:
b0:14:03:db:20:ab:b2:a6:7a:3b:4b:ec:02:f3:64:4c:ed:70:
2e:b2:a6:a9:46:f4:53:00:61:e9:3e:da:55:81:78:e4:0b:3d:
5d:ef:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:26 2025 by rpki-client