Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CNXs0AiHOc4HcU9-Z9gumIOG2X0.roa
File: CNXs0AiHOc4HcU9-Z9gumIOG2X0.roa (raw, json)
Hash identifier: Lyzmf9KwtiJIkHwGK5VqvAiYVPM9kc+e9VWaMFP72LY=
Subject key identifier: 08:D5:EC:D0:08:87:39:CE:07:71:4F:7E:67:D8:2E:98:83:86:D9:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188552C93ADDA3DEEAC1B50BD5384363D80
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CNXs0AiHOc4HcU9-Z9gumIOG2X0.roa
Signing time: Thu 25 May 2023 23:09:24 +0000
ROA not before: Thu 25 May 2023 23:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:55:2c:93:ad:da:3d:ee:ac:1b:50:bd:53:84:36:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 23:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08d5ecd0088739ce07714f7e67d82e988386d97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:b9:f6:e6:cd:df:04:0d:53:8a:64:67:d1:
82:10:e2:42:06:ff:e4:f7:cb:09:ae:1d:94:32:9e:
32:04:9d:e7:f7:69:7b:0b:19:0c:13:a2:04:60:3e:
e9:43:7c:b3:c2:a0:b3:48:20:ac:87:53:60:31:a0:
58:7f:98:d6:23:40:32:d8:b0:c1:af:b1:82:bc:05:
f9:e7:1a:16:b6:e3:86:a7:b1:6b:f0:91:29:45:1e:
f9:c5:76:1a:df:4b:c5:37:44:8d:36:7b:1f:b4:e7:
bb:00:a4:80:03:e2:98:e6:61:27:aa:9a:65:9e:86:
25:db:88:49:4a:8a:6e:68:b2:1e:f4:55:08:07:16:
66:7e:19:0d:87:20:b4:77:ca:0e:0d:ae:d4:3f:06:
8e:b0:6c:d2:ab:5a:9d:de:8f:3a:a0:b1:a9:09:dc:
88:49:d0:3a:f8:39:3a:7b:7e:ff:01:5b:72:48:18:
04:4d:53:1e:1d:7f:6e:46:00:ed:13:2d:99:9d:94:
e2:a9:39:96:71:db:97:22:c5:dc:f9:64:ad:fc:59:
2b:8f:31:ee:55:43:17:e0:cb:90:90:f3:54:12:96:
16:1a:e4:43:ab:6a:c2:4c:74:50:2d:12:18:37:a1:
d7:b8:ac:c3:6f:85:3a:fd:97:d9:8d:d1:e9:c6:a8:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D5:EC:D0:08:87:39:CE:07:71:4F:7E:67:D8:2E:98:83:86:D9:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CNXs0AiHOc4HcU9-Z9gumIOG2X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:76:1f:c6:9b:f3:1a:c3:af:9d:e9:85:03:6a:f0:05:79:62:
fa:9d:30:c2:ac:5f:8f:12:6f:30:57:73:d7:5f:95:c2:14:e9:
aa:e1:63:24:a1:7f:2d:c4:f8:e3:b8:22:fa:03:1c:b0:f7:fb:
95:13:24:e1:cd:59:fe:f2:55:cb:ab:b9:4b:5a:ee:95:ea:22:
78:c2:3b:48:53:e1:f5:55:ce:49:5b:f5:da:18:05:13:5e:44:
86:c9:df:24:93:8f:23:dc:91:9c:39:b0:14:0d:1e:a5:cb:8a:
9f:c1:b5:74:4c:d5:b5:19:68:f1:db:f6:b1:6a:e0:05:0f:8e:
ec:52:a3:00:01:84:69:8a:ec:23:a1:b6:a4:0b:14:2d:9b:82:
82:68:11:ef:d9:53:14:9e:f5:38:e8:bf:50:ca:98:47:49:ee:
35:ac:1c:c8:d3:78:2a:d1:b8:7a:da:68:94:de:47:ad:be:ab:
f6:64:a6:46:2e:f5:03:18:8c:67:97:e7:5f:63:02:b5:65:85:
b3:f0:53:f8:29:24:f9:d8:4a:e2:b3:49:59:d4:41:e4:90:3e:
e8:61:e6:bd:67:41:67:f0:eb:e9:f1:dd:56:5a:df:6c:4f:e0:
7f:9f:62:43:1a:d2:6b:38:cb:52:4e:1b:aa:de:55:35:82:83:
d3:a1:a2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:22:18 2025 by rpki-client