Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPRk0z13ektFRfD45ab7wSarQTY.roa
File: CPRk0z13ektFRfD45ab7wSarQTY.roa (raw, json)
Hash identifier: DpSmwlNZq5Nnm20IoOSTqMZOxl6Jm3uPY9CqdZU1NY4=
Subject key identifier: 08:F4:64:D3:3D:77:7A:4B:45:45:F0:F8:E5:A6:FB:C1:26:AB:41:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FE13CB8D8B41FD8CDAEDAE85843BF809
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPRk0z13ektFRfD45ab7wSarQTY.roa
Signing time: Sun 29 Jan 2023 15:09:48 +0000
ROA not before: Sun 29 Jan 2023 15:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fe:13:cb:8d:8b:41:fd:8c:da:ed:ae:85:84:3b:f8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 15:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08f464d33d777a4b4545f0f8e5a6fbc126ab4136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:3f:b6:74:7b:ca:fb:47:d9:9f:70:37:90:
02:5e:56:5f:2c:c0:7c:b5:5d:5a:4d:e1:6b:b6:43:
89:c4:c4:d9:47:5d:42:3a:24:f2:99:1c:19:2c:cf:
d7:2f:42:db:5d:90:74:b9:ab:a6:71:d5:03:15:56:
a8:d3:28:22:7f:46:79:5b:fa:e4:00:97:2b:47:2f:
e3:5c:d0:ed:ba:e7:80:b1:d4:30:8b:d8:75:61:7d:
5b:7c:1b:b6:f0:79:df:c9:28:91:9a:80:8d:e3:9a:
08:ae:c3:74:9d:79:c0:5f:85:c8:e7:10:4b:70:0a:
68:97:c1:8c:e4:df:be:3d:be:a9:78:d2:78:88:c1:
d7:3f:01:fb:58:8d:05:66:18:c3:f0:ee:fb:05:4d:
56:f1:f9:b2:41:0e:ac:a1:b5:d3:eb:fb:0b:c8:84:
76:bd:83:fa:85:da:4c:57:01:83:b1:4e:f6:72:9d:
0a:ad:b1:2b:23:b9:22:ad:33:41:63:04:bc:d2:93:
8d:71:15:92:0a:23:78:3a:ff:16:bc:d2:3b:68:6f:
39:2a:83:2e:ca:14:6d:52:4c:33:4a:49:b6:5c:e8:
b6:21:a7:df:83:cb:3f:28:9c:e7:54:6c:69:45:1f:
a8:73:23:a4:91:13:7c:63:85:42:0c:78:42:43:ff:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:64:D3:3D:77:7A:4B:45:45:F0:F8:E5:A6:FB:C1:26:AB:41:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPRk0z13ektFRfD45ab7wSarQTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:a9:f3:41:bc:ff:67:05:55:d4:8c:4a:d8:5e:69:0d:67:cb:
f0:a1:7e:10:34:15:d7:f6:ac:a8:06:7c:de:28:fe:26:c8:f1:
a4:f5:db:f2:58:82:58:e0:eb:00:b3:ee:6f:c8:14:80:d1:ff:
19:7e:44:43:b8:c5:6d:2d:8c:c9:b4:19:b8:82:80:be:0b:a8:
b9:ff:41:51:3a:c9:b7:3b:b1:9a:e5:26:b8:94:ea:b3:fd:ca:
4b:08:00:cc:e2:8f:0d:4f:c2:13:90:e3:23:b7:1c:8f:37:ee:
9f:a3:23:d4:33:12:7d:b3:5f:d0:e0:18:a5:3e:21:76:1e:87:
7e:ab:84:0d:50:52:b9:76:c2:d6:b4:39:23:d9:dc:4b:e2:fa:
0b:d2:f4:f9:27:2d:31:d7:55:e8:e5:7d:09:9b:a6:f7:47:d7:
00:0a:de:93:62:00:b8:c4:19:68:f0:2a:27:4d:bc:bf:ee:90:
0a:38:02:e3:df:1a:79:c5:ec:94:e5:b1:ad:0d:3e:71:fb:4a:
79:dc:d4:1d:80:3a:b6:db:e8:22:39:ad:79:d1:d8:aa:8a:60:
59:b9:2b:82:55:ab:cd:76:65:0b:da:85:20:b5:c4:3a:e3:e2:
09:8d:db:fc:88:25:dd:61:92:33:e6:d9:de:64:c3:d6:33:5b:
87:8d:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:10 2025 by rpki-client