Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPSL57QiT0q-f5Xmukj8j9caq3I.roa
File: CPSL57QiT0q-f5Xmukj8j9caq3I.roa (raw, json)
Hash identifier: lKz6fh/8UjwlquHFdTsafRrQ6XkM2X1zi4qt1/MrEk0=
Subject key identifier: 08:F4:8B:E7:B4:22:4F:4A:BE:7F:95:E6:BA:48:FC:8F:D7:1A:AB:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018324BEBD1B18B0C80EEF5A4B84D8932CF9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPSL57QiT0q-f5Xmukj8j9caq3I.roa
Signing time: Sat 10 Sep 2022 00:13:43 +0000
ROA not before: Sat 10 Sep 2022 00:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:24:be:bd:1b:18:b0:c8:0e:ef:5a:4b:84:d8:93:2c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 10 00:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08f48be7b4224f4abe7f95e6ba48fc8fd71aab72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:e2:00:18:88:b9:b9:49:84:63:af:3f:23:
56:ba:6f:86:3e:c1:38:90:44:81:8e:f6:bc:b2:1c:
b8:2f:71:e9:30:e5:cc:13:ba:3d:71:b3:70:83:80:
9d:2d:30:4b:3d:95:f4:f5:cd:5c:37:4d:0a:b4:7f:
0b:5c:74:26:71:c7:eb:28:bf:bb:56:59:f8:db:1e:
c4:97:81:1d:f3:62:6d:5c:15:70:94:37:ae:8c:79:
87:8f:47:5f:67:df:5e:f4:2c:24:86:c8:0e:8e:55:
1d:f8:5e:2e:32:4b:9a:7a:50:b7:67:b9:7b:fd:5e:
40:7a:06:7c:63:28:20:27:7f:64:73:39:32:2e:88:
79:42:9f:fd:bc:8c:27:77:b0:3e:f8:2e:14:2f:68:
5b:b4:a0:d5:fb:d4:42:fb:11:52:99:c4:c8:38:c3:
31:99:f0:a3:5a:ad:46:66:af:34:5d:18:2a:e1:6d:
8f:5c:7d:e5:3d:97:ba:f6:ae:84:36:c4:f4:b7:16:
3a:f3:82:28:7a:51:de:41:eb:0a:88:ec:fa:83:1d:
1c:91:f2:2d:23:ba:64:50:0f:1e:1a:d8:de:5d:27:
88:79:f0:2d:24:ff:43:5a:03:f5:af:bd:87:c1:74:
a4:1e:2e:bf:aa:75:f8:ff:b5:9f:90:79:5f:5b:93:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:8B:E7:B4:22:4F:4A:BE:7F:95:E6:BA:48:FC:8F:D7:1A:AB:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPSL57QiT0q-f5Xmukj8j9caq3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:91:0b:50:91:ef:cf:35:9c:7a:30:ea:a2:81:c2:7d:90:ef:
36:cc:82:fb:89:a8:c3:4a:85:be:71:a4:c2:b0:ac:09:05:e6:
94:4f:00:be:b3:50:9f:1e:1a:fd:0d:fc:55:64:11:88:e6:96:
f2:32:55:df:2e:61:dd:53:4b:bc:e4:04:9b:48:1a:5a:6b:a7:
aa:dd:36:1c:ab:ef:bb:86:78:30:db:1e:19:e7:0b:78:54:f9:
38:95:c8:8a:ad:fc:1e:34:75:2b:b6:6c:61:c8:48:6f:0a:73:
0f:49:30:6e:b0:f9:79:c8:80:78:1b:cb:80:91:a2:44:8b:44:
c3:27:82:95:e8:97:a7:b7:b2:74:a5:96:49:d0:5f:70:40:4a:
07:82:af:fb:73:83:fd:59:ce:e7:29:73:7a:83:52:56:ce:7e:
02:d4:36:d9:bc:ab:70:a5:1d:9a:5c:d2:b5:26:9b:81:29:63:
11:6c:17:b7:97:f2:bc:ac:b5:5a:4b:82:67:49:8a:0e:93:85:
a4:a7:e7:68:c1:97:23:ed:89:c6:09:29:27:cc:74:fd:18:4c:
47:24:f4:78:0e:46:41:ee:81:ff:15:97:06:96:e6:33:ab:cc:
ec:8f:45:f9:12:6d:84:02:c5:ae:b7:ff:8c:63:74:2e:47:8d:
dc:82:b3:1f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMkvr0bGLDIDu9aS4TYkyz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTEwMDAxMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGY0OGJlN2I0MjI0ZjRhYmU3Zjk1ZTZiYTQ4ZmM4ZmQ3MWFhYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoLiABiIublJhGOvPyNWum+GPsE4
kESBjva8shy4L3HpMOXME7o9cbNwg4CdLTBLPZX09c1cN00KtH8LXHQmccfrKL+7
Vln42x7El4Ed82JtXBVwlDeujHmHj0dfZ99e9CwkhsgOjlUd+F4uMkuaelC3Z7l7
/V5AegZ8YyggJ39kczkyLoh5Qp/9vIwnd7A++C4UL2hbtKDV+9RC+xFSmcTIOMMx
mfCjWq1GZq80XRgq4W2PXH3lPZe69q6ENsT0txY684IoelHeQesKiOz6gx0ckfIt
I7pkUA8eGtjeXSeIefAtJP9DWgP1r72HwXSkHi6/qnX4/7WfkHlfW5N6dwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAj0i+e0Ik9Kvn+V5rpI/I/XGqtyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ1BTTDU3UWlUMHEtZjVYbXVrajhqOWNhcTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFeRC1CR7881nHow6qKB
wn2Q7zbMgvuJqMNKhb5xpMKwrAkF5pRPAL6zUJ8eGv0N/FVkEYjmlvIyVd8uYd1T
S7zkBJtIGlprp6rdNhyr77uGeDDbHhnnC3hU+TiVyIqt/B40dSu2bGHISG8Kcw9J
MG6w+XnIgHgby4CRokSLRMMngpXol6e3snSllknQX3BASgeCr/tzg/1Zzucpc3qD
UlbOfgLUNtm8q3ClHZpc0rUmm4EpYxFsF7eX8rystVpLgmdJig6ThaSn52jBlyPt
icYJKSfMdP0YTEck9HgORkHugf8VlwaW5jOrzOyPRfkSbYQCxa63/4xjdC5HjdyC
sx8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:05 2025 by rpki-client