Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPnueKI5YgIZc4snHSgg1hEI-Is.roa
File: CPnueKI5YgIZc4snHSgg1hEI-Is.roa (raw, json)
Hash identifier: 5KGWt8m4bPpYzfCjtJfPRTvWAL34wySNN8VE1U3sBig=
Subject key identifier: 08:F9:EE:78:A2:39:62:02:19:73:8B:27:1D:28:20:D6:11:08:F8:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F57E879636DAA71B0C51E2C21B12182C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPnueKI5YgIZc4snHSgg1hEI-Is.roa
Signing time: Fri 27 Jan 2023 23:09:48 +0000
ROA not before: Fri 27 Jan 2023 23:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f5:7e:87:96:36:da:a7:1b:0c:51:e2:c2:1b:12:18:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 23:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08f9ee78a239620219738b271d2820d61108f88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:d7:2f:ac:f6:61:4d:47:34:ee:ef:61:78:
8a:7b:e0:80:15:dc:9d:2f:b0:e9:36:e8:45:61:4a:
12:fe:17:03:03:a4:de:fa:11:98:70:93:9e:5f:74:
69:30:b2:ca:39:c2:8d:bb:5a:e2:70:be:01:d8:7b:
04:4a:82:79:86:3e:87:34:c6:43:05:6e:67:ff:e7:
79:b3:63:fd:c2:8c:7a:f6:3c:1e:c6:e4:7d:b6:f3:
93:9f:df:e1:3f:b1:8a:dc:4b:68:84:d1:a7:0a:89:
8b:10:02:79:90:5c:d7:88:f6:48:c8:bc:d1:79:c6:
33:55:f4:66:6e:6a:64:f3:98:bd:09:8e:d7:60:c6:
26:5f:81:25:41:e7:ff:6e:e8:69:4b:fc:5d:b3:1d:
00:8c:47:bb:77:2b:21:0b:c6:c7:16:95:d3:6b:a7:
c2:b1:e1:f2:1a:f2:5d:13:dc:0f:db:2d:17:86:f0:
cf:76:5f:5c:b1:7f:3d:73:56:12:8d:5f:a3:50:56:
d6:fb:f8:c2:22:da:7b:7f:07:25:23:81:9b:bb:72:
12:f5:74:93:52:a8:fa:1c:8f:b2:2c:3e:e9:78:23:
d6:c0:20:e9:ab:16:0f:7c:70:da:6c:5d:95:3f:35:
ef:35:28:6e:8d:c1:39:c2:01:79:87:e8:b5:47:ef:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F9:EE:78:A2:39:62:02:19:73:8B:27:1D:28:20:D6:11:08:F8:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CPnueKI5YgIZc4snHSgg1hEI-Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:02:69:f2:c3:5b:bd:05:88:52:b2:0d:cf:7e:ec:49:e9:80:
e2:fa:87:c9:d5:6a:9a:1f:99:12:b9:a2:41:aa:da:d3:4f:1e:
96:0f:9f:47:5f:ac:fd:71:75:3d:e3:75:ce:27:2e:2e:e9:d9:
24:8a:d7:7b:70:fa:f5:28:83:1d:03:02:2d:e1:f2:88:84:05:
c4:3d:26:31:73:54:41:32:d1:99:f1:58:dd:74:d4:e8:96:fc:
a6:ff:03:20:07:c8:51:28:25:a9:1b:90:40:6a:1c:eb:29:8b:
b6:14:3e:86:c3:37:de:37:eb:80:64:41:d9:97:59:11:27:96:
49:e7:67:ab:f4:7c:1e:c9:03:34:e0:70:32:80:9c:1a:aa:36:
df:6e:b0:6e:79:e9:8c:26:7d:28:59:68:2c:b8:e0:0e:b6:e9:
30:45:81:ab:96:95:d3:fd:10:dd:00:ff:7c:96:6f:56:8c:e0:
04:c4:82:12:a9:88:e7:d7:82:07:01:70:94:bb:fd:bb:63:34:
fc:33:8d:85:92:a2:2b:1a:da:b5:87:aa:f7:55:5c:7a:7e:4b:
16:3f:aa:f5:aa:32:5d:72:16:2f:da:28:f1:af:48:16:80:ba:
9f:15:d3:f4:06:9c:3a:9f:1f:22:77:6b:1c:29:e1:fa:3a:a8:
64:5c:33:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:52:11 2025 by rpki-client