Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CTOj5_V9-Mvz4FHs2JulPVws69U.roa
File: CTOj5_V9-Mvz4FHs2JulPVws69U.roa (raw, json)
Hash identifier: Tc2y24HpNEel40n5AL+XykmSRjwn5jDuVbCMhkbvQ7E=
Subject key identifier: 09:33:A3:E7:F5:7D:F8:CB:F3:E0:51:EC:D8:9B:A5:3D:5C:2C:EB:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A981C985829D5889363DF24F2926C7FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CTOj5_V9-Mvz4FHs2JulPVws69U.roa
Signing time: Fri 03 Mar 2023 22:05:00 +0000
ROA not before: Fri 03 Mar 2023 22:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:a981:303d/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a9:81:c9:85:82:9d:58:89:36:3d:f2:4f:29:26:c7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 22:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0933a3e7f57df8cbf3e051ecd89ba53d5c2cebd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:37:43:83:96:10:c8:7f:6a:d8:5b:dc:ff:a6:
7a:e8:8f:ec:40:2b:3a:25:4a:9d:7f:1b:0e:89:82:
03:4e:43:c4:eb:0f:1a:bc:64:c4:8f:40:6c:83:03:
bf:d8:97:3c:ec:d6:1e:11:b4:67:50:91:a1:5a:5f:
7e:bb:86:0f:f9:19:91:89:48:a7:db:8e:a9:e4:f1:
b2:51:7a:10:9d:e0:55:98:22:d2:4b:8a:3f:45:f6:
e3:39:2e:53:72:3f:d8:55:b8:12:64:7c:28:47:55:
39:3a:4a:f3:44:2b:cc:6b:42:92:db:df:61:69:33:
41:f5:d3:e2:99:bd:49:1d:07:44:12:7e:b5:7c:58:
09:79:4b:25:66:ad:54:7c:f8:49:cb:ee:ef:20:ab:
24:08:2c:f0:12:39:36:5b:df:43:dd:9e:af:10:58:
a2:81:78:b6:59:13:9b:5e:1e:13:7c:86:42:82:87:
08:29:89:3d:d4:12:5b:d8:a4:32:d0:db:ff:69:d7:
e8:84:f0:f8:a5:86:92:42:53:ad:e9:e4:b8:24:6e:
70:41:db:98:3d:d0:9e:57:ab:3e:f9:38:45:dd:71:
d8:f3:d9:4d:18:17:41:d3:e1:a5:2d:4c:60:ac:a5:
70:ce:8f:ef:6c:50:5d:1c:fa:b2:bd:ae:12:e6:6e:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:33:A3:E7:F5:7D:F8:CB:F3:E0:51:EC:D8:9B:A5:3D:5C:2C:EB:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CTOj5_V9-Mvz4FHs2JulPVws69U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:1a:c4:b2:d4:94:30:c0:19:55:66:e8:7c:50:f4:6e:5b:78:
6e:0b:73:6a:1e:5e:86:3a:1b:90:ce:7b:4e:e5:3d:d8:b4:c6:
3c:5d:da:54:85:70:ac:d4:5a:80:7e:22:7a:44:65:c9:9b:27:
bd:aa:35:29:81:55:ef:e9:39:ac:cc:46:9f:b8:3d:6b:24:12:
a1:7b:30:35:39:ed:38:3d:5c:db:59:26:cb:08:de:a7:c1:9b:
ab:6f:28:fe:52:02:d3:4f:be:51:24:ce:d4:54:73:d9:32:71:
8b:6a:f4:41:55:ea:1e:7d:11:82:da:4e:f4:95:7c:e6:26:5a:
9c:6c:85:a3:fb:5a:43:bd:fd:40:c4:8b:17:1d:99:5b:5a:3d:
4d:4d:54:22:dc:c4:c8:03:c0:63:17:39:c9:b2:75:5d:b1:87:
93:f5:86:72:5c:6b:1a:55:7e:2f:cf:6a:cc:64:a7:bf:f6:f5:
ad:cb:dd:a2:f3:c2:07:dc:c3:56:91:8c:d2:cd:05:90:36:88:
eb:a1:9f:db:75:e8:30:ad:57:d1:56:73:06:7e:c8:5a:46:8c:
88:3f:dc:1e:f8:0a:fa:4b:06:92:fb:ce:21:c5:5e:2d:01:e7:
8b:04:57:17:0d:ef:2c:3c:9c:30:d3:80:51:53:cf:2a:48:9e:
03:70:f8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:42 2025 by rpki-client