Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CUCCUgM5Qt2MdgjEU0Wra4wGvAM.roa
File: CUCCUgM5Qt2MdgjEU0Wra4wGvAM.roa (raw, json)
Hash identifier: v7SFqSia7M+20tw0ooS4WjzODLFTXht6XAS94ec4fA8=
Subject key identifier: 09:40:82:52:03:39:42:DD:8C:76:08:C4:53:45:AB:6B:8C:06:BC:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71FB7850
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CUCCUgM5Qt2MdgjEU0Wra4wGvAM.roa
Signing time: Sat 12 Mar 2022 19:09:34 +0000
ROA not before: Sat 12 Mar 2022 19:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912305744 (0x71fb7850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 19:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09408252033942dd8c7608c45345ab6b8c06bc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:56:7e:7c:d7:86:56:c3:1d:c3:b6:d0:11:
ff:93:e1:29:b2:bb:d6:43:db:ca:22:68:25:3c:41:
45:be:91:b3:3d:5c:8e:90:3b:d4:77:91:af:2b:b6:
7d:ef:90:2c:d8:08:bf:59:a3:1a:a4:59:2d:68:c2:
ff:f3:3c:6f:57:44:ee:8e:ca:e0:69:14:df:dc:49:
1a:b0:fc:6f:6d:03:a1:90:a7:75:ed:27:42:ff:0b:
a2:3b:e5:ce:b3:24:ac:62:cf:83:d9:d6:60:85:33:
29:bc:85:7c:35:6f:dc:2b:34:0a:33:81:6d:ca:b6:
03:70:2b:48:24:ac:79:3f:26:e5:db:db:4d:49:56:
eb:2a:8a:57:22:bf:76:5a:2f:e0:d1:12:51:09:de:
46:54:c9:3a:f7:0d:60:3f:8a:02:5e:e2:81:b4:4b:
ae:08:83:3f:c8:8d:e1:1f:48:13:d5:81:0c:d9:a9:
76:b1:a2:ef:5f:59:43:79:9c:aa:46:6c:72:b8:62:
f7:01:30:5e:a0:58:3d:f6:f6:b6:46:13:db:2b:27:
3b:71:b2:04:f5:82:44:aa:47:27:3f:13:e2:13:80:
e4:4f:9a:df:6e:83:aa:17:5b:8e:ae:2f:be:c9:04:
66:f7:50:5c:d6:25:05:bb:75:ff:07:17:6c:76:b2:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:82:52:03:39:42:DD:8C:76:08:C4:53:45:AB:6B:8C:06:BC:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CUCCUgM5Qt2MdgjEU0Wra4wGvAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:20:dd:d4:40:ef:51:5c:4a:53:b0:52:e5:84:b2:78:3a:d7:
29:5f:2f:9a:b6:15:83:c7:78:ab:ac:7d:73:43:99:c5:14:45:
b8:4d:20:73:ce:c7:f0:c3:2a:e3:1d:7a:35:30:c5:65:55:d3:
e2:2a:1d:56:c6:74:e5:f7:31:37:c0:89:3e:f4:de:eb:7a:4d:
f7:30:b5:40:87:3e:ce:ed:64:2e:f4:79:8d:62:aa:7d:01:56:
50:26:f7:f9:da:d4:c2:01:9c:94:18:4d:b4:7c:74:93:40:63:
40:4e:25:41:43:ac:2a:bf:34:b2:d8:f3:9b:77:11:c9:17:92:
29:d5:f2:27:b0:51:db:47:49:bc:cd:84:1c:d2:96:af:2f:f9:
b0:4b:40:16:d1:ce:40:3f:41:c1:75:32:89:df:df:57:d7:8b:
04:e2:34:d4:8a:81:fc:df:0d:ea:ca:a8:b6:fd:f3:a3:2a:bc:
81:1c:65:06:15:9f:3a:13:a8:21:01:f1:e0:20:a0:eb:1e:14:
9f:d1:c7:08:3b:22:a1:7a:14:4e:62:8c:64:c3:ec:39:8a:d0:
f9:04:da:44:7d:21:1e:d4:01:bc:30:c3:b3:50:d0:26:9f:f5:
10:08:94:ae:5c:73:e1:90:e9:29:cd:d5:09:b1:2f:d9:f0:3c:
e7:39:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:34 2025 by rpki-client