Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CXcfr9N63TNMz4v3Ys6cqE4Ln24.roa
File: CXcfr9N63TNMz4v3Ys6cqE4Ln24.roa (raw, json)
Hash identifier: NKFWfGdjKrWxsXqr3mb74nrerpmlSW0ODERlnxxVQZE=
Subject key identifier: 09:77:1F:AF:D3:7A:DD:33:4C:CF:8B:F7:62:CE:9C:A8:4E:0B:9F:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888C88C0D58BD1F4CC73943D311CDC103B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CXcfr9N63TNMz4v3Ys6cqE4Ln24.roa
Signing time: Mon 05 Jun 2023 17:09:12 +0000
ROA not before: Mon 05 Jun 2023 17:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:88:c0:d5:8b:d1:f4:cc:73:94:3d:31:1c:dc:10:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 17:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09771fafd37add334ccf8bf762ce9ca84e0b9f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:89:e0:25:88:0c:e5:f6:e8:68:3b:6c:85:
35:a0:1a:76:56:3e:12:ac:94:c2:a8:b0:cf:57:6f:
a4:5d:13:6f:de:22:9f:bd:26:63:b8:fe:7c:dd:00:
e5:75:cb:51:46:16:d3:22:5c:22:ba:40:65:c2:81:
ef:c3:85:e1:0b:00:aa:ee:9c:d5:f7:34:34:7e:b5:
30:ea:df:9b:ac:31:c2:a1:5e:e9:0b:cd:70:99:3a:
ea:68:88:60:81:cf:fa:d1:5b:4d:43:b0:d3:8f:02:
c9:eb:09:d2:b1:16:ae:ca:28:57:f8:37:5a:84:49:
98:fc:bd:4f:57:a2:00:8f:8d:54:4b:df:4d:8d:b1:
03:dd:63:e0:24:9d:1e:41:aa:aa:0e:36:3c:86:06:
82:0b:1f:4d:c3:d0:86:bf:8e:e6:3c:c6:15:28:39:
44:ad:59:22:71:cf:c9:3e:db:c4:20:86:52:7a:27:
ce:e8:0b:aa:d6:e3:d9:ca:02:1a:d1:2c:3a:c9:76:
7d:e2:06:08:7b:65:5c:d8:38:8d:a8:e9:24:c7:d6:
33:68:a3:9d:11:2e:d1:ee:a2:80:f9:a3:90:80:3e:
58:4a:cf:d9:73:2a:6e:fc:b7:bf:c4:c9:ac:9f:df:
5d:60:6a:e5:97:5b:b0:94:8c:21:1a:0c:0c:03:57:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:77:1F:AF:D3:7A:DD:33:4C:CF:8B:F7:62:CE:9C:A8:4E:0B:9F:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CXcfr9N63TNMz4v3Ys6cqE4Ln24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:24:53:12:86:24:e2:3f:ff:ef:d6:d6:bf:e5:22:ca:0c:1a:
45:a2:c2:b3:9e:05:34:84:93:7a:51:e1:78:7c:2c:a7:19:26:
cf:4b:75:66:7a:c0:e9:9d:82:7d:b0:d7:69:a9:8b:3e:c2:8b:
cb:47:b4:ae:ef:97:15:08:00:a9:1f:85:9e:3d:cb:22:79:7a:
f0:20:57:06:2e:0d:e9:7c:4f:12:58:6c:32:e6:84:92:59:07:
34:69:fa:5d:79:6f:33:91:46:74:57:a7:47:06:94:c4:e5:f0:
eb:f1:ca:01:4c:b0:c5:da:02:ea:28:5a:f9:cd:a4:0a:a1:a9:
4b:51:55:38:b1:94:19:52:6b:e0:5f:c7:0e:36:05:a1:7d:bf:
9c:db:ed:71:99:22:80:4b:2b:c3:cc:ff:71:af:7f:52:fc:f6:
89:1e:23:93:09:6d:75:d3:26:8d:bd:c0:dc:9b:e0:e8:9c:cd:
97:bb:42:e3:14:0d:b3:92:36:8a:e1:90:22:19:dc:11:3a:bb:
26:65:57:82:62:4c:ff:31:d6:e9:c6:c9:9f:e2:99:c9:ea:06:
ca:67:5c:f3:ca:d1:98:64:d5:0f:d5:ee:b6:39:c2:fe:73:f1:
ea:60:9e:e3:1e:93:c8:18:03:df:14:ba:90:6f:15:c6:6c:64:
5f:cf:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:26:29 2025 by rpki-client