Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CYAYu4CIsLFH1IYZ1d2Sn_1dcpk.roa
File: CYAYu4CIsLFH1IYZ1d2Sn_1dcpk.roa (raw, json)
Hash identifier: DWA+4CzSmaQy7JlM2SNSJhf/xMlWKM14pO1vXuaxixA=
Subject key identifier: 09:80:18:BB:80:88:B0:B1:47:D4:86:19:D5:DD:92:9F:FD:5D:72:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CA8EB7DA14BA59FD149B64EA9745011D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CYAYu4CIsLFH1IYZ1d2Sn_1dcpk.roa
Signing time: Sun 06 Aug 2023 11:14:58 +0000
ROA not before: Sun 06 Aug 2023 11:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:8e:b7:da:14:ba:59:fd:14:9b:64:ea:97:45:01:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 11:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=098018bb8088b0b147d48619d5dd929ffd5d7299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:54:b7:19:13:45:05:8d:d7:24:a5:ad:01:
d8:a6:e5:2f:32:13:db:81:b1:51:02:55:3b:6c:49:
7c:85:c2:59:58:3b:86:14:05:84:64:27:ee:33:c8:
00:e3:29:e6:ab:7a:7c:03:bc:c4:19:c9:f9:be:46:
be:31:3f:7c:71:7d:60:07:67:0b:3c:ae:31:35:43:
07:7a:c6:cc:b0:3d:e7:bb:6f:fd:09:3a:92:6f:e2:
7b:22:fc:1f:c9:35:b1:d7:cd:50:88:fb:8a:c4:38:
2c:d5:27:80:f5:5f:a0:4f:28:ad:23:47:b0:91:79:
bb:76:2f:21:40:d8:de:be:dc:f6:39:da:48:84:f0:
a8:6c:ef:be:fc:8e:41:f0:0b:c1:50:e1:c6:84:24:
2c:1b:f3:06:5d:37:36:53:3a:b7:a4:8a:0e:c5:2b:
a1:73:6d:bd:32:d9:04:62:1f:5a:cc:0c:3b:b4:a1:
9f:83:49:6e:0e:37:dd:73:20:73:53:ba:ea:0c:a0:
09:0d:a3:c8:23:59:0a:8b:ba:7c:d7:cf:69:48:7e:
ce:48:43:c9:01:8b:99:56:08:14:a3:39:f6:20:a0:
f5:7b:1a:9f:10:cd:4f:c4:ab:c0:5e:74:d3:62:cb:
8d:bc:bd:6b:21:c7:89:74:43:5c:9d:d0:e4:65:88:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:18:BB:80:88:B0:B1:47:D4:86:19:D5:DD:92:9F:FD:5D:72:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CYAYu4CIsLFH1IYZ1d2Sn_1dcpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:e1:0f:3a:3c:c5:08:4d:1b:09:b8:5a:28:ee:29:be:23:6b:
44:3b:5e:75:ce:90:79:39:67:d0:d5:c6:4e:37:93:d0:e6:9c:
42:f6:8a:87:3a:03:31:d6:2a:fe:5f:72:89:47:f2:9a:37:49:
8b:a9:76:43:56:24:1e:1e:a3:6a:a9:38:a3:be:75:2d:15:ac:
af:d2:93:ad:2a:93:e5:f4:47:97:c9:4c:b8:4c:0a:30:7a:1d:
f0:9d:07:33:78:1e:6c:ae:eb:9a:84:69:32:67:7a:03:4a:4e:
6c:3a:a7:68:8e:b6:90:81:39:f5:82:5d:91:0e:2c:f4:c9:49:
fb:4b:8a:35:ba:78:9c:f1:62:d5:9f:28:e5:1f:c4:fc:68:02:
85:b0:b5:f3:e7:0e:8a:b0:fd:22:96:16:e4:fb:6b:61:6d:30:
3e:fa:18:d7:96:5a:ca:d6:53:36:94:01:af:98:08:0a:a8:4f:
53:0b:1a:80:c8:32:d1:a9:76:f6:4a:c1:2d:4d:02:12:13:70:
1f:f4:9e:4c:5a:f8:b0:7c:cd:06:09:e0:a6:9d:c7:7b:3a:37:
c1:ea:6c:6e:ff:93:1b:b0:c7:3b:72:9b:02:b3:2d:b4:e6:87:
98:90:f0:27:96:b5:2a:7f:01:ac:23:57:1b:8e:fc:ea:93:78:
8d:29:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:18 2025 by rpki-client