Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CYhUE57sxIqxWhDkD1-CRB2egns.roa
File: CYhUE57sxIqxWhDkD1-CRB2egns.roa (raw, json)
Hash identifier: nGcRYY53wsCcBpcnaHr7NEcpEMX4ZH4na+nC90ddiT8=
Subject key identifier: 09:88:54:13:9E:EC:C4:8A:B1:5A:10:E4:0F:5F:82:44:1D:9E:82:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018718B15247FAD9FF030137F0EC18B89EA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CYhUE57sxIqxWhDkD1-CRB2egns.roa
Signing time: Sat 25 Mar 2023 12:14:46 +0000
ROA not before: Sat 25 Mar 2023 12:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:18:b1:52:47:fa:d9:ff:03:01:37:f0:ec:18:b8:9e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 12:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=098854139eecc48ab15a10e40f5f82441d9e827b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:2a:13:a7:41:63:b3:5f:b1:cf:4f:a3:be:
2d:27:a8:5f:22:54:92:55:22:a7:e5:c7:4f:e2:81:
76:a7:91:e5:36:7f:76:e2:d8:36:63:e1:61:6b:3b:
2c:01:ab:e5:95:c1:45:cf:ed:1d:37:11:2a:82:0b:
97:21:f5:1d:37:66:6c:24:ad:30:42:dd:04:ee:74:
8a:61:cd:03:04:75:f2:0a:d4:e1:0d:00:6b:69:0f:
6e:ec:ed:29:cf:1e:26:11:85:57:c8:b2:f9:08:3d:
b1:f2:c8:39:72:4b:c9:29:7a:79:9a:1b:8b:07:4c:
73:23:19:e9:2e:4c:8b:b6:a8:13:c9:88:bc:a1:77:
e4:a4:7c:76:ea:1f:e1:da:ce:24:00:76:61:0a:78:
be:55:7b:fc:25:e1:ec:49:e0:51:50:a0:b8:21:70:
ca:d2:e0:d9:86:3b:8c:c1:9e:90:ef:f7:2f:26:db:
f5:6d:0a:f4:49:38:8a:3e:24:cd:82:d9:0b:25:a5:
2a:54:f5:43:42:48:9b:2a:c7:75:b5:c4:7e:4c:90:
8e:fb:5d:b8:45:c1:c6:8e:70:95:73:76:40:05:44:
27:f5:f9:b0:e8:a7:ba:a8:7a:e4:a4:b1:91:ac:68:
1d:21:42:54:56:0d:6d:5b:9d:dd:44:21:05:68:4e:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:88:54:13:9E:EC:C4:8A:B1:5A:10:E4:0F:5F:82:44:1D:9E:82:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CYhUE57sxIqxWhDkD1-CRB2egns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:05:f3:bf:97:9d:d4:08:1b:94:d2:66:9f:49:79:71:34:15:
1f:4f:1a:84:72:03:36:35:28:e0:79:5a:d9:de:e3:fa:88:86:
ef:fe:6f:20:94:7a:09:bb:3e:f3:fe:f2:97:e5:c8:a8:37:ac:
1d:63:73:d0:7c:bd:e5:ac:dd:7c:76:67:f1:2e:7a:ea:5a:1d:
3f:a8:22:76:9d:12:c0:bc:27:b4:c5:33:d1:b5:f0:a6:08:ae:
6e:80:c6:5b:8e:00:8a:82:29:6e:33:12:32:bd:89:e0:ea:35:
1f:e5:bc:dd:39:55:28:6f:57:8e:09:01:b0:6d:b2:5d:8c:a2:
41:bb:d1:4b:1c:2c:bb:24:08:a4:61:e1:c2:7b:63:04:78:e7:
df:4a:db:64:fe:40:5e:02:d7:fb:83:a3:9f:38:1d:31:b4:e8:
c9:39:ff:cc:e0:4d:99:fb:f9:97:eb:61:f3:74:a4:6d:eb:fd:
ce:bb:d0:57:12:02:87:86:da:2f:0c:65:59:a0:66:0c:74:dd:
21:86:58:d6:72:56:21:b5:33:6f:ae:36:bd:55:2b:6b:d2:d8:
62:0f:dd:7d:43:5f:8f:f6:95:09:3b:a8:4b:36:af:61:7b:8d:
72:d5:49:13:0e:14:6d:4e:f0:64:1b:f6:e6:6e:0c:2e:4d:35:
2e:ec:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:39:21 2025 by rpki-client