Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CZQTofNWvqs1j7ObLLJtos-eMSU.roa
File: CZQTofNWvqs1j7ObLLJtos-eMSU.roa (raw, json)
Hash identifier: YAp09XVC+VVboHfPNK9MgLutixPa1HDdgpKbXuyx8R4=
Subject key identifier: 09:94:13:A1:F3:56:BE:AB:35:8F:B3:9B:2C:B2:6D:A2:CF:9E:31:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B2C8AF1E6FC6B58BEF0DE95ECFDFBE4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CZQTofNWvqs1j7ObLLJtos-eMSU.roa
Signing time: Sun 05 Mar 2023 17:19:01 +0000
ROA not before: Sun 05 Mar 2023 17:19:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b2:c8:af:1e:6f:c6:b5:8b:ef:0d:e9:5e:cf:df:be:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 17:19:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=099413a1f356beab358fb39b2cb26da2cf9e3125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:cf:9e:ce:f1:04:49:b9:ed:3e:96:00:6d:
61:95:c0:81:03:ae:6c:66:6a:f1:b8:02:3e:ed:64:
05:19:d2:72:17:97:5c:a6:a6:53:c4:58:52:e1:bc:
f4:d5:1d:1f:51:76:ea:9d:df:fa:3a:e7:5c:c4:c5:
d0:a3:dd:b5:98:81:7d:c3:ed:c8:ce:35:86:87:77:
ea:f4:45:e4:0b:d0:76:6c:87:3a:42:69:d3:69:12:
d8:0c:93:38:06:60:ad:2c:19:43:9d:2c:1a:29:cb:
7d:06:c3:39:a6:c5:fd:c3:f4:8f:b4:c4:fa:a0:e2:
75:55:cb:03:35:b6:c5:a5:4b:7d:c4:5b:e0:7f:b2:
f9:b9:12:dd:51:06:cc:f9:3a:0a:a6:cd:0c:5d:02:
e7:56:86:32:a7:d8:d1:be:21:e4:24:be:fd:e8:89:
9b:71:5a:fa:4f:71:2e:7b:2c:58:31:45:6b:31:0b:
c4:de:73:37:f8:a0:1a:ab:d2:d3:9f:ab:9b:77:90:
50:f5:f6:e6:f2:93:13:83:bb:b4:ce:b8:87:e7:2b:
dd:76:72:b0:7d:47:e7:f8:54:45:2f:06:0a:e3:ea:
3b:4b:29:6a:cf:f3:79:72:d7:05:aa:e2:a0:9b:69:
d6:24:21:f9:cf:88:da:90:4a:af:60:8c:3c:96:44:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:94:13:A1:F3:56:BE:AB:35:8F:B3:9B:2C:B2:6D:A2:CF:9E:31:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CZQTofNWvqs1j7ObLLJtos-eMSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:73:5d:25:5d:35:c1:5c:a6:ab:ce:8d:9b:71:da:17:6f:f1:
8f:3a:21:82:ff:02:6f:74:2e:6d:64:7e:82:50:7e:71:24:01:
d3:04:55:c1:12:db:d0:1a:9b:32:ae:ac:32:cb:74:a2:ab:24:
01:1b:21:2f:9a:dd:ab:50:33:89:7a:4c:bc:4c:83:2a:12:a7:
7a:7a:68:88:bf:a4:98:fb:c3:45:52:d1:8d:be:d0:63:bd:ca:
e7:77:f3:62:36:54:ca:26:c9:ab:5e:59:26:f3:31:34:72:7f:
b2:fd:77:a6:13:6f:93:51:dc:6c:a1:fc:2f:8b:23:83:8c:ae:
99:30:9a:12:18:50:0f:b0:96:65:e3:6e:8e:4c:db:39:ea:2f:
d4:95:88:e7:74:38:a1:48:09:9b:86:40:98:92:22:e6:2f:66:
ab:18:1e:1b:ad:cb:e3:fb:2b:a6:72:1d:f3:32:16:f8:07:63:
30:ce:5a:0f:3e:a6:7c:71:dc:67:76:d5:fe:6d:2c:c5:29:ca:
12:b4:e0:05:36:d8:7e:a3:47:b0:0a:27:35:20:d0:c7:ee:dc:
5d:bc:e7:af:f1:31:a7:2c:14:b9:3d:d6:02:7a:d7:3b:87:c4:
b1:2d:4f:b4:54:e7:be:b9:be:da:e3:0f:0b:e0:21:b0:4f:be:
d3:fd:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:22 2025 by rpki-client