Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CbSpgbahmcV6UWwo8MfnK9xW2Qk.roa
File: CbSpgbahmcV6UWwo8MfnK9xW2Qk.roa (raw, json)
Hash identifier: nZ62J3NheTgLWxKiv5B1eLWfmDX45Hwh1NxzQVknuTg=
Subject key identifier: 09:B4:A9:81:B6:A1:99:C5:7A:51:6C:28:F0:C7:E7:2B:DC:56:D9:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888A6285E3719049B126FF0134FC9B095B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CbSpgbahmcV6UWwo8MfnK9xW2Qk.roa
Signing time: Mon 05 Jun 2023 07:08:12 +0000
ROA not before: Mon 05 Jun 2023 07:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:62:85:e3:71:90:49:b1:26:ff:01:34:fc:9b:09:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 07:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09b4a981b6a199c57a516c28f0c7e72bdc56d909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:00:8f:05:65:46:ea:14:7f:8c:9b:a9:6d:
46:9b:54:49:ef:72:1b:b6:17:ae:cb:7b:cc:c0:4d:
18:9b:7f:52:34:bd:8c:f3:4b:53:32:cf:5f:5c:41:
74:eb:de:a5:ef:53:41:56:2c:86:9b:52:16:09:2e:
f9:db:ac:bb:8d:9b:a5:1c:ed:91:1f:be:1b:7e:dc:
e7:ba:24:5d:3a:4c:c4:3b:ac:c7:24:1e:b1:48:44:
92:fa:ec:ba:2d:0e:11:59:de:4c:f1:c3:36:72:79:
8d:53:a9:1f:d0:ff:3e:00:51:e7:d0:2b:43:7f:59:
8b:d4:04:96:c4:90:f2:f1:da:c8:4f:40:c5:e6:04:
8d:d4:69:10:bf:18:79:d9:b8:d8:5f:84:9e:c4:cd:
b2:08:d6:47:4e:c8:72:72:c0:70:be:18:f0:08:24:
2a:3e:f3:01:63:71:52:f3:b3:e0:c4:a5:fb:e1:fc:
e4:ab:cb:60:be:4d:04:5e:b6:9a:c9:09:43:36:97:
03:c9:6e:7e:32:2f:53:d8:9d:c4:61:15:da:5c:96:
b1:fe:40:32:db:38:c6:a0:44:03:c6:2d:93:b6:31:
dc:ac:d7:39:b7:d1:b4:eb:bb:0a:c4:00:f3:8a:69:
fc:b4:04:f4:13:3b:b4:e6:d2:14:ab:9e:d3:86:80:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:A9:81:B6:A1:99:C5:7A:51:6C:28:F0:C7:E7:2B:DC:56:D9:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CbSpgbahmcV6UWwo8MfnK9xW2Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:18:1d:e1:bc:da:ff:56:45:c2:24:ab:c4:66:ee:0b:b4:85:
01:66:c3:1c:7f:82:47:35:49:34:eb:bf:4b:ed:73:3e:ab:8f:
df:9e:70:19:b6:1f:78:21:84:41:96:07:01:b8:97:b9:27:18:
c9:c2:54:09:29:d2:8f:e3:28:6f:58:04:e7:41:87:43:b6:9c:
64:1e:30:68:91:02:55:ac:4c:d8:47:26:21:3e:2f:72:4e:9d:
2a:4b:a5:f7:66:03:48:9b:5f:c8:5c:4c:ca:85:7f:c5:81:a0:
12:eb:ae:d6:54:e1:c4:fb:c6:84:0e:f1:86:5a:66:58:2a:9d:
e2:4d:4f:4e:42:92:15:75:bb:e3:7a:68:41:fa:59:45:d3:d6:
24:f2:8e:4c:d6:96:83:a4:8f:a4:fe:dc:76:4f:cf:ae:ac:ae:
b9:fb:58:b6:11:5f:2c:14:7f:64:65:07:9b:3f:21:8c:6c:58:
72:12:6a:6c:e4:94:27:77:ff:36:8e:fe:7f:44:f6:91:d4:37:
e7:dd:de:c4:23:44:a3:b7:0e:5e:48:7f:ed:fe:1c:70:f6:a5:
05:7a:84:de:a3:a5:ae:7b:d7:30:20:a8:eb:66:5d:b1:77:9c:
30:8a:51:4f:3c:b4:d3:5d:c0:ab:1c:ae:6a:2a:bb:68:16:c0:
60:5b:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:53 2025 by rpki-client