Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CcXcqxTMWKnCSpNiExBuzRSG2HA.roa
File: CcXcqxTMWKnCSpNiExBuzRSG2HA.roa (raw, json)
Hash identifier: yQg3Qzfx/r2dWHoORZJs9wr5qTtqZb4qs8uRb9eeAUY=
Subject key identifier: 09:C5:DC:AB:14:CC:58:A9:C2:4A:93:62:13:10:6E:CD:14:86:D8:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018959B096A4F0625815AABEAB6C8136F064
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CcXcqxTMWKnCSpNiExBuzRSG2HA.roa
Signing time: Sat 15 Jul 2023 13:14:52 +0000
ROA not before: Sat 15 Jul 2023 13:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:b0:96:a4:f0:62:58:15:aa:be:ab:6c:81:36:f0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 13:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09c5dcab14cc58a9c24a936213106ecd1486d870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:c6:b6:c5:07:20:0f:2a:5c:88:a4:ac:b5:
61:2b:2f:0e:bc:a8:4f:70:85:64:3c:4f:8a:a1:4f:
a3:37:39:b4:86:7f:81:b5:b0:c7:e3:17:c3:bd:35:
63:43:ff:83:b6:bc:bc:c3:76:7e:d2:71:38:c9:98:
26:61:c7:5a:6b:46:73:76:65:2b:8d:6a:07:b2:2a:
ab:24:cc:e5:c4:81:6b:4d:d0:3f:70:b1:5a:f9:d7:
4b:16:97:49:08:96:11:d9:d4:e4:dd:eb:69:30:98:
c5:85:11:43:5e:71:f9:90:8b:1a:85:2f:04:f1:bf:
1f:5a:72:9f:3e:8f:26:54:53:f1:d8:e3:c0:13:21:
88:25:86:61:c0:e9:48:05:99:4c:8d:48:a2:ee:21:
a2:88:ba:9f:51:29:af:20:61:a6:5e:76:e9:8a:6b:
4d:d6:3b:78:aa:1f:20:e6:3a:e7:d9:e0:c3:5c:08:
fe:b7:9c:c4:69:62:03:26:e1:4a:06:e2:f3:49:8e:
16:ef:99:d2:fe:fd:84:c4:04:97:53:8a:e7:38:8d:
04:0b:66:f2:00:44:4e:70:5e:b1:53:48:48:14:75:
de:c6:0a:bd:40:00:5e:e2:05:54:5b:9f:2e:e8:80:
c9:e2:d7:ea:e1:f6:01:c0:af:fa:de:ef:6a:20:32:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C5:DC:AB:14:CC:58:A9:C2:4A:93:62:13:10:6E:CD:14:86:D8:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CcXcqxTMWKnCSpNiExBuzRSG2HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:c9:92:df:cb:e7:58:2c:cd:7b:c2:2b:46:ce:db:e4:e4:f7:
5b:72:e4:de:74:9b:fc:a4:25:59:fc:59:96:b8:5b:50:10:2e:
d9:cb:8e:c9:4e:1a:7d:21:35:c4:eb:9f:42:7b:35:2d:ea:3c:
5b:a3:d3:43:9f:eb:e2:5d:52:52:15:b0:80:82:ff:f3:a1:5b:
49:88:db:a5:ae:b8:09:ac:11:a2:ea:a5:4e:e0:38:06:a3:9b:
0e:8a:7e:e4:52:a7:18:64:10:db:57:51:6c:3e:5c:70:d1:5f:
ba:be:c3:48:de:d2:ef:ff:bb:02:1c:6b:b8:c2:70:1d:31:1a:
b8:64:53:ad:4e:6b:c8:9a:9a:61:e2:0e:28:d5:b8:dd:5e:62:
78:38:bd:af:71:f1:65:85:eb:22:26:c2:5e:fb:2f:9a:cc:42:
54:ff:51:ab:40:16:44:16:70:39:21:a1:9f:39:6c:f5:38:7a:
35:a5:e9:f5:11:c7:f7:c3:63:17:5d:d4:c1:03:12:be:25:bb:
3a:53:af:bf:30:8f:78:a4:65:ba:d8:9a:4b:0a:0b:6d:4a:ec:
3e:0e:5b:e9:58:94:17:d5:1e:63:8d:b1:61:1b:24:51:01:87:
83:9b:a3:ac:85:ce:2e:c6:6b:83:c5:f4:34:95:fa:ae:1f:d9:
ab:c4:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:51 2025 by rpki-client