Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CdGxcnU4sD49NLZSLn2H2iUpgak.roa
File: CdGxcnU4sD49NLZSLn2H2iUpgak.roa (raw, json)
Hash identifier: F2GYeOo3HFswMFwteDjKkqpiyGeKCtNoN/GqdF6I3Z0=
Subject key identifier: 09:D1:B1:72:75:38:B0:3E:3D:34:B6:52:2E:7D:87:DA:25:29:81:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863E06A5916FCF02371E0C2E488E0326C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CdGxcnU4sD49NLZSLn2H2iUpgak.roa
Signing time: Sat 11 Feb 2023 01:11:08 +0000
ROA not before: Sat 11 Feb 2023 01:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3e:06:a5:91:6f:cf:02:37:1e:0c:2e:48:8e:03:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 01:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09d1b1727538b03e3d34b6522e7d87da252981a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:44:54:fe:a5:bb:bb:b6:ce:c4:86:98:3c:
99:86:3a:be:4a:d3:c0:3e:a3:92:f8:ea:96:41:83:
9b:43:56:11:cc:b9:65:c5:c4:32:29:c5:74:8d:2f:
73:be:71:91:99:19:b5:1a:ed:15:77:1f:25:ad:1e:
c7:35:a5:2a:50:07:41:d2:5d:bf:10:94:51:0e:32:
95:47:91:58:6b:0b:be:19:29:e6:47:46:c8:df:83:
18:9c:0a:ea:44:2b:24:84:09:eb:71:be:0c:a5:25:
df:56:ac:6f:3c:6a:76:de:1c:13:b6:6d:f8:d2:07:
c5:f5:55:9f:b4:ec:42:6e:4f:70:65:ee:76:c5:ec:
52:86:bd:4c:6a:f8:6a:65:50:a3:ea:25:07:29:69:
fe:96:ce:b8:a3:05:08:5c:58:d8:ae:72:e0:b7:9e:
9a:52:5c:53:e3:41:53:93:81:e8:90:cc:94:5f:58:
1a:75:ce:4f:52:4a:cb:4b:80:4c:74:c6:05:8c:a1:
4a:ba:e8:ca:70:6e:35:7c:a0:3e:1c:6c:f9:c4:5f:
cf:4b:5c:3c:56:77:cd:b3:6a:ea:02:9b:13:f5:59:
d7:26:5f:43:b0:e5:ba:dd:56:e4:82:04:da:96:27:
36:2a:ad:fc:85:db:f3:c9:89:9b:3f:1d:47:5e:c9:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:B1:72:75:38:B0:3E:3D:34:B6:52:2E:7D:87:DA:25:29:81:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CdGxcnU4sD49NLZSLn2H2iUpgak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:51:4a:e1:d4:97:26:1c:bb:01:79:f0:04:bc:64:74:3d:fb:
82:2e:98:8a:ae:fe:58:e2:42:1a:dd:d4:cc:b7:d7:ae:b9:83:
0d:52:75:5f:ec:8f:1e:a2:39:61:95:90:78:82:70:c5:2d:d9:
6d:9c:40:17:df:d3:51:4d:7b:ee:08:f8:90:2c:5e:0c:44:05:
69:02:73:a0:f3:2e:26:28:3b:ce:7c:91:51:f8:d5:42:18:8a:
b0:6e:e9:0f:d4:3d:e6:88:1d:66:ed:2d:fb:94:ee:7d:a4:ca:
fa:e3:fa:2a:d3:6a:82:dd:a2:d5:52:24:ec:69:fe:10:8a:f4:
48:b9:9b:de:c0:4f:a4:54:f2:74:67:51:33:e8:10:71:b6:17:
17:8c:4c:f0:20:2b:f3:20:92:5e:56:42:03:12:cb:94:83:bf:
cd:e7:90:74:d3:ae:64:80:39:19:79:bf:fc:c8:60:15:f1:11:
e1:86:cf:d1:19:98:a9:0d:80:6a:99:0f:bc:ca:a1:5e:fa:01:
ea:74:fa:69:00:d6:7d:fc:b4:24:f8:ae:ed:41:e9:00:32:08:
77:13:f4:26:96:15:1b:63:9a:de:e2:1d:db:5c:ac:15:00:5c:
e9:69:db:cd:7e:64:d1:b3:80:5d:f0:bf:5f:e6:44:c4:89:b9:
93:ad:06:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:53:40 2025 by rpki-client