Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CfRhIk1ZA9y7fOCRDmek7u0rjtg.roa
File: CfRhIk1ZA9y7fOCRDmek7u0rjtg.roa (raw, json)
Hash identifier: MldoUAIRCDCMYMitcc+y754qG6KwvmTqzMR8sDFWb08=
Subject key identifier: 09:F4:61:22:4D:59:03:DC:BB:7C:E0:91:0E:67:A4:EE:ED:2B:8E:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018832A3C73A24A787220A84A9CF95A76864
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CfRhIk1ZA9y7fOCRDmek7u0rjtg.roa
Signing time: Fri 19 May 2023 06:12:54 +0000
ROA not before: Fri 19 May 2023 06:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:a3:c7:3a:24:a7:87:22:0a:84:a9:cf:95:a7:68:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 06:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09f461224d5903dcbb7ce0910e67a4eeed2b8ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:a8:ab:2e:98:05:11:54:96:66:10:92:1e:
9e:09:e9:71:bd:c4:b4:83:4c:22:86:2c:d4:c6:b4:
00:9b:68:d5:50:cf:13:c5:c1:00:70:85:83:35:8e:
12:63:4b:79:d9:57:81:85:fb:0e:30:8a:c2:8b:06:
b5:f9:35:52:e5:2e:e7:fe:f0:62:ad:e0:ab:74:b0:
1b:c3:d7:6d:e3:93:72:1b:77:07:0e:5c:3d:6b:92:
7b:4d:a9:1f:85:f0:19:3e:1e:43:bf:ef:eb:a3:cd:
54:d3:bd:9d:94:ab:b0:e6:2e:a2:63:2a:65:2a:13:
0b:03:ab:cd:e2:d1:ca:cd:51:af:d6:e7:0d:99:48:
b1:0f:2a:53:45:c7:7d:d5:3d:76:98:8a:d7:47:86:
c1:e3:a9:5d:f5:f8:eb:d8:a3:7c:0a:78:71:b3:a1:
ce:22:ed:d3:02:67:9a:6b:14:6b:e7:9f:d3:dd:ab:
69:1e:9a:69:13:0f:03:ad:a2:36:9a:e3:87:02:61:
2e:63:e6:c1:55:4d:2b:92:56:df:10:b7:0b:a9:f9:
fd:54:d3:06:61:e0:4c:05:41:fb:fb:09:1d:32:d4:
9a:e8:16:6a:5c:66:f6:96:e2:be:ec:41:47:e6:e2:
0a:de:e4:fc:0f:c3:8b:23:e1:f6:75:87:58:43:2a:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:61:22:4D:59:03:DC:BB:7C:E0:91:0E:67:A4:EE:ED:2B:8E:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CfRhIk1ZA9y7fOCRDmek7u0rjtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:ec:99:d2:57:b9:42:54:27:6e:a7:0a:ac:13:0a:51:54:66:
89:1c:d4:00:6d:6c:b9:99:cf:db:67:05:ea:fd:17:e6:52:a9:
a5:d0:a2:21:23:7c:23:a6:14:fe:66:27:b0:66:02:b0:93:6c:
9a:b1:88:f4:9a:58:e6:aa:31:ea:20:4d:ad:93:77:32:0c:c9:
19:5a:2e:2e:b3:6e:e4:11:50:48:57:d6:5e:9d:c4:a6:75:5c:
bd:ab:f5:03:18:9a:69:8d:ae:8b:33:0c:15:59:0e:14:72:ba:
88:16:b9:6a:8c:14:f8:00:44:bc:34:80:8e:3f:e3:79:77:b1:
7b:72:40:f8:b5:76:5f:22:49:e6:ff:fb:d9:b8:e9:f4:26:61:
51:f2:70:61:bd:29:ec:42:4b:60:d7:46:8b:60:7d:ab:de:ae:
dd:29:08:63:36:17:d5:77:ab:31:60:d1:1f:57:61:21:62:bf:
6d:0d:c0:4d:64:5f:f1:d3:de:de:80:f0:f9:f1:13:ec:11:c1:
96:d6:55:b4:fb:84:ce:c0:2d:d1:d3:ed:ea:98:c9:ce:6f:a3:
84:4c:96:29:ae:66:fb:fb:32:ef:f0:c0:50:34:cd:16:81:a7:
2b:99:da:d0:76:bd:f0:da:05:35:ea:f6:d7:cf:30:cd:18:35:
07:44:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:34:30 2025 by rpki-client