Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cfyp1nRERPiMwrG5oy6rGlcYOIk.roa
File: Cfyp1nRERPiMwrG5oy6rGlcYOIk.roa (raw, json)
Hash identifier: 5hvVkILihMjfLEbELsPfkHvAraKqS5gQp0/uaTVwlOU=
Subject key identifier: 09:FC:A9:D6:74:44:44:F8:8C:C2:B1:B9:A3:2E:AB:1A:57:18:38:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 90EA7860
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cfyp1nRERPiMwrG5oy6rGlcYOIk.roa
Signing time: Wed 29 Jun 2022 16:05:02 +0000
ROA not before: Wed 29 Jun 2022 16:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:181:b034:b42d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431285344 (0x90ea7860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 29 16:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09fca9d6744444f88cc2b1b9a32eab1a57183889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:67:91:51:ea:31:3f:77:2d:0c:66:12:c0:
57:e4:be:7b:47:59:28:0b:90:82:04:67:aa:1a:c0:
44:90:07:5f:dc:de:e5:04:7f:03:6e:36:bf:13:39:
c3:d9:83:85:35:ca:89:dd:f1:d6:d1:de:d0:34:f0:
10:b0:ca:91:e7:af:9e:7e:2d:bc:22:e8:d0:a4:67:
43:6d:f1:c4:06:77:a3:83:dc:07:be:14:c5:6e:ba:
42:3f:08:d3:69:79:91:60:a8:d9:02:8e:5c:8f:fc:
a6:fd:d7:a3:2b:fd:67:46:c2:40:b9:97:8e:bc:51:
8b:96:fd:14:ad:9d:22:e1:ca:f9:a8:90:55:c0:f9:
a9:b3:8c:91:b6:0d:a4:ad:ec:fc:9d:91:f9:d6:87:
e0:45:20:3e:eb:12:80:37:9e:79:b3:95:fa:d4:e7:
b8:3d:18:ae:b5:8e:d4:9e:ae:70:ce:26:bb:95:88:
b9:37:54:e2:7f:11:ba:f0:a5:1c:2a:9a:87:54:d1:
45:52:25:85:e5:79:21:98:8b:5b:8b:05:d7:3b:2b:
db:24:9f:93:ea:7c:04:53:a4:d8:ee:16:52:c9:62:
aa:01:a1:44:fe:fe:c4:24:14:ac:60:d9:2c:ee:e2:
e8:bb:65:8d:02:a1:fa:c1:d6:ae:0f:f2:0c:52:8d:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:A9:D6:74:44:44:F8:8C:C2:B1:B9:A3:2E:AB:1A:57:18:38:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cfyp1nRERPiMwrG5oy6rGlcYOIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:a2:7e:aa:c0:b9:0a:ee:8b:7c:25:81:31:6a:1c:7e:2a:01:
a2:ba:00:c4:c5:f7:59:54:8d:79:32:77:fa:14:8c:52:a3:80:
0f:6d:0b:70:f7:62:f8:4d:4d:3e:b0:c7:e3:c2:f5:fd:06:b2:
4b:2e:d7:c3:15:3d:b5:f0:07:04:73:fb:1b:fa:aa:92:a3:cd:
c2:4c:b0:f1:2e:ee:2a:f4:da:c9:96:78:4c:a8:3b:dc:e6:80:
a9:35:9e:4e:c0:73:7c:b1:8a:2f:81:57:5c:c1:95:48:91:7a:
d7:39:f9:82:77:a4:40:0b:da:0b:19:e6:93:5f:54:57:22:14:
49:a5:ca:0d:cc:e6:f4:11:75:85:3a:90:a5:3d:5b:de:d2:d6:
9b:2a:13:af:da:81:56:b5:fa:df:e2:cb:d3:1e:39:e1:e3:3d:
e7:8f:ed:ee:15:cf:ec:67:bb:ca:df:c7:dc:59:75:4d:fd:3e:
cf:a4:9e:cb:6d:0f:09:fc:d6:7e:ad:82:87:5c:92:e2:27:d6:
97:90:a3:b2:5c:e3:1b:85:bf:1e:c4:2e:ca:e6:c8:16:0c:e8:
91:10:bf:11:bf:f6:5a:e8:23:7c:dd:35:43:32:62:cb:db:78:
04:3a:8f:b2:72:4e:71:fc:72:a0:06:aa:d9:b3:66:33:23:5e:
14:4d:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:34 2025 by rpki-client