Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CiSalG497adeJcd5Yzai334JLLk.roa
File: CiSalG497adeJcd5Yzai334JLLk.roa (raw, json)
Hash identifier: PKQZhCQw+635scY/axYTqTmW5JxOXLpYhjI5oqXl2O4=
Subject key identifier: 0A:24:9A:94:6E:3D:ED:A7:5E:25:C7:79:63:36:A2:DF:7E:09:2C:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893DC99EB21EAB6811FF451976FADB49D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CiSalG497adeJcd5Yzai334JLLk.roa
Signing time: Mon 10 Jul 2023 03:12:50 +0000
ROA not before: Mon 10 Jul 2023 03:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3d:c9:9e:b2:1e:ab:68:11:ff:45:19:76:fa:db:49:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 03:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a249a946e3deda75e25c7796336a2df7e092cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:b1:a2:a8:29:18:8b:83:c4:5d:44:8b:09:
a3:ab:98:30:d5:c1:5b:f5:7f:a4:5f:21:96:fd:fd:
3d:f0:37:e4:47:e2:1a:aa:85:92:fa:e9:85:d5:8f:
0e:4a:21:19:2e:8a:05:ce:ae:11:4d:f7:5f:21:20:
32:f8:db:52:14:63:3d:9b:f7:8c:da:24:7b:a6:91:
8c:54:1b:b9:18:8a:71:14:c7:cb:e3:ff:ed:96:e0:
b5:0e:36:53:12:97:ac:ac:08:c9:45:91:e1:aa:72:
8c:ee:a9:b0:9f:d3:8d:c2:06:b3:c1:23:cc:86:b2:
27:f3:7d:5e:9a:98:d0:9e:07:1e:2e:3d:5a:13:82:
cc:44:a4:ed:cc:15:02:60:b5:ab:4e:25:62:82:54:
c8:fd:08:41:e0:ae:26:84:a4:13:a3:98:12:c5:c9:
1d:16:cd:da:e6:f0:4c:f7:78:af:75:55:c8:b0:d4:
bb:e5:9b:f0:9e:6e:32:a3:f9:b6:4f:87:bb:39:57:
94:02:e3:b6:80:bf:a8:82:3b:25:56:a5:dc:17:21:
75:88:ec:2d:87:75:9b:f1:03:e3:d8:cb:4c:6a:0b:
b7:f2:71:15:7e:a3:99:c2:78:ba:db:db:f0:6d:17:
51:1c:e3:a0:be:f6:9d:d2:22:07:41:14:cc:0a:90:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:24:9A:94:6E:3D:ED:A7:5E:25:C7:79:63:36:A2:DF:7E:09:2C:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CiSalG497adeJcd5Yzai334JLLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:de:5c:1a:50:5e:45:c3:10:af:95:07:81:8f:c0:8d:5b:37:
ab:c7:88:f6:d7:13:df:58:eb:5a:ff:84:29:5b:bb:f4:8e:54:
16:27:4a:f4:f0:5b:80:f7:bf:43:9b:f8:da:12:b4:31:8f:f9:
21:2e:46:4a:2b:d9:ce:f4:90:79:a0:4a:63:a1:78:7e:ac:a3:
bb:00:c9:f6:20:59:95:6b:8a:02:16:6b:55:77:5a:e0:5a:e5:
d6:2a:87:48:aa:50:60:7f:67:93:43:e3:15:ca:13:b6:bb:4f:
ba:65:87:64:79:29:eb:57:59:1d:2e:f9:cf:28:85:9f:66:ef:
b3:5c:bb:94:0a:14:e4:70:31:4e:d6:74:cb:74:bd:e7:f2:9a:
69:ca:e7:71:0c:73:1a:fb:56:ff:1f:ef:42:73:bd:40:60:a2:
70:03:6e:0a:f1:97:fa:f0:33:20:74:8c:98:ae:5f:51:3b:43:
42:60:b9:6c:f4:f4:e2:ef:42:91:36:0e:d7:25:a7:e1:64:ac:
96:92:01:4c:7f:ae:c4:6c:4b:d2:a5:ea:41:a1:cf:2a:e8:8a:
e2:01:9d:33:09:da:7c:df:4d:46:9e:12:a7:85:99:a0:9d:d0:
8a:e6:e8:17:2b:1e:a2:67:0c:03:6f:d8:23:e5:c8:b9:00:9f:
0b:eb:d7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:22 2025 by rpki-client