Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cm0fVpz-NFHotGpIzLjSy0TcmDA.roa
File: Cm0fVpz-NFHotGpIzLjSy0TcmDA.roa (raw, json)
Hash identifier: kzzy44+XynFdaoXXbiU7y+eoZl0GsQE00UPSNAdCeJE=
Subject key identifier: 0A:6D:1F:56:9C:FE:34:51:E8:B4:6A:48:CC:B8:D2:CB:44:DC:98:30
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018743D486F5B9FDB8C10978C543421632DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cm0fVpz-NFHotGpIzLjSy0TcmDA.roa
Signing time: Sun 02 Apr 2023 21:16:54 +0000
ROA not before: Sun 02 Apr 2023 21:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:43:d4:86:f5:b9:fd:b8:c1:09:78:c5:43:42:16:32:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 21:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a6d1f569cfe3451e8b46a48ccb8d2cb44dc9830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:ee:e6:86:0d:c2:43:56:97:0e:76:f8:eb:
23:67:84:b9:4c:ed:f6:5e:f4:5d:13:45:ff:41:9d:
79:5f:9b:02:b3:f3:13:98:38:84:1d:fd:e6:39:2c:
e7:09:c5:bc:7c:95:ec:76:55:fd:cb:07:b2:48:dc:
19:4f:e2:21:0e:20:46:b8:2b:f0:ab:9e:10:7c:cb:
7b:9c:80:1b:bc:e4:36:c5:81:c4:c2:ee:a1:f1:f2:
13:bc:b2:81:8c:73:14:4f:bf:1d:04:19:0b:b7:e6:
a1:51:5a:78:fb:0a:90:d8:6b:cc:49:d7:f7:a1:c9:
66:46:0a:f9:40:97:c0:60:b2:3d:69:5f:6c:d4:b4:
be:3f:c1:28:26:75:34:8a:38:67:e6:e4:dc:9c:a2:
71:98:3d:ad:ca:1e:06:85:27:e0:24:5f:7f:88:e0:
9e:c9:2d:75:8b:1e:6d:f2:c7:6a:97:be:bf:50:54:
8e:d4:76:d6:cd:19:74:1a:4a:29:35:e5:8f:e5:8d:
b8:d9:64:95:78:99:af:b6:50:44:2e:5f:4c:47:94:
29:65:65:3a:2c:81:3e:02:d4:a8:94:7e:cf:4c:46:
3f:0f:28:91:bc:c0:db:b6:5d:c5:ff:03:60:5d:91:
83:c5:7b:17:55:87:bc:6e:97:04:f7:c6:0b:ec:ef:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6D:1F:56:9C:FE:34:51:E8:B4:6A:48:CC:B8:D2:CB:44:DC:98:30
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cm0fVpz-NFHotGpIzLjSy0TcmDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:d3:4b:5d:95:39:1a:31:72:93:58:f2:3e:71:bb:ab:35:31:
02:33:96:05:a9:1c:f0:72:cb:e7:4e:ab:de:60:6a:b9:64:0e:
05:3a:b1:f0:c4:01:0e:da:4e:50:aa:bb:f1:38:ce:fa:84:e3:
45:1e:c9:3e:9b:38:ff:67:c5:95:f3:fb:01:ea:13:12:ae:ff:
94:6f:4d:6c:9f:36:d5:a8:5e:e7:a8:2c:a2:ef:b4:f8:0d:02:
cb:49:a9:f1:1f:b3:a4:07:85:b4:da:a7:ca:0c:81:06:20:66:
95:44:24:47:e4:25:75:bf:e5:a0:b4:59:b5:a2:9f:bd:66:85:
74:eb:59:78:32:ce:c2:71:99:38:a0:b1:02:d6:9c:3f:ce:a7:
6d:64:30:3b:1b:6f:ab:57:30:78:64:31:22:42:d4:6a:8d:1d:
d3:32:e1:16:e9:5e:cb:c9:08:a3:ae:34:04:58:a3:b6:7e:56:
1a:b0:c0:b1:64:f3:49:dd:0d:30:0d:d8:b2:41:bf:46:81:1f:
39:5f:bc:72:f1:ea:9b:ea:2d:b1:70:d8:88:05:15:4b:14:85:
d7:b6:70:c4:23:2c:5a:81:f2:fa:e7:52:21:e0:83:12:51:8f:
62:24:82:53:a7:82:1c:7d:ea:2a:46:be:5e:a4:c4:02:9d:02:
75:7f:52:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:37 2025 by rpki-client