Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Co3ZbscH7N0CDfDsgB0JLafK3hk.roa
File: Co3ZbscH7N0CDfDsgB0JLafK3hk.roa (raw, json)
Hash identifier: bNaaOnCNOoB+Dmh1RArFM9X8SuE9xXEzOWzySEbVDlM=
Subject key identifier: 0A:8D:D9:6E:C7:07:EC:DD:02:0D:F0:EC:80:1D:09:2D:A7:CA:DE:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825CF91231E559E350006003B884902119
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Co3ZbscH7N0CDfDsgB0JLafK3hk.roa
Signing time: Tue 02 Aug 2022 05:13:23 +0000
ROA not before: Tue 02 Aug 2022 05:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5c:f9:12:31:e5:59:e3:50:00:60:03:b8:84:90:21:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 05:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a8dd96ec707ecdd020df0ec801d092da7cade19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:92:96:72:a6:7b:36:1a:71:1a:fa:92:de:
34:0a:2f:2e:23:1a:39:64:15:60:d2:54:26:c6:87:
20:73:2b:01:94:1b:80:f0:e1:c3:e7:f9:28:4b:b7:
a9:db:f3:ae:78:49:5f:0b:11:61:95:11:c8:c3:0a:
77:50:cc:d6:ab:b8:47:82:63:21:3a:92:f0:7f:0d:
60:ee:18:fe:56:84:0a:21:bc:93:95:ab:58:07:76:
12:d9:35:09:83:bb:d7:5d:ce:0a:ce:2f:c9:40:72:
e3:e4:f4:9e:03:d6:84:1d:57:3b:21:33:c5:f5:43:
9f:66:ef:55:02:f0:0a:63:f8:11:43:45:53:42:3e:
c7:b0:de:cf:97:cd:c9:1b:48:58:f9:8e:b5:2a:9a:
5e:85:7b:9c:9f:35:08:7e:e4:e2:93:29:2f:62:07:
3d:98:2a:08:45:46:a3:c3:20:75:79:53:f2:9f:ec:
f0:0f:7c:6a:72:dd:9a:38:be:da:17:6d:4e:ee:4b:
92:6f:75:16:03:44:a5:bb:32:a4:14:46:d9:4c:2a:
05:95:61:96:82:9a:9b:38:80:de:5d:df:10:01:48:
b8:02:29:8c:6a:ec:33:ba:58:a4:2c:fa:f8:64:18:
11:45:21:fd:3a:ff:c9:df:78:eb:13:5d:3e:2e:a9:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:D9:6E:C7:07:EC:DD:02:0D:F0:EC:80:1D:09:2D:A7:CA:DE:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Co3ZbscH7N0CDfDsgB0JLafK3hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:36:03:b9:e7:ba:04:3d:92:59:cf:b6:15:e6:ce:1d:a3:cd:
c1:b9:af:4b:96:83:a6:ce:b6:24:05:7f:17:1f:f5:90:12:81:
e2:d3:49:ef:73:18:fa:aa:d4:9e:3d:ad:1b:9e:2f:23:99:c8:
a3:72:c9:cb:8b:9d:aa:47:84:d0:2e:a7:65:ab:ce:ab:23:34:
1f:c7:e7:20:4d:ae:eb:93:2a:f3:ae:ea:3c:88:dd:58:81:ca:
c3:51:d5:1f:30:44:61:70:92:8f:0d:f5:4b:73:c7:ca:57:17:
da:af:a7:a4:55:19:4c:ee:73:84:17:60:a3:ba:e1:65:2c:a2:
76:b8:ed:43:9f:36:46:60:2d:39:01:37:c0:b0:25:6a:03:1f:
2d:dc:84:34:46:31:d7:17:4b:39:f6:49:2b:70:d1:5e:7d:cd:
d5:94:1f:e7:a2:6b:71:5f:4b:0d:a9:c1:3b:f2:79:08:b9:ea:
0b:e4:06:05:d7:b8:33:25:5a:6d:0b:2d:c3:92:b5:7b:11:12:
ea:04:84:9b:c5:93:66:5f:a7:49:50:42:2b:3a:e6:4a:21:02:
7b:ca:1c:68:89:f3:69:ba:05:ae:8e:3a:be:9f:ab:99:df:15:
11:67:74:37:e3:bd:a8:1c:dd:be:c5:a0:b0:b6:28:bc:6a:49:
f3:11:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:15 2025 by rpki-client