Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CoAwfzZyUOKKSFsgQXYgxyZ3NwE.roa
File: CoAwfzZyUOKKSFsgQXYgxyZ3NwE.roa (raw, json)
Hash identifier: a1JK6yCrcg3mUMDFzM13n8OWMKk+QmDq/QVvvVnAF9o=
Subject key identifier: 0A:80:30:7F:36:72:50:E2:8A:48:5B:20:41:76:20:C7:26:77:37:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018515E3022FD0D206FA61E532EB3A58E76B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CoAwfzZyUOKKSFsgQXYgxyZ3NwE.roa
Signing time: Thu 15 Dec 2022 13:04:36 +0000
ROA not before: Thu 15 Dec 2022 13:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:15e2:a65f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:e3:02:2f:d0:d2:06:fa:61:e5:32:eb:3a:58:e7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 13:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a80307f367250e28a485b20417620c726773701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:14:5b:32:37:27:40:80:6b:1a:a6:e9:98:
ae:29:ac:79:81:a8:bc:b6:8b:ca:f4:cd:fb:f2:b0:
82:6b:05:ca:f3:64:48:ff:a8:5a:d3:f0:03:50:1e:
49:af:0b:ff:05:93:8f:d3:bb:9b:fc:fa:af:0e:bb:
7c:8f:35:35:0c:cb:07:04:2b:7f:21:f2:06:1d:7d:
00:d8:8c:79:b4:2b:22:6b:ce:3c:2c:5f:1f:1f:3b:
30:be:31:0e:13:d8:73:63:26:5c:2a:c0:73:4f:ca:
85:d8:19:a3:da:09:be:06:86:4a:83:1c:6a:63:3e:
e6:63:dd:f2:0d:bc:75:d1:6e:32:15:20:bc:76:73:
64:0c:fb:4d:1c:82:be:00:a1:ab:cb:73:d8:bc:4c:
6a:aa:e8:de:6d:bb:59:16:87:65:6c:29:50:71:62:
b2:69:23:8b:78:84:85:26:1d:92:2e:8f:d1:5e:ca:
8a:ee:06:56:e5:d8:80:53:2c:40:cf:cc:6d:a4:fd:
e0:04:09:73:ee:61:c6:44:9b:e3:f6:81:2b:aa:e3:
06:0f:aa:04:fb:29:39:27:17:8e:15:5a:14:76:ac:
5b:81:19:c5:12:b0:a0:2f:0a:13:c2:64:52:83:a8:
10:fb:31:71:71:3d:db:ed:59:3c:b2:9d:f1:cd:5d:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:80:30:7F:36:72:50:E2:8A:48:5B:20:41:76:20:C7:26:77:37:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CoAwfzZyUOKKSFsgQXYgxyZ3NwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:8f:ea:d9:98:82:53:0b:d0:1d:0a:a4:fa:4e:21:62:36:04:
f9:2e:a5:57:87:3d:1a:bc:46:c3:d5:78:98:ae:7a:f1:c6:cf:
2c:0d:8a:19:dd:87:d5:20:68:73:49:3c:06:e9:d6:a8:b7:0e:
9b:1e:59:d0:fb:90:59:60:b8:b6:51:fb:7a:cf:87:9c:d3:4a:
6c:ad:cc:5e:b6:cb:6d:a3:b5:6d:97:fa:10:16:59:bd:8d:96:
9d:84:c8:b8:26:55:dd:e9:fc:9d:f3:f0:e2:c6:d4:70:e0:fb:
51:fb:a6:ab:92:9c:18:fd:f2:ad:3f:76:e1:c2:d8:48:d5:35:
4a:aa:d2:f2:20:3f:5b:37:50:ac:d8:d7:66:35:ae:b4:b5:b7:
d0:32:bb:71:0a:18:40:46:46:3e:75:9c:e6:d3:2d:5c:07:ee:
f2:66:58:30:79:a4:49:e0:95:23:f3:c5:35:1e:c4:66:b4:89:
cb:58:32:83:58:16:c6:4e:41:bc:7f:ca:77:00:0b:0d:0d:b8:
4f:6e:9c:4c:cd:da:9f:29:93:36:85:a1:6d:1b:e3:90:86:b0:
51:9e:c3:c6:fc:57:06:30:74:11:3c:ce:19:51:94:7d:1b:e4:
53:b3:a0:4c:15:bd:7a:3f:28:4d:6f:c1:dd:27:58:f5:22:4b:
83:14:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:03:58 2025 by rpki-client