Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cq_AV2Ii43FtXHGsrlbahMx6q3Q.roa
File: Cq_AV2Ii43FtXHGsrlbahMx6q3Q.roa (raw, json)
Hash identifier: OuJ5OZZp1d0ZAQ1t5kpLrGWXSjbqEQQEBnDVOFioZAw=
Subject key identifier: 0A:AF:C0:57:62:22:E3:71:6D:5C:71:AC:AE:56:DA:84:CC:7A:AB:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 85F1C535
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cq_AV2Ii43FtXHGsrlbahMx6q3Q.roa
Signing time: Sat 21 May 2022 04:11:30 +0000
ROA not before: Sat 21 May 2022 04:11:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247214389 (0x85f1c535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 04:11:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aafc0576222e3716d5c71acae56da84cc7aab74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:ff:6b:f7:26:a6:87:4c:ba:b9:ae:da:10:
7a:30:70:5f:91:d6:76:88:c9:6d:e8:4f:44:e9:6b:
37:e9:f5:36:63:64:a3:11:29:bd:66:73:5b:eb:9b:
ee:ad:c9:25:93:a6:11:00:ed:05:cd:69:6c:34:3c:
a6:38:1e:d1:af:6a:c7:85:60:0c:04:30:c3:34:cf:
8c:2d:88:be:5b:74:8f:5c:1b:d6:3e:cd:6d:e3:98:
ea:ad:6c:5c:63:d8:76:00:d6:5a:c9:50:de:c3:25:
76:9f:fe:75:86:50:15:7c:2c:cb:92:7b:6f:4b:a8:
6d:5d:22:b1:6a:43:63:ed:d5:4e:f5:3e:9f:12:f7:
a0:2a:0a:7c:11:4d:2b:72:77:01:c5:e6:46:07:17:
3b:75:5b:ac:1e:a9:58:6e:44:7e:f6:4c:69:e8:19:
b0:c3:53:52:c6:ab:68:36:c5:57:e1:01:33:27:2c:
d0:b2:4c:68:0b:92:0e:70:50:8b:9f:9a:1b:6f:1a:
0e:39:b6:40:0e:cd:87:31:f0:a2:cb:bb:1b:2c:58:
8e:1e:b5:44:22:43:60:fe:67:a9:16:af:a4:f0:7e:
c4:da:9a:9b:56:2b:15:03:7e:e6:44:1c:a8:24:7a:
d4:e9:db:14:f3:a8:ee:be:17:a5:22:81:a2:58:65:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AF:C0:57:62:22:E3:71:6D:5C:71:AC:AE:56:DA:84:CC:7A:AB:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cq_AV2Ii43FtXHGsrlbahMx6q3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:16:f9:be:02:63:59:cb:fa:73:0e:a0:45:84:28:fb:5e:48:
78:cb:cc:0e:3a:5d:e8:5f:9a:6f:df:58:e4:75:6e:63:3e:cb:
73:50:11:c3:ca:35:0f:76:c7:41:03:f0:00:75:62:4a:98:a3:
16:f0:c9:45:4c:9d:a4:da:57:34:51:a1:43:64:c2:c3:cf:67:
2e:2a:aa:2a:e1:cd:47:57:bd:54:97:6a:77:d8:25:08:8c:28:
19:5b:ad:24:fc:97:da:b7:80:7e:3e:5a:4c:a4:8c:70:4d:63:
69:66:3e:c6:10:a1:d3:a5:45:20:4e:0e:8e:c7:f0:a8:c5:b3:
fa:28:d6:24:99:57:74:ed:24:97:66:d9:43:77:3e:21:9e:50:
34:62:5f:e8:d7:08:ff:06:cd:12:2f:db:5c:b9:69:55:96:f3:
ca:be:2d:89:aa:b0:77:93:10:a2:39:29:df:45:72:c9:85:a9:
85:aa:c5:36:b1:4a:fa:09:a6:73:c2:f4:07:ae:18:d8:48:98:
28:49:d6:a3:e0:42:24:41:0b:a5:c8:f5:bf:dc:12:6a:b3:6b:
82:4e:19:e4:22:cb:3e:b8:95:d1:a8:3e:fc:b8:39:7d:7d:54:
70:6a:97:18:54:a6:a2:dc:71:14:15:da:1f:25:7e:7e:be:5a:
88:3c:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:55:36 2025 by rpki-client