Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CrX_UxH1YqSkyThtVuKymSWap_M.roa
File: CrX_UxH1YqSkyThtVuKymSWap_M.roa (raw, json)
Hash identifier: C6eE/4sTCWqH184h4N2sgbMD18LSaF72ygP5IAP1nLo=
Subject key identifier: 0A:B5:FF:53:11:F5:62:A4:A4:C9:38:6D:56:E2:B2:99:25:9A:A7:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AC1A5D57532EA2F2BE85226803340F8C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CrX_UxH1YqSkyThtVuKymSWap_M.roa
Signing time: Sun 23 Apr 2023 03:13:41 +0000
ROA not before: Sun 23 Apr 2023 03:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ac:1a:5d:57:53:2e:a2:f2:be:85:22:68:03:34:0f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 03:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ab5ff5311f562a4a4c9386d56e2b299259aa7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:67:6e:32:cd:ec:7a:d4:99:db:81:6c:55:
71:91:ae:61:93:98:ea:50:b3:d4:d3:d0:f3:70:b5:
50:30:66:96:d8:aa:2b:7d:12:d9:3d:bc:64:29:f6:
05:98:ca:92:4b:56:0b:5d:0f:4b:b3:8c:45:51:a0:
97:1c:dc:76:81:2b:21:cf:b5:cd:3e:02:4e:57:5d:
62:53:0d:55:dc:b8:c0:5e:3e:98:a3:d3:5a:ef:5e:
a4:91:89:6a:19:6d:93:f1:6c:57:9a:cc:d1:04:db:
64:3d:ac:11:b8:29:de:8f:ab:23:64:ef:40:dc:84:
cc:3d:c5:b9:d2:93:c4:25:b7:50:d1:a9:4d:5c:1f:
39:9a:a0:11:0e:ff:c8:74:bc:5d:c4:83:0b:79:ab:
18:91:7d:c4:d4:9c:86:08:19:cd:8c:86:2d:b8:a3:
01:b0:f8:dd:99:0a:c5:47:43:07:44:39:ae:cc:15:
d0:54:18:5b:44:18:89:95:5a:05:18:48:c3:38:ce:
54:46:ba:cf:e2:9e:c8:ba:28:36:4f:ee:4a:e2:e5:
14:9d:03:94:aa:73:06:cb:d1:a4:9a:e3:7f:68:77:
6a:12:19:05:aa:7f:77:5b:f9:40:e3:b7:dd:a0:16:
0f:51:de:7f:3c:2a:ce:67:f1:16:d5:82:1c:c6:39:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B5:FF:53:11:F5:62:A4:A4:C9:38:6D:56:E2:B2:99:25:9A:A7:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CrX_UxH1YqSkyThtVuKymSWap_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:1f:24:ad:fb:55:5d:bd:af:97:56:8a:32:9f:5d:99:b5:76:
59:ad:80:e6:ad:ab:27:c3:2c:4c:f6:9a:8b:2a:bf:72:f3:28:
b1:01:12:bd:5a:36:a4:c7:35:5d:37:cb:b3:30:41:14:b2:16:
2e:47:76:b3:d0:1f:cc:ab:c5:7a:75:c3:13:56:ff:b4:69:e7:
5c:94:bd:eb:df:40:87:b1:ee:9b:5c:bc:9d:8f:b3:0c:50:80:
f8:2a:ce:00:83:78:d3:f1:f0:8a:dc:e4:11:cc:8d:2e:ca:4c:
86:e0:9b:e7:9b:79:67:be:72:c3:46:27:40:59:97:e9:ac:cf:
29:20:be:4b:d1:32:9c:ce:76:ca:0c:e4:1b:8e:55:83:28:6d:
96:fc:23:ff:55:25:25:01:b9:98:c6:98:a4:b5:f2:e8:e0:79:
39:cf:5b:b5:c5:cf:85:a7:50:1b:fb:9e:65:1c:53:88:e2:78:
fa:c4:a9:a3:1b:55:94:d3:f4:fc:81:da:3f:2c:d9:03:59:f5:
27:c4:33:52:50:ad:e9:a4:2c:37:62:10:c5:80:69:a1:8c:29:
69:30:f4:4a:13:2c:bf:dd:58:f6:69:8e:53:c0:74:df:cf:6b:
05:bf:d5:37:6b:53:fa:13:4a:7a:bf:07:c6:51:ab:9c:9e:a0:
79:22:0d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:49:44 2025 by rpki-client