Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ct1B3nzLCzXn8Kb_dWhkUlOgEHY.roa
File: Ct1B3nzLCzXn8Kb_dWhkUlOgEHY.roa (raw, json)
Hash identifier: nWGvURpw2Pq0ADbGPkF+WZjvWOWeL8pPKjqtN9Ih+U8=
Subject key identifier: 0A:DD:41:DE:7C:CB:0B:35:E7:F0:A6:FF:75:68:64:52:53:A0:10:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187320533F87B594BE09C29ECE9B47105A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ct1B3nzLCzXn8Kb_dWhkUlOgEHY.roa
Signing time: Thu 30 Mar 2023 10:16:54 +0000
ROA not before: Thu 30 Mar 2023 10:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:05:33:f8:7b:59:4b:e0:9c:29:ec:e9:b4:71:05:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 10:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0add41de7ccb0b35e7f0a6ff7568645253a01076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:13:22:40:4a:cf:4d:e1:39:6c:d4:13:c5:
44:43:c4:58:ef:e2:94:3b:83:13:a5:e4:1c:e3:9b:
f3:60:0b:7e:f5:0f:be:41:94:18:d3:53:1a:a5:f9:
6c:26:87:62:4a:aa:16:02:5c:ca:a5:68:34:3d:8f:
cb:45:b8:46:f6:12:23:86:c0:5b:8d:e4:d5:70:c3:
af:3d:95:4e:f5:ad:be:8f:b4:c7:e9:9b:81:0f:e7:
4d:f6:a8:63:e0:84:68:ad:9e:6e:50:c9:63:1b:f2:
5a:5b:e1:5b:f6:ba:38:f6:08:17:63:b8:0d:92:06:
e9:46:25:43:f1:8b:6a:47:4e:6f:df:f5:dc:e0:5d:
8b:23:9b:33:2e:30:33:8e:30:5f:fe:e4:7a:06:71:
86:16:98:be:80:1f:34:b8:0d:78:65:a0:6c:7e:53:
19:8f:13:46:69:10:04:c9:cb:56:f8:33:30:78:62:
9c:66:09:8e:e9:94:b6:50:61:49:56:6b:d6:ef:48:
3d:54:b0:8d:17:0c:7b:79:bf:52:53:c9:85:c8:02:
d8:23:fc:c8:70:ad:e6:8a:d4:f5:fb:6c:6c:20:62:
dc:c6:04:5f:b4:29:5f:b9:e5:04:a7:d2:e0:34:12:
3a:53:7b:47:7e:f2:d7:2d:25:38:42:83:64:1f:c3:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DD:41:DE:7C:CB:0B:35:E7:F0:A6:FF:75:68:64:52:53:A0:10:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ct1B3nzLCzXn8Kb_dWhkUlOgEHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:71:82:dc:4a:75:47:5c:98:8b:12:62:aa:3e:15:f1:c0:57:
d8:ab:41:78:75:c0:b3:1b:d1:f4:c6:70:93:0f:46:a8:c0:ed:
21:cb:12:24:70:9b:a0:ae:fc:9a:47:59:95:84:2e:ea:af:15:
71:8f:e5:87:28:82:57:5d:94:14:67:d1:08:36:b3:ff:b7:20:
ad:9f:9a:7c:a9:fe:1b:27:15:14:de:61:98:39:9b:53:29:f5:
e2:69:e1:39:b9:cb:e9:fa:ea:ce:e9:8a:ad:86:e7:99:f6:a9:
60:2e:fd:d1:57:f9:a2:23:a9:96:e4:dd:4e:60:d7:be:ac:1a:
7f:71:35:50:0d:f6:b1:05:6b:b7:f9:43:7c:c1:69:4c:89:13:
36:08:48:63:2f:cf:6f:b8:15:31:07:3a:ec:2e:92:52:a3:3b:
40:98:a7:de:4d:0f:0a:5a:b6:08:38:4b:aa:f3:e6:84:9b:6c:
d6:9a:6d:f6:42:2a:57:14:bb:ec:52:fa:17:ae:ab:18:22:16:
01:49:a6:5a:d1:fb:ff:f4:b5:ba:98:b7:d9:57:e5:5b:9e:72:
a6:94:3c:5b:f0:d7:a3:df:a9:c0:ee:88:49:e2:b4:ed:60:79:
e8:61:e5:f5:50:56:3e:32:a8:5d:72:f8:a6:17:b7:0d:94:03:
b4:bd:b9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:34:23 2025 by rpki-client