Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ct7lkCx-6K5-YEkF4SCFwcBtFqU.roa
File: Ct7lkCx-6K5-YEkF4SCFwcBtFqU.roa (raw, json)
Hash identifier: PT6Zy0SRrWv+0WjvkeYxPISzCv4tJ9nPgvAtgWX0nQs=
Subject key identifier: 0A:DE:E5:90:2C:7E:E8:AE:7E:60:49:05:E1:20:85:C1:C0:6D:16:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018308D1FC2C1A94133EDCDA86C8EAEA14F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ct7lkCx-6K5-YEkF4SCFwcBtFqU.roa
Signing time: Sun 04 Sep 2022 14:05:22 +0000
ROA not before: Sun 04 Sep 2022 14:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:183:8d1:54fd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:d1:fc:2c:1a:94:13:3e:dc:da:86:c8:ea:ea:14:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 4 14:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0adee5902c7ee8ae7e604905e12085c1c06d16a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:24:62:9f:22:10:37:72:2d:55:39:01:85:
19:6e:82:3c:94:f0:e6:33:f1:2e:57:d0:d1:92:ba:
91:7d:a3:bc:9d:a0:78:8b:94:e8:64:e3:7c:cb:88:
b4:e7:10:91:bd:c7:18:d1:68:95:f8:11:1b:d7:9c:
23:51:0d:f9:ef:82:de:ea:2f:86:37:23:a8:a4:2e:
cc:77:ff:be:d8:3e:d5:f7:82:3b:31:89:34:90:37:
e6:7e:ff:74:94:1a:f7:cb:ed:cb:9c:37:01:7c:2b:
e4:0c:c7:87:71:5f:b7:6d:6b:7e:16:e4:9c:eb:95:
6c:50:d8:9c:96:90:90:05:44:63:d1:26:28:eb:4e:
1d:59:90:41:7c:c9:5e:73:25:2a:73:78:3f:c5:a8:
25:14:00:c3:e2:26:fc:e3:88:d6:0c:7b:6b:b7:8d:
95:b0:a6:bb:81:38:e8:a4:7f:6c:ed:5f:6a:f0:8f:
23:37:54:7b:52:70:c3:9c:19:19:bd:01:e4:3e:27:
52:a1:3b:10:3f:5f:f0:32:b1:b9:9c:df:b7:c0:d0:
2a:c8:7f:d4:1a:65:b5:a9:ea:e7:bb:2a:44:7a:98:
3f:90:ae:03:ca:50:b0:4a:bc:1c:a3:70:29:3f:c4:
86:4d:fb:4f:2e:69:b5:90:eb:b2:91:e9:99:bd:3a:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:E5:90:2C:7E:E8:AE:7E:60:49:05:E1:20:85:C1:C0:6D:16:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ct7lkCx-6K5-YEkF4SCFwcBtFqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:d4:dc:3e:ef:6d:7b:d9:0b:c4:ee:34:67:9d:b2:8f:9a:6e:
88:c8:06:23:46:8d:2d:af:ec:7f:81:8b:39:4d:34:cc:cf:4e:
b8:da:2f:da:ef:ce:23:13:b1:96:25:ba:fe:9c:eb:e9:8c:76:
d8:84:3a:b4:05:18:6e:28:a9:b1:1f:c9:58:a2:e6:7e:80:fa:
d0:c6:37:32:45:a5:c5:11:47:dc:2d:0d:d8:74:fd:6e:e1:0d:
5e:90:77:5e:88:98:08:70:79:9d:b7:ba:3b:b3:69:e7:d9:77:
a5:33:a0:bd:fb:a2:a9:a0:a6:33:59:76:18:95:92:b7:ed:d5:
5b:b0:96:69:1e:4b:61:27:dd:7f:04:2b:fb:c5:77:3c:dd:b7:
ad:04:f3:05:12:4e:03:0f:20:b3:fa:b2:bb:29:d9:f2:8a:df:
20:e1:16:d6:4a:cb:95:3f:f4:7e:a8:a6:4d:b3:51:18:04:7a:
71:a9:49:e3:2e:c3:b7:f0:1e:84:c4:e6:f1:df:4c:ff:d2:12:
47:91:e9:7a:88:a2:32:81:bb:a5:75:63:2b:10:19:a6:72:a6:
c5:78:4e:a3:a8:62:8d:ce:e6:e5:65:93:46:47:f0:38:c9:f1:
07:fb:79:3a:05:00:cc:ab:57:80:ff:4d:b2:b0:60:df:db:0d:
0b:bc:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:53 2025 by rpki-client