Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cy7_FH-6U4cPdXmydqOVVs02XU0.roa
File: Cy7_FH-6U4cPdXmydqOVVs02XU0.roa (raw, json)
Hash identifier: k0tT5uSRB6nVTqKy/PiAxDVrnZwJFe1k1XtO6fIWzsM=
Subject key identifier: 0B:2E:FF:14:7F:BA:53:87:0F:75:79:B2:76:A3:95:56:CD:36:5D:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018715769A1A13EDF0A8CD005CFE11AE0AD2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cy7_FH-6U4cPdXmydqOVVs02XU0.roa
Signing time: Fri 24 Mar 2023 21:11:46 +0000
ROA not before: Fri 24 Mar 2023 21:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:15:76:9a:1a:13:ed:f0:a8:cd:00:5c:fe:11:ae:0a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 21:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b2eff147fba53870f7579b276a39556cd365d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:c5:0d:02:e0:44:4b:ee:b9:78:8b:35:c6:
29:49:77:bf:0a:17:b6:59:31:5f:ee:b0:b9:a7:59:
01:3f:be:b2:59:9a:ed:40:94:9d:0f:62:c2:5f:67:
fe:67:5c:b6:e4:9d:a4:9c:c6:35:0d:a9:a3:28:92:
5b:2f:4f:16:6e:26:45:10:30:23:f3:2f:b9:ff:b7:
1c:ce:37:7b:24:74:df:21:d4:f7:e0:b8:90:fb:b1:
c1:01:f9:ad:c9:b6:c9:ce:86:33:6e:f0:5f:58:f3:
65:0a:38:11:ae:75:d0:64:73:61:61:9e:b9:42:a3:
60:96:d8:00:18:16:b0:74:c2:02:e2:f4:ee:53:c5:
91:65:d1:6b:a1:b0:17:5c:8f:56:c7:19:4d:01:f8:
fe:7d:2b:16:cd:10:1e:a2:34:0d:3d:18:68:7a:fd:
58:f6:79:5d:7a:c8:96:ae:bb:80:53:37:fd:8e:5e:
2b:0d:85:bd:80:cf:a7:70:46:37:83:92:b3:45:20:
72:02:d1:78:84:11:51:ee:71:e8:04:00:6a:fd:a7:
4e:07:d8:d6:61:f6:94:da:29:5c:47:67:45:31:5d:
98:c9:3f:93:1a:c3:2f:ca:6f:3d:f7:ce:48:46:7c:
73:ef:7a:0b:7b:0a:f0:4a:9a:ea:ca:f7:5c:c7:29:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:FF:14:7F:BA:53:87:0F:75:79:B2:76:A3:95:56:CD:36:5D:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cy7_FH-6U4cPdXmydqOVVs02XU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:93:6f:ab:da:f8:5f:02:b0:83:92:ad:cd:74:b9:a1:b8:a2:
a7:65:66:19:be:10:22:5c:a1:31:ae:43:eb:56:c8:02:9d:39:
cf:9a:54:d9:c5:ca:62:5a:84:da:27:32:b1:13:f5:34:00:c7:
2e:54:55:bc:70:ba:58:27:d9:60:83:ab:c3:d2:91:ca:fb:86:
5e:d4:26:76:c6:19:5c:56:bc:92:4e:b2:18:08:d8:37:cf:4e:
4f:1e:fc:a3:b6:d9:91:f5:c2:9f:0f:22:df:a1:fd:07:e3:95:
16:0c:ea:11:e5:38:b4:87:1f:72:64:ab:83:67:e5:73:34:62:
8d:7b:33:33:2a:6c:d0:91:74:32:e1:34:88:f7:c1:0c:72:df:
73:d1:79:07:fc:37:a5:b3:4a:b6:34:06:a0:3d:5e:92:ef:c5:
25:20:68:ae:17:17:de:a6:74:00:2b:7d:ca:0e:c5:7d:02:34:
ad:e9:0c:7e:b0:b9:5b:b6:a0:5c:3c:9e:b1:91:86:9a:12:31:
10:4c:50:97:20:40:aa:b2:7b:89:2e:64:ee:fb:56:7c:a2:34:
a9:ea:fd:c7:9f:e9:61:76:2f:d7:03:2b:c8:6c:69:93:c7:2d:
e6:cd:c8:b2:8a:46:f2:45:ae:1a:dc:96:56:40:8a:e6:ca:b2:
35:30:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:51:56 2025 by rpki-client