Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cyq1kjPOo1hyh1OB3kjxCGEez6Q.roa
File: Cyq1kjPOo1hyh1OB3kjxCGEez6Q.roa (raw, json)
Hash identifier: O+8kmV/Z4KYHAs5FbP/wbHaAPHMljvZAsbqcVDAFDZE=
Subject key identifier: 0B:2A:B5:92:33:CE:A3:58:72:87:53:81:DE:48:F1:08:61:1E:CF:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E45EC00145ADA512322D777F51353930
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cyq1kjPOo1hyh1OB3kjxCGEez6Q.roa
Signing time: Sat 09 Jul 2022 19:10:23 +0000
ROA not before: Sat 09 Jul 2022 19:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e4:5e:c0:01:45:ad:a5:12:32:2d:77:7f:51:35:39:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 19:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b2ab59233cea35872875381de48f108611ecfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:74:d8:2d:d0:4a:b0:78:5e:65:94:02:be:
71:10:43:c1:9d:71:7f:e0:72:cc:77:49:77:a0:c3:
a5:fa:95:b2:b3:ed:a2:c8:04:3c:6b:5c:84:84:85:
58:7a:1a:12:88:2a:36:a0:19:ca:da:f1:24:5a:21:
fe:d7:a2:5e:34:78:da:f7:a9:7b:04:36:28:4c:65:
ba:38:d8:a2:bd:ee:82:97:f4:44:1e:59:a4:54:42:
0c:8a:9c:f9:e4:29:c9:4c:6c:5b:d4:c5:0c:d4:8c:
f1:01:f5:bb:e3:7a:9c:0f:9d:d1:c7:0e:99:4a:aa:
dd:d6:4b:5a:06:40:60:e5:95:0f:13:f1:07:4a:ab:
19:e4:7c:46:fb:2a:da:bc:95:68:75:f1:c0:27:97:
bd:19:c2:45:a1:41:8e:55:2c:e7:79:13:e6:84:87:
6e:b6:77:21:e4:6e:96:3e:46:e6:1a:d7:bc:28:3e:
e7:a6:49:c6:e3:35:82:cf:34:f5:54:a4:fc:07:d2:
d5:5d:9e:d6:49:06:41:85:72:90:2f:fb:54:d2:7e:
0b:94:f6:44:a2:eb:e9:e0:40:6f:27:75:c6:70:6a:
fb:18:ed:54:38:68:15:84:9f:1e:21:4f:d5:92:67:
c3:ec:64:6e:b6:be:94:0b:ca:c5:f0:06:20:7b:2f:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:B5:92:33:CE:A3:58:72:87:53:81:DE:48:F1:08:61:1E:CF:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cyq1kjPOo1hyh1OB3kjxCGEez6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:cc:4d:68:18:75:8e:b1:de:9d:e5:5d:80:f7:7c:31:ac:17:
6e:5f:68:86:85:7b:ef:d0:d3:f9:9d:a3:9e:7c:b4:f3:1d:bf:
46:86:1d:01:0e:fe:76:c3:97:80:cf:13:4b:80:a6:59:fb:cb:
1e:d6:57:f0:21:95:31:4d:bb:1a:ea:45:6f:50:1f:a8:5f:3f:
50:2d:72:8d:27:e2:f4:eb:37:11:a9:ba:48:c4:b7:a5:8f:84:
8b:df:5f:05:8b:ce:09:67:72:16:a1:28:69:c9:0a:38:9d:30:
85:6b:d7:15:10:85:8e:0c:52:60:20:b9:9c:15:f0:b2:e0:48:
fe:62:51:ce:e0:66:72:31:59:90:2b:96:8e:b2:1b:77:40:e5:
30:6e:75:0c:c0:59:d6:7e:22:17:28:b2:e9:8a:99:9a:5a:95:
2c:9e:fc:75:8c:8c:6f:11:57:0a:3b:b3:40:06:f5:00:45:99:
3c:06:b3:0b:27:ee:af:55:f2:f0:b9:ae:24:69:97:ce:f0:2f:
2b:a9:20:49:d3:ac:6c:b9:ca:07:b4:60:85:0a:e4:00:e7:82:
61:9e:77:38:97:23:f4:91:58:c8:c2:fd:b9:30:e1:5d:32:12:
34:20:da:e4:5f:14:36:73:65:51:ef:60:eb:e9:f2:95:70:b5:
f4:4a:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:45:34 2025 by rpki-client