Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CzNvg-KxCCD_F4xfgK-rtIAzsxQ.roa
File: CzNvg-KxCCD_F4xfgK-rtIAzsxQ.roa (raw, json)
Hash identifier: EqCOwB6gDAm0XJWwA6MQz6I0XmBHkALy12ziYIA0rzI=
Subject key identifier: 0B:33:6F:83:E2:B1:08:20:FF:17:8C:5F:80:AF:AB:B4:80:33:B3:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018806357FDB61C673A87ACA9F0B12DD839C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CzNvg-KxCCD_F4xfgK-rtIAzsxQ.roa
Signing time: Wed 10 May 2023 15:09:09 +0000
ROA not before: Wed 10 May 2023 15:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:35:7f:db:61:c6:73:a8:7a:ca:9f:0b:12:dd:83:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 15:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b336f83e2b10820ff178c5f80afabb48033b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:15:2f:cf:d0:2b:b3:d6:57:7a:d7:c2:b9:8c:
e2:ee:6f:5f:8f:52:b1:b9:6a:3a:fe:d1:ee:93:2d:
93:4f:49:f2:98:56:ad:97:69:f3:bd:8d:56:d8:36:
24:4d:a0:f4:40:3e:9b:2a:e7:d7:36:ad:c1:23:8c:
b2:1d:e2:e8:73:1f:28:f8:53:f3:4e:b4:27:2d:77:
69:77:d4:cc:d4:04:fb:c1:5d:3b:9e:70:b5:dd:f9:
27:fc:bd:e7:f9:9a:70:69:af:fb:1c:1c:da:17:20:
b0:17:d2:0a:9c:22:1a:43:75:1b:bb:50:25:7a:e5:
e7:42:1f:8d:2d:3d:d2:1b:bc:60:35:fa:f4:a1:e9:
7e:52:48:37:3d:d5:0e:08:2d:11:4e:89:00:7e:58:
cd:42:35:0f:2d:48:23:33:f4:05:97:ca:c3:4c:82:
cc:b2:cf:91:46:44:3a:18:d5:a3:2f:52:86:16:fe:
99:df:8f:20:75:f1:00:4b:7e:8b:81:c0:69:53:ee:
30:03:ee:63:83:a6:0c:5c:20:3c:ad:72:c7:c4:71:
2e:3d:32:e2:15:69:e4:42:79:08:f2:b1:24:67:01:
07:04:5c:6e:b0:74:83:f7:80:e3:54:3b:16:b9:55:
ac:88:ba:2c:e1:aa:70:9d:d3:08:4f:f5:82:7c:92:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:33:6F:83:E2:B1:08:20:FF:17:8C:5F:80:AF:AB:B4:80:33:B3:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CzNvg-KxCCD_F4xfgK-rtIAzsxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:ce:4c:ee:50:aa:ae:dc:41:38:7b:9f:7d:d0:50:e9:f5:26:
a5:db:87:88:13:6d:d1:28:f1:79:d0:57:2c:e8:4f:76:6b:8b:
86:ae:bc:a3:02:ec:02:72:eb:7a:9d:f5:6d:23:5f:2e:39:ac:
b5:cd:29:5d:c0:ba:93:1c:74:f2:ee:80:ae:e5:7b:74:94:f3:
f9:76:a7:9a:02:6b:63:aa:ef:46:8f:c5:da:9e:24:9c:04:29:
5c:8a:47:13:8a:3e:11:05:a2:6b:31:eb:c9:86:3b:00:01:18:
ad:5f:76:08:57:f4:d5:68:4e:3b:bf:88:2f:e4:ec:14:f4:79:
7b:68:a6:64:f6:aa:26:b4:cd:81:05:eb:16:ce:bc:30:67:33:
97:42:fe:82:4e:fc:65:28:8a:5b:1c:6b:5a:3a:67:a2:3f:37:
e8:3e:af:c4:74:6e:74:15:e6:48:51:a5:67:2c:61:4d:46:17:
10:2e:7d:bc:f1:38:66:93:91:cf:b7:7a:82:3f:69:9b:c2:3e:
7e:85:4a:07:00:9f:57:25:81:b4:af:e7:fb:29:f9:19:ac:71:
43:91:30:aa:83:ff:44:06:c0:98:b6:92:54:98:e1:58:3e:88:
91:85:fd:6d:57:05:44:5f:2f:4f:32:52:c3:4e:3a:2b:3e:70:
74:6b:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:05:55 2025 by rpki-client