Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c0eJcXXzqyVKozNdGAiEYOywdMU.roa
File: c0eJcXXzqyVKozNdGAiEYOywdMU.roa (raw, json)
Hash identifier: oLMoIiyOpu3wJZySE0U5VHDE9gJAMK7nCWkR08v3UsI=
Subject key identifier: 73:47:89:71:75:F3:AB:25:4A:A3:33:5D:18:08:84:60:EC:B0:74:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888084D1D874B6E1E142F77DB0E55B08D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c0eJcXXzqyVKozNdGAiEYOywdMU.roa
Signing time: Sat 03 Jun 2023 09:09:28 +0000
ROA not before: Sat 03 Jun 2023 09:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:84:d1:d8:74:b6:e1:e1:42:f7:7d:b0:e5:5b:08:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 09:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7347897175f3ab254aa3335d18088460ecb074c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:24:1c:2d:04:f3:ac:0b:f4:49:50:37:4b:
52:b7:f9:32:c5:72:28:04:4e:1a:51:19:1e:c8:60:
b4:ab:28:03:4e:83:65:73:4f:2f:c6:ef:cc:8f:c7:
8a:86:b1:50:80:bf:3c:c6:20:13:6d:43:0a:0a:f2:
59:3a:4a:82:ec:a9:f3:71:75:15:55:e2:82:c1:a9:
ff:3f:06:1f:25:cd:14:df:40:d0:26:7f:a2:cc:f8:
e1:2c:32:41:50:f2:fa:e9:cc:03:af:fc:ed:21:6f:
8c:e2:3c:ac:1f:2b:c6:75:b6:94:ac:43:5c:73:6e:
17:37:e6:da:2c:d8:0f:58:f1:50:33:3c:97:b0:5b:
a2:bf:e1:90:6f:35:a1:0c:07:cd:7c:91:72:d5:a1:
4d:71:1f:3b:f4:c3:98:75:d5:78:cc:75:c7:ce:30:
a2:28:ac:da:ed:f9:61:17:62:b3:91:73:63:b6:93:
f0:25:c8:e0:fa:6d:8e:eb:b6:1f:f0:61:2c:03:49:
da:aa:75:81:d9:4d:0e:a7:e7:f4:a2:fe:d0:fa:8f:
75:e0:a6:eb:3c:f0:32:71:c1:d7:56:29:c0:4d:00:
f7:d9:2b:db:11:6a:c6:55:c9:62:c2:93:d9:89:50:
6d:70:e7:ed:76:51:dc:44:d9:44:03:84:9d:53:73:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:47:89:71:75:F3:AB:25:4A:A3:33:5D:18:08:84:60:EC:B0:74:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c0eJcXXzqyVKozNdGAiEYOywdMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:2a:34:a3:37:3c:fd:85:9d:46:c5:0c:2e:94:34:d2:72:97:
1c:53:ec:9f:46:69:2f:00:6b:b2:ce:25:8a:db:bd:9a:b2:ed:
d2:46:0a:35:82:6c:1e:7f:9d:4d:8e:00:90:b9:a4:be:b6:d2:
20:64:43:df:c7:8a:a9:04:e2:ce:97:8e:45:39:e5:ba:cc:69:
72:83:41:b6:70:8c:d6:79:63:cc:7f:2a:5e:9c:f5:c9:aa:d4:
d7:94:fe:fa:fd:cf:57:63:e1:28:a9:49:83:94:b2:57:3a:b5:
62:fe:35:70:23:38:3f:36:23:13:f6:aa:b0:25:46:24:ca:d9:
9a:7c:47:06:fd:14:6c:53:80:41:2e:6f:eb:94:df:74:ce:e6:
8a:68:4e:b1:f8:52:73:3d:f0:f1:bf:b7:54:8b:4d:dc:af:fa:
28:2b:f8:d0:72:16:b9:e7:3e:03:87:b7:d1:ad:36:b9:4c:ec:
94:db:eb:35:be:b0:35:c5:b0:10:1b:5a:d0:d4:63:eb:f0:e8:
bf:b2:e0:10:2a:75:81:f3:1b:20:3f:b2:ac:8a:e7:76:ff:2e:
12:1d:bb:7c:96:fd:5a:c7:62:dd:e1:b1:58:32:ee:37:07:e0:
8a:ff:09:72:a9:28:21:d8:6f:25:b5:4d:0c:a7:df:ed:50:c2:
56:ba:12:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:05:55 2025 by rpki-client