Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cAtyDo2Dmqzk2HjTm7Tc-NB0Uhc.roa
File: cAtyDo2Dmqzk2HjTm7Tc-NB0Uhc.roa (raw, json)
Hash identifier: k8++eBRKtrObdJRj3IOYuKgg6fENMHlOHXGsrO2KtY4=
Subject key identifier: 70:0B:72:0E:8D:83:9A:AC:E4:D8:78:D3:9B:B4:DC:F8:D0:74:52:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FF5F36E503D6F03493A28697775A59BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cAtyDo2Dmqzk2HjTm7Tc-NB0Uhc.roa
Signing time: Sun 29 Jan 2023 21:11:48 +0000
ROA not before: Sun 29 Jan 2023 21:11:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ff:5f:36:e5:03:d6:f0:34:93:a2:86:97:77:5a:59:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 21:11:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=700b720e8d839aace4d878d39bb4dcf8d0745217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:ce:21:47:b3:54:44:66:21:78:27:c9:34:
74:dc:6a:81:cc:14:99:60:b8:3e:9a:90:18:ec:6c:
6c:77:3e:bc:ad:64:56:46:24:20:52:f6:7b:7a:e2:
c7:71:50:f4:cc:08:bb:9e:9f:6e:41:43:77:b0:a8:
97:c0:37:38:dd:31:3c:69:12:22:76:23:f6:8c:1e:
a7:26:c1:b1:e7:b5:d5:9f:a9:90:1d:58:2c:9b:b4:
a8:b5:27:bb:99:30:c0:ef:0f:7b:23:f8:38:6c:79:
b0:11:d9:60:2e:9b:84:52:05:bd:46:2b:03:8b:50:
24:b6:d2:1c:5a:8d:92:03:14:79:a6:08:1a:ce:49:
b7:81:87:37:e3:40:e1:c1:e2:b6:cb:56:52:2a:f1:
e2:19:b6:33:19:ed:eb:aa:37:a1:0c:b5:48:66:a0:
55:75:bd:ff:48:00:2d:7e:71:01:46:03:c1:c6:42:
a1:35:3d:dc:e2:da:99:b5:c1:04:6a:26:82:1d:c9:
b5:61:71:86:6f:f3:6a:28:f0:88:fc:d2:21:b9:f4:
d2:b5:50:d8:39:e7:38:99:d4:81:6a:13:10:d3:df:
8f:5d:a4:17:96:b0:c6:2c:7a:af:cc:3d:96:5e:15:
c3:04:b7:90:0b:b9:fc:b5:5f:61:61:bf:a4:7a:a5:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0B:72:0E:8D:83:9A:AC:E4:D8:78:D3:9B:B4:DC:F8:D0:74:52:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cAtyDo2Dmqzk2HjTm7Tc-NB0Uhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:0e:26:b1:2a:f4:b8:a7:b9:a0:96:c6:52:6a:37:7c:49:00:
8a:c4:72:ad:5a:3e:56:00:dd:fb:13:4b:71:03:12:18:ab:ab:
5e:ac:71:a6:8e:46:ac:2b:57:df:6b:0a:32:fd:48:8b:b5:f5:
a9:ef:82:02:76:ba:07:96:79:c8:bf:cf:8e:52:84:af:57:44:
fe:8f:0b:b7:36:d0:c3:e2:0e:df:fd:77:7f:88:5e:26:43:42:
39:b6:06:ac:e8:37:cd:e3:01:2c:3a:59:59:c8:67:f4:2c:ac:
4c:9f:fe:0c:20:d8:61:6b:ea:e7:62:86:3a:bd:cf:6e:49:ce:
e2:e8:1a:39:33:1c:29:cc:98:81:ad:e8:89:a6:5b:fe:ff:06:
6e:30:93:27:e7:8b:59:75:91:0e:7f:81:0f:9f:f7:a6:b0:ab:
9e:3b:b8:42:21:f0:5d:4a:f4:85:95:86:7e:f7:be:37:8b:50:
8b:e5:72:6c:2c:55:d0:08:aa:31:18:bb:b9:b0:cf:fb:6e:72:
74:ff:4a:30:3e:9d:55:21:41:d6:88:90:f3:0e:2b:8c:ea:63:
88:b9:fa:3c:24:09:94:61:37:a7:5f:14:c5:71:2c:50:61:41:
4d:9b:07:50:4c:e6:ad:e4:56:62:ea:3b:dd:9d:6d:82:84:11:
9b:3d:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:12 2025 by rpki-client