Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBF9WxK3PupB761WkXIl7nniNXA.roa
File: cBF9WxK3PupB761WkXIl7nniNXA.roa (raw, json)
Hash identifier: c/JQH7X2a2zIfmJulRxiqyiSUiZIKK/toMPdDAHg/z4=
Subject key identifier: 70:11:7D:5B:12:B7:3E:EA:41:EF:AD:56:91:72:25:EE:79:E2:35:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E78EBF07A6B0302F2D4B4F33F722C457
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBF9WxK3PupB761WkXIl7nniNXA.roa
Signing time: Tue 06 Dec 2022 13:10:02 +0000
ROA not before: Tue 06 Dec 2022 13:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:8e:bf:07:a6:b0:30:2f:2d:4b:4f:33:f7:22:c4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 13:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70117d5b12b73eea41efad56917225ee79e23570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:c9:43:0c:40:94:16:4e:aa:06:d4:65:27:
f7:4d:a6:a1:8f:29:ef:8f:7f:c4:d7:2f:75:b7:30:
b0:bd:c4:41:94:09:6c:2b:d3:2c:84:ec:23:e9:3a:
04:b0:ef:c6:22:db:60:b9:d6:4d:e3:68:56:a3:f2:
e1:dc:69:0c:f2:7b:0d:6e:cc:49:0e:2e:c8:51:3f:
02:bc:01:ff:ba:f9:32:9b:1c:53:bb:55:4f:8b:49:
73:71:4c:06:6a:48:f5:7e:b2:91:91:9a:e7:d9:81:
50:63:18:03:5b:5c:26:2d:15:09:fb:be:83:69:01:
0d:b2:6e:ff:7b:52:41:97:89:9f:e9:df:63:14:9e:
7b:3e:b6:cc:2f:44:5c:37:2b:9f:3e:4b:1d:c3:fd:
a4:84:ed:7d:79:3d:32:e5:7f:0f:29:14:45:5c:a9:
0f:f4:b6:17:4b:10:4e:26:4d:0d:d2:d4:f0:4e:2f:
b0:72:b1:28:22:df:9b:64:0b:1f:fe:c3:1c:64:40:
36:ac:24:3e:b1:89:c9:a3:b5:d3:87:53:96:8a:d2:
cf:da:10:1b:3c:6c:46:a9:7a:ff:96:ea:9e:c6:92:
b2:b2:63:9b:cf:6b:7b:e8:42:63:c7:b3:a9:c1:6c:
be:96:b4:90:3c:e2:44:f3:eb:68:07:9f:ff:5a:08:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:7D:5B:12:B7:3E:EA:41:EF:AD:56:91:72:25:EE:79:E2:35:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBF9WxK3PupB761WkXIl7nniNXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:89:1d:9a:cf:10:aa:da:53:a4:55:74:06:04:cf:cb:94:17:
52:24:f0:0d:7e:50:0c:48:9d:ac:9d:73:d0:b9:e1:6e:da:a9:
1d:6e:17:8d:57:60:6a:7f:2c:59:bc:4b:25:f6:d3:6e:cb:66:
f3:50:0d:b7:08:11:ac:9a:8f:8a:89:5f:cd:ba:a1:d1:2e:95:
da:7b:a0:75:33:da:75:63:3b:39:74:05:e9:8b:b8:94:d7:d7:
44:be:bb:a0:1f:47:36:b2:6b:1b:28:0f:b8:34:a2:12:88:f8:
ce:43:9b:41:5d:d2:9b:1f:99:34:6b:e0:d4:ec:ed:a1:4c:ff:
4b:e1:93:c2:d7:10:ca:8f:4b:38:cc:e4:d2:4d:ea:15:92:85:
a2:b4:d7:d1:b3:5f:22:cf:19:3f:4c:a9:b0:1b:d7:d9:ef:38:
bd:ce:99:fe:9e:83:2d:7f:6c:61:df:bb:0d:b4:cd:83:ec:2b:
b0:8f:6e:8d:07:2a:4f:bb:ed:67:dc:cb:85:24:e5:83:62:cf:
a7:4d:0a:b6:6f:bf:a7:ea:98:01:57:56:08:6b:04:61:0b:8d:
6f:41:34:73:6f:7f:3f:a9:44:21:fd:1a:62:dd:9b:28:ce:a3:
42:82:de:48:6f:6c:b0:85:23:9a:94:d1:c1:72:16:a0:51:9a:
b3:9c:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:04:07 2025 by rpki-client