Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBVhxrFCIFN3Ya1uDWA2aYsQku4.roa
File: cBVhxrFCIFN3Ya1uDWA2aYsQku4.roa (raw, json)
Hash identifier: VNwgx1XXAtd9xNIL2Yy8twlMXxmABbumK8HDZuauSRo=
Subject key identifier: 70:15:61:C6:B1:42:20:53:77:61:AD:6E:0D:60:36:69:8B:10:92:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896B7CC7A7F3602F3A8FD601E49617EE38
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBVhxrFCIFN3Ya1uDWA2aYsQku4.roa
Signing time: Wed 19 Jul 2023 00:11:26 +0000
ROA not before: Wed 19 Jul 2023 00:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6b:7c:c7:a7:f3:60:2f:3a:8f:d6:01:e4:96:17:ee:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 00:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=701561c6b14220537761ad6e0d6036698b1092ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:56:e9:6f:e0:1a:1c:a0:ae:62:3f:03:0f:2d:
dd:aa:d0:20:a0:2f:d1:4a:ef:4d:ff:d5:de:19:61:
91:34:09:89:80:2a:14:86:8d:af:fe:78:9e:a8:44:
76:68:3e:97:44:e3:35:c2:b5:a6:9a:1d:6b:33:e2:
44:e2:2e:4b:7a:b9:7c:ca:14:91:05:47:0d:29:a9:
8c:34:56:cc:d0:8b:97:14:f0:6b:77:59:14:6b:92:
4f:a4:de:a9:dc:8e:f7:cc:bf:cd:4f:ca:51:7e:7c:
58:8a:1f:a0:64:ba:69:4a:f3:6f:68:ca:01:c7:68:
ba:50:c9:e3:c8:d1:54:03:03:44:ab:1d:7a:4a:3a:
ee:85:90:ca:5d:8a:88:17:e1:66:fa:c4:a2:b6:95:
0b:dc:9c:54:22:45:42:d9:19:50:ca:4e:ec:5a:be:
cd:33:31:52:79:c3:ef:ce:44:49:6f:ce:b1:9d:ef:
5f:50:f8:37:ad:cd:0f:b5:9c:41:44:34:d4:00:1c:
06:23:e4:e8:32:b6:ab:20:c3:42:b7:62:24:8a:48:
5e:62:55:30:c9:0a:0c:a1:63:9e:75:43:30:84:57:
a5:ec:4b:39:63:cf:60:ae:be:c8:b4:50:bb:7e:d3:
a0:d0:b5:b5:6f:45:e5:4b:f3:99:00:c9:b3:70:92:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:15:61:C6:B1:42:20:53:77:61:AD:6E:0D:60:36:69:8B:10:92:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBVhxrFCIFN3Ya1uDWA2aYsQku4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:11:11:e2:32:a6:7d:6f:ab:a0:e7:7c:7c:1f:bf:4d:e3:23:
69:9d:99:64:ed:5b:b3:6d:83:6a:50:b1:47:6b:20:3c:ed:46:
4a:8c:3a:58:fb:6c:79:13:7d:fc:37:d6:9b:ac:2e:84:c3:81:
6c:37:e0:ab:d3:ed:77:78:03:ec:4f:e0:98:4e:4f:e2:a9:af:
db:80:f8:b2:bb:a5:18:b5:e7:71:b2:b5:2c:aa:0c:09:f9:ff:
e0:31:e3:fa:06:84:a8:d7:6e:60:20:36:c6:87:55:9e:10:03:
db:42:87:53:da:f4:6a:87:b1:93:8a:96:dd:3c:28:b9:33:72:
f5:f3:4d:3b:68:79:e4:e9:e0:b3:9c:6d:ca:b1:59:3c:17:1c:
e1:c8:8a:4c:62:1c:b6:5f:eb:69:af:84:13:15:9e:0c:d2:c5:
e5:93:29:c5:9f:e1:7f:8b:c0:a7:be:bd:47:7f:49:3a:be:61:
3d:42:bd:a9:34:a7:7a:26:6a:55:e7:b8:93:67:b2:68:af:67:
1c:61:86:81:c9:3c:71:f2:60:51:aa:e0:1a:63:87:dc:c7:17:
f4:f9:9b:54:cc:50:81:33:5b:57:d4:68:0e:58:7d:d6:36:04:
47:d0:ad:27:81:80:b9:4c:61:a4:38:6f:68:ae:5f:e4:e3:8d:
e8:ce:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:21:40 2025 by rpki-client