Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cGs23A_RnkwejGbmVVSF9-9dm5o.roa
File: cGs23A_RnkwejGbmVVSF9-9dm5o.roa (raw, json)
Hash identifier: mhVjdtcSC6zuncKbIQASFFA+xoqdVx352qYaeFq3eVM=
Subject key identifier: 70:6B:36:DC:0F:D1:9E:4C:1E:8C:66:E6:55:54:85:F7:EF:5D:9B:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A11CC6ED46DE54D15AB25EF0605170041
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cGs23A_RnkwejGbmVVSF9-9dm5o.roa
Signing time: Sun 20 Aug 2023 07:15:24 +0000
ROA not before: Sun 20 Aug 2023 07:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:cc:6e:d4:6d:e5:4d:15:ab:25:ef:06:05:17:00:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 07:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=706b36dc0fd19e4c1e8c66e6555485f7ef5d9b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:b6:00:4c:d2:43:2a:e6:e6:ad:a1:d1:14:
d8:b9:7a:06:17:30:0e:50:a9:8b:59:0d:af:78:5a:
f5:f6:90:dc:b8:49:62:5d:28:36:48:ec:b2:ff:1e:
a2:b3:03:b1:76:ec:77:37:28:1a:9c:62:8a:8f:ce:
1e:fd:56:1d:d6:36:02:25:1d:61:6c:48:b5:3a:d1:
97:dc:bc:aa:9f:67:ce:c1:85:36:f0:27:b4:f0:78:
d6:cd:0b:75:f5:ec:57:6f:d7:81:ee:d9:03:36:f8:
ef:88:fa:42:37:d3:d0:aa:cc:da:01:4a:b6:f8:e3:
0a:33:26:33:60:20:96:55:ae:55:36:e5:7c:b8:d8:
73:7a:ec:11:aa:6b:5e:52:b7:71:96:67:23:96:1c:
7c:f4:da:d2:1f:ab:de:16:4a:cb:1b:b4:09:03:04:
5d:7c:f2:5d:12:1f:90:2c:be:a6:cc:99:b2:dd:87:
e1:71:07:34:59:b2:ad:6d:38:4c:b6:52:8d:f9:0e:
2d:93:79:7c:e7:e8:eb:f8:60:4b:24:91:b5:50:c6:
74:36:fb:cc:b9:0d:b8:53:17:47:35:17:3b:61:55:
ff:99:b9:af:4d:14:0e:2a:68:35:b3:df:c4:66:3c:
11:38:bb:a5:fd:05:b6:f4:4a:78:8e:86:d9:30:dc:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:36:DC:0F:D1:9E:4C:1E:8C:66:E6:55:54:85:F7:EF:5D:9B:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cGs23A_RnkwejGbmVVSF9-9dm5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:a1:c1:d3:3f:ed:2f:bc:4b:ac:3a:63:28:6d:07:85:a4:4d:
22:d5:e6:fe:bc:23:15:76:64:58:7c:95:17:1f:3a:57:73:f4:
96:d8:2a:d9:f7:07:74:01:07:80:2b:be:6c:39:5f:29:1e:01:
22:8c:9c:3f:d5:e7:d1:e3:77:22:08:02:d9:40:9c:b4:bc:8e:
c4:5a:e5:98:77:2e:bf:7a:d1:83:ac:9a:57:c5:11:c1:c4:a8:
cc:b0:0b:fe:1e:42:bd:ad:b6:ef:92:8c:0f:67:35:a6:30:66:
c1:2f:78:85:a8:9f:68:a4:cf:f0:56:f9:d6:24:72:52:75:81:
6a:0a:01:ed:d3:3c:6c:36:0b:43:87:a7:4a:7d:06:84:22:d1:
80:a0:62:1f:c2:fa:fb:42:79:8d:52:1f:de:73:be:d9:8d:c0:
c1:35:8a:67:d3:b3:92:a0:b7:47:af:aa:49:51:ca:d8:e8:7e:
1c:1e:a5:4e:2e:6f:f8:7f:1a:83:7b:d8:14:7d:a2:c1:7f:e8:
49:21:e0:21:23:97:34:e8:6c:f3:dc:20:36:4d:51:31:40:b6:
2b:4e:f5:6d:03:73:8e:fb:2b:ba:e9:99:4f:93:2a:ca:ee:03:
f7:1f:0a:8b:72:68:57:fb:1b:1a:69:ca:5c:27:78:93:b7:96:
3d:2d:1c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:58:07 2025 by rpki-client