Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cHEnNylWQwfD8gPC8d9hHv3WaDg.roa
File: cHEnNylWQwfD8gPC8d9hHv3WaDg.roa (raw, json)
Hash identifier: Rg1SInRe9uhay/D1JdmQqs4+1DMi0OkYAz42iOHfktg=
Subject key identifier: 70:71:27:37:29:56:43:07:C3:F2:03:C2:F1:DF:61:1E:FD:D6:68:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A239AD04240A7D4B8994741E9AA3CCA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cHEnNylWQwfD8gPC8d9hHv3WaDg.roa
Signing time: Fri 21 Apr 2023 05:11:41 +0000
ROA not before: Fri 21 Apr 2023 05:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:39:ad:04:24:0a:7d:4b:89:94:74:1e:9a:a3:cc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 05:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7071273729564307c3f203c2f1df611efdd66838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:11:85:f7:e3:e9:1d:be:1b:02:9a:07:26:73:
77:3c:0d:24:4d:ed:61:f6:d4:20:7f:58:71:1c:80:
60:b3:03:ea:34:d5:3d:91:4a:8f:8f:e3:9e:0c:ad:
72:c4:b1:c7:40:58:be:ef:82:f4:7a:cf:70:3b:a3:
d9:6e:d3:1d:42:27:3b:d5:10:df:a9:df:56:b3:ad:
6f:fe:c9:f8:b4:f3:b5:22:56:2b:25:69:47:c3:ec:
f7:f0:a6:cf:2f:b3:44:86:ab:4f:b2:3f:e5:21:5d:
92:9b:2c:86:31:86:84:1f:7d:ed:f0:20:06:85:4a:
bc:7f:ee:68:77:03:3a:62:4f:a6:ee:4f:b3:60:99:
46:18:4b:e7:b7:9e:58:55:e7:95:cc:a5:9c:ac:4d:
a7:ad:ee:27:a6:de:cc:57:ad:9b:c6:26:2b:aa:5b:
6d:06:e6:ed:93:ef:88:68:f8:5f:08:45:d9:5b:d4:
73:0e:62:a2:de:4c:51:0c:25:79:e2:62:87:c0:af:
51:f7:50:d4:b9:09:31:e0:1a:b1:f4:2f:d9:af:cb:
8a:b1:84:7a:b5:09:50:6b:bf:bc:80:3a:cc:9e:5c:
01:81:7b:ad:67:3e:33:50:01:b5:18:66:23:da:6e:
b7:f4:ed:85:69:49:f3:12:9d:44:a0:6f:e7:49:94:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:27:37:29:56:43:07:C3:F2:03:C2:F1:DF:61:1E:FD:D6:68:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cHEnNylWQwfD8gPC8d9hHv3WaDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:7a:32:26:19:dd:13:f3:02:5d:ff:24:24:b0:7d:a5:18:83:
76:d3:78:da:b8:07:75:61:41:90:c3:a7:c6:46:9a:e8:ec:31:
c8:d3:61:b6:c3:a3:3a:32:96:fd:95:b2:45:0c:0d:78:f7:8a:
f6:be:5b:6a:0d:d0:f6:18:bf:c7:c1:67:9b:c8:f2:41:66:ba:
6c:57:e7:45:17:89:68:47:1c:95:f7:45:ba:dd:84:c3:fb:e4:
c8:6e:bf:22:72:23:4f:32:59:09:72:08:1e:59:eb:a6:a4:a4:
50:6f:8d:9f:68:54:a0:9b:64:59:57:62:20:ee:f7:02:79:29:
22:86:96:ae:c3:3b:63:0d:2c:55:19:8d:2b:36:1c:a8:c9:74:
bd:76:75:cc:17:f4:fc:f2:83:6b:5b:5b:5f:e8:c0:2c:e7:52:
4f:82:20:ac:1d:09:b3:d5:40:92:69:4b:61:b8:91:a9:98:9c:
b2:81:ac:0b:54:5e:ae:2f:d9:b2:b8:1e:5d:e3:21:cf:0d:13:
c0:eb:df:f1:3f:64:e3:32:9b:18:09:02:f3:a8:a8:4f:90:1e:
9a:46:e4:8b:4f:9a:6c:b6:8f:1a:b1:59:55:26:0d:70:37:fa:
4a:b3:d7:1a:c7:f5:26:30:92:7a:2b:bc:f5:d5:5b:b3:da:f6:
9b:01:d8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:28 2025 by rpki-client