Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cJ-5ERxNcpdWo3LeX4Qn1kCFN5o.roa
File: cJ-5ERxNcpdWo3LeX4Qn1kCFN5o.roa (raw, json)
Hash identifier: 7H6rzRCjz6tj52mNeipJgAHYe9hxmpGeuuMRRlf7rQ8=
Subject key identifier: 70:9F:B9:11:1C:4D:72:97:56:A3:72:DE:5F:84:27:D6:40:85:37:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869D89F4DF5C48B7F5B99D4C0330B17BCF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cJ-5ERxNcpdWo3LeX4Qn1kCFN5o.roa
Signing time: Wed 01 Mar 2023 14:18:29 +0000
ROA not before: Wed 01 Mar 2023 14:18:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:89:f4:df:5c:48:b7:f5:b9:9d:4c:03:30:b1:7b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 14:18:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=709fb9111c4d729756a372de5f8427d64085379a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:25:36:99:ba:28:2d:8d:62:88:fc:8a:47:
05:c0:26:42:e1:e4:66:33:62:99:88:a5:fe:ff:87:
ee:91:35:7d:a1:04:af:c2:46:3e:03:e0:ff:44:35:
54:90:7e:db:5a:72:61:a5:92:1b:72:eb:18:c9:38:
95:a9:67:80:de:a5:54:7a:f1:78:76:e4:4a:1d:30:
bc:ce:36:d9:e7:cd:05:04:35:ff:d6:4a:1e:f6:16:
5e:8a:2f:b6:0c:d7:48:db:e7:e5:6d:82:c8:2f:06:
2d:87:c5:7b:bf:1d:b6:02:65:4f:6c:6a:8a:ef:ad:
e1:a5:a1:d0:70:db:a9:f0:87:2b:1a:de:c0:74:e8:
db:40:15:3f:2e:2a:c3:00:39:6c:ff:a4:bc:61:e7:
d6:c6:9c:f1:61:d3:36:87:95:82:7a:de:1b:a6:8e:
3a:ee:d3:9c:14:ff:c5:66:3b:e7:87:f8:7b:de:f4:
35:7a:8e:4b:d7:30:1e:08:22:62:33:a1:1b:80:7f:
f3:04:91:ac:62:ea:f8:40:94:cd:9b:37:00:46:09:
cf:60:1e:97:08:66:14:d4:8a:92:99:0e:60:a3:6f:
00:48:cd:bb:4b:59:ee:5f:16:dc:8d:f1:82:ad:c3:
d7:97:39:37:80:79:e7:50:b0:14:94:33:90:a8:3b:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9F:B9:11:1C:4D:72:97:56:A3:72:DE:5F:84:27:D6:40:85:37:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cJ-5ERxNcpdWo3LeX4Qn1kCFN5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:f0:29:63:ef:55:fe:d6:4e:46:64:3b:cc:b6:33:83:14:81:
cd:ae:72:2b:43:4f:fc:44:c8:5f:48:9e:fc:07:d2:2d:24:88:
60:19:4c:ce:18:3e:21:fa:71:2e:30:23:03:be:aa:25:eb:ff:
76:bf:6f:76:08:17:31:3d:49:fd:38:f1:96:98:86:78:b9:a0:
f6:11:62:23:1b:c8:17:15:21:68:f6:76:4b:73:90:50:cd:a7:
47:2f:80:26:37:a0:f6:19:e7:d6:8f:f0:6c:ef:1f:92:66:cd:
c8:78:e1:12:a2:fd:e4:07:46:fe:a9:65:d7:9a:6b:c8:b2:91:
b6:08:96:9d:37:a1:e2:97:e0:84:2c:18:96:bf:c8:85:d3:37:
8d:88:65:06:f4:57:3d:84:7f:4b:a6:f0:31:55:54:39:2d:9c:
36:ae:52:ae:5f:8d:b7:a3:62:f2:d6:ea:8c:29:f0:fc:44:96:
c2:af:19:3e:c7:11:9e:2c:5d:c3:e1:1d:26:a2:cf:3d:cd:5b:
b0:9d:8e:c3:bb:0c:8a:0d:14:f4:56:01:fa:78:02:c9:fb:3c:
9c:e2:40:1b:7a:67:9f:70:e4:30:3a:6d:ee:86:2b:f3:7d:04:
ea:61:e0:c3:26:91:ba:86:2e:08:0e:4f:53:2d:0e:21:93:75:
b0:9a:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:17 2025 by rpki-client