Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cNllPw7sAG44ErFV6BeWUYJ-Ix8.roa
File: cNllPw7sAG44ErFV6BeWUYJ-Ix8.roa (raw, json)
Hash identifier: nh4jGovGkyGi+eaIHv8F/JCQLqlCsW+ER/L/YzBq7nM=
Subject key identifier: 70:D9:65:3F:0E:EC:00:6E:38:12:B1:55:E8:17:96:51:82:7E:23:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018790D6637F8C5A2D64951483A4596C0CB5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cNllPw7sAG44ErFV6BeWUYJ-Ix8.roa
Signing time: Mon 17 Apr 2023 20:09:41 +0000
ROA not before: Mon 17 Apr 2023 20:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:90:d6:63:7f:8c:5a:2d:64:95:14:83:a4:59:6c:0c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 20:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70d9653f0eec006e3812b155e8179651827e231f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:f1:68:3b:37:01:97:b2:e3:c0:4a:5f:80:
77:db:ed:ce:35:6c:c7:89:75:58:33:bb:10:18:aa:
78:72:f5:2d:29:2e:aa:2d:9f:a4:b6:27:56:b3:e6:
b9:f0:c0:de:13:85:c1:0b:d6:25:14:89:b5:b9:9d:
e7:04:81:d5:19:d4:84:e8:5f:cc:f5:0a:63:8f:9d:
1a:2c:07:68:b7:d8:c9:82:16:0e:31:ca:3c:13:95:
fc:af:08:ab:de:20:98:30:90:66:8b:b9:d1:18:f2:
0b:63:85:32:00:88:df:6c:83:a5:c4:76:ef:cb:3d:
24:88:c6:80:8a:10:7e:e7:ac:8e:fd:db:5e:fb:ff:
00:72:24:bb:e4:92:47:53:1a:1c:e8:b6:66:6a:06:
99:77:5c:cf:5c:25:7a:96:32:83:54:01:e0:12:96:
16:b8:6c:e7:18:f6:54:8e:23:85:3c:61:9d:33:0e:
88:b1:09:a1:0b:4b:e2:c3:86:ae:2b:6a:89:eb:42:
9e:ab:e9:00:3e:f7:e9:b8:89:6d:05:1a:be:0d:23:
40:e6:31:90:cc:7e:e3:e5:72:5c:cf:2e:e0:48:bf:
11:d8:e1:93:b5:69:ee:3e:cc:35:ae:55:da:1c:93:
d0:68:e7:78:f1:19:90:6f:51:a5:78:05:38:89:3d:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:65:3F:0E:EC:00:6E:38:12:B1:55:E8:17:96:51:82:7E:23:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cNllPw7sAG44ErFV6BeWUYJ-Ix8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:c6:da:df:48:f4:ef:32:3f:30:38:17:b4:d0:8a:b3:e3:2a:
b7:a1:1c:8e:b9:2a:84:25:7e:c4:ff:50:4b:7b:0f:bd:6f:60:
13:66:69:24:7e:e5:f9:ac:13:2f:58:c1:cc:0e:31:03:4f:ae:
0d:85:e8:5a:33:50:fa:14:41:2b:40:d8:52:9a:15:be:4a:77:
d7:0c:9c:e6:08:c1:d5:df:3e:78:12:23:c8:93:1b:1e:65:7c:
00:7e:29:7c:d0:0b:d9:7e:95:b7:e4:8e:c2:82:e5:77:97:0f:
64:f7:a8:26:3b:89:e8:5e:d0:69:d6:c3:63:b2:2e:9b:a2:7b:
42:a8:9a:b4:d0:cd:a2:78:39:7e:d0:89:5a:ec:2b:12:48:5d:
86:31:cd:23:7d:ce:64:78:58:c7:be:61:2e:af:32:16:34:f3:
95:3e:95:01:f9:c7:37:07:f3:fe:e5:59:74:70:4f:ae:a9:25:
78:ef:97:4e:cd:32:fd:d4:83:75:85:4f:a5:7e:ae:92:c0:8c:
3b:15:b5:38:1a:f1:32:2c:fe:99:7f:05:81:b1:33:12:7b:0c:
cd:65:69:91:6d:5c:bc:2d:da:dd:d9:f5:e6:9d:81:a5:8d:ed:
25:a1:22:c0:0e:17:18:cb:bf:0b:6d:81:f7:60:6f:35:fb:75:
ea:5f:db:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:18:48 2025 by rpki-client