Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cUafhEG7-sZm7rbtBxz_xrRZM_M.roa
File: cUafhEG7-sZm7rbtBxz_xrRZM_M.roa (raw, json)
Hash identifier: HSbLylKm4MiGyGu2QsrqR5hAbim8pxrKPc0QKmsjFu4=
Subject key identifier: 71:46:9F:84:41:BB:FA:C6:66:EE:B6:ED:07:1C:FF:C6:B4:59:33:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827314DD5300A1CF18CB75F242047B0A19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cUafhEG7-sZm7rbtBxz_xrRZM_M.roa
Signing time: Sat 06 Aug 2022 12:15:23 +0000
ROA not before: Sat 06 Aug 2022 12:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:73:14:dd:53:00:a1:cf:18:cb:75:f2:42:04:7b:0a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 12:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71469f8441bbfac666eeb6ed071cffc6b45933f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:af:c3:6f:00:33:6d:b9:eb:db:71:90:e6:
fc:92:f8:ff:99:97:25:18:f7:89:92:42:8d:b5:f6:
84:34:a8:06:0c:6d:15:3a:74:4b:46:5c:f3:e6:bd:
63:dc:78:d8:e4:c8:9b:16:74:94:09:63:ea:cd:49:
24:a7:ed:4b:e2:3b:f3:06:4f:db:02:36:ec:9d:12:
ec:ef:01:17:ec:81:5f:b9:07:ad:6c:61:25:57:60:
8f:a3:80:82:61:59:5a:a7:1b:23:a5:4c:37:eb:c4:
70:b2:c5:8a:b9:74:35:00:c0:8e:b7:a2:ec:a1:3f:
aa:cd:2f:7b:d0:25:d9:c4:7f:b9:94:dc:8c:b1:5f:
b3:94:5d:30:56:5c:40:b9:08:a9:c5:67:5a:f4:64:
52:fa:cc:21:84:c3:cd:7e:cf:80:51:c9:74:32:4b:
cd:b4:78:9a:f3:84:0d:c7:fa:0e:35:51:db:e1:dd:
04:5a:d9:1a:6e:b6:25:b6:0b:05:2b:c7:4d:40:79:
0a:dd:9f:d6:83:7d:4d:bb:ca:83:d8:88:9d:b1:b5:
48:13:84:6e:56:b6:31:fb:9f:df:30:18:e2:eb:a7:
ea:41:53:85:35:ea:29:80:77:6d:1a:1e:f8:51:28:
af:01:a9:0d:7f:70:71:28:f8:41:6d:51:2b:55:72:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:9F:84:41:BB:FA:C6:66:EE:B6:ED:07:1C:FF:C6:B4:59:33:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cUafhEG7-sZm7rbtBxz_xrRZM_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:d3:66:b6:a5:b9:0f:2e:d2:bc:89:8a:8b:76:79:fc:fb:36:
10:39:f1:94:0e:ac:f2:c5:cd:43:e7:41:cd:d0:8b:40:76:e7:
d4:d2:b5:59:14:f7:26:01:d6:9b:51:4d:e9:62:70:a6:2c:dc:
fd:0f:15:c2:19:ac:3a:eb:39:81:c9:5a:13:6d:8f:50:51:f6:
c2:b4:8e:4e:95:ec:99:86:21:3c:46:e1:55:8f:43:74:e5:4c:
99:5e:92:9a:43:5b:69:21:bc:70:23:71:f3:fa:fe:7d:e9:9c:
f8:fb:df:75:41:1e:ab:d6:17:f6:7c:af:ca:fb:26:9f:88:23:
da:3d:3f:eb:ee:43:a8:08:33:b8:80:38:8d:d8:c0:22:54:d4:
64:58:63:0f:03:38:94:0b:b9:7a:8b:51:76:47:24:73:82:37:
b0:eb:c4:93:93:03:1f:e8:01:7a:74:6e:42:72:32:44:36:5a:
ef:11:e7:ce:23:50:ee:d7:7d:9c:4d:0d:6c:10:31:83:19:06:
3c:f0:5a:2c:16:99:cb:87:38:95:68:4c:e3:f6:68:48:03:36:
3c:94:b3:7a:a5:ae:89:df:ea:f3:be:e4:2f:9c:09:64:58:6c:
db:0c:86:73:11:22:bd:f0:77:1a:0f:87:83:f2:47:e6:c8:da:
6e:5c:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:05:45 2025 by rpki-client