Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cWghCcgFsHnp6Ci9NXt9TJgJNp0.roa
File: cWghCcgFsHnp6Ci9NXt9TJgJNp0.roa (raw, json)
Hash identifier: t+3yqi3wKBddIMJ8GopfaDkkBfnlvY4G7wytVlas+do=
Subject key identifier: 71:68:21:09:C8:05:B0:79:E9:E8:28:BD:35:7B:7D:4C:98:09:36:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186643B5D499DA7471CBFBED2FF07EAD029
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cWghCcgFsHnp6Ci9NXt9TJgJNp0.roa
Signing time: Sat 18 Feb 2023 11:14:17 +0000
ROA not before: Sat 18 Feb 2023 11:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:64:3b:5d:49:9d:a7:47:1c:bf:be:d2:ff:07:ea:d0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 11:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71682109c805b079e9e828bd357b7d4c9809369d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:46:e2:8c:d8:23:b0:a0:be:8e:8c:d7:d9:
94:f9:8e:4b:60:c4:b8:85:f9:2d:fc:51:a7:b2:a4:
f4:c5:3a:a6:8e:68:10:c0:e7:e8:f6:f3:a0:8b:89:
62:07:f1:a9:51:37:1a:82:b9:34:f2:ad:10:0b:5b:
42:1c:20:4e:27:23:3b:e9:f9:12:98:65:8f:ea:3d:
70:e4:37:7b:ac:d3:25:73:14:cd:80:1d:b1:74:14:
82:97:05:3e:25:a3:fe:6e:23:89:ee:b9:8e:14:3b:
0a:96:bb:81:57:e5:58:2b:86:df:83:63:4f:a0:99:
3c:92:e8:12:27:13:82:23:a4:92:fc:e9:a8:47:59:
c2:29:2a:92:6d:e7:cb:f9:8b:cc:59:5e:cb:be:08:
b6:79:a2:1a:06:52:eb:05:49:c8:44:2b:da:7d:0b:
30:e6:98:7a:18:f8:59:04:b0:90:ff:b5:ec:e8:b8:
3e:03:9d:16:ce:c0:2c:32:1d:8a:f2:2a:30:ee:2d:
4a:21:29:f0:a3:26:e7:71:43:ff:8b:71:94:06:e8:
23:b0:64:a6:97:e6:4b:2f:25:fa:10:54:f7:1b:79:
73:33:20:55:a0:cb:92:06:3d:14:47:40:c7:aa:6e:
3a:de:c1:21:71:a5:eb:e2:fb:5f:82:20:64:b4:83:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:68:21:09:C8:05:B0:79:E9:E8:28:BD:35:7B:7D:4C:98:09:36:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cWghCcgFsHnp6Ci9NXt9TJgJNp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:88:24:65:d7:dd:17:a0:9e:fc:c1:b6:93:02:41:ae:ad:81:
9c:b0:d0:38:df:31:70:36:2e:40:04:1a:65:c7:7c:59:65:41:
b5:fb:ca:71:9d:2d:9c:6c:d0:82:1e:8b:c3:f9:c8:92:89:1b:
0f:35:f1:1a:37:8d:3a:c3:4f:b1:7e:f2:aa:6f:63:cb:41:a3:
02:4e:f0:b2:21:b6:b8:d1:9a:c7:c9:2c:cf:a1:a1:bc:9b:93:
5e:2f:93:5d:96:60:fd:9a:fe:8d:fe:1c:6a:96:86:f6:61:9b:
8c:8c:db:f0:31:c1:f5:58:1e:32:4c:85:b8:36:b3:db:68:c4:
d2:65:39:5e:62:91:eb:ae:3d:d8:d7:47:7f:57:ef:66:b3:75:
96:02:a1:c8:78:4d:81:94:24:b7:0b:2e:6a:fd:20:a0:c9:17:
6a:c4:02:94:54:a7:fd:8c:05:01:bd:ce:fe:4d:76:88:d4:14:
9e:6c:c5:73:a2:0d:9a:42:90:d7:c9:bb:f7:e3:6c:e5:2f:d6:
2d:40:3b:f8:a4:a2:b4:04:ee:4c:6d:eb:fb:e7:0f:38:c0:e6:
14:31:66:94:3c:16:94:33:64:4f:fd:58:f0:86:5a:18:45:43:
45:95:2a:58:9d:98:e4:9a:da:5b:34:b4:7a:9d:c5:e0:50:69:
67:be:e8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:13:22 2025 by rpki-client