Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cXNEcnitVBOA-hIhrgDNYSe1Byo.roa
File: cXNEcnitVBOA-hIhrgDNYSe1Byo.roa (raw, json)
Hash identifier: DXSQcN2eqR8SZHpoSbC41dx04va+Nti7FHnTiu+MICM=
Subject key identifier: 71:73:44:72:78:AD:54:13:80:FA:12:21:AE:00:CD:61:27:B5:07:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DC5FDF92EFB45316F37B6C672B372F46
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cXNEcnitVBOA-hIhrgDNYSe1Byo.roa
Signing time: Tue 02 May 2023 12:11:23 +0000
ROA not before: Tue 02 May 2023 12:11:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:5f:df:92:ef:b4:53:16:f3:7b:6c:67:2b:37:2f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 12:11:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7173447278ad541380fa1221ae00cd6127b5072a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:b6:84:14:d7:b2:cb:2f:d2:a6:f3:73:e2:
62:b5:d5:42:6a:1e:60:c3:96:76:93:92:34:ae:a3:
54:3b:6e:d6:b4:e0:2d:e7:74:47:f9:13:f4:0a:99:
4e:e1:33:01:26:47:1e:d0:49:48:b4:d2:ea:8a:ee:
95:27:e9:eb:05:50:2c:a1:7d:c2:a9:f1:85:27:a4:
14:7c:dd:64:3c:76:c6:22:00:6b:19:05:78:18:96:
9d:fe:2d:e0:c6:16:45:26:ef:2a:ce:e7:9c:5a:61:
c3:ac:f7:e6:4b:bb:2a:7b:79:5a:97:03:c6:24:91:
6a:db:01:8d:9d:2e:1f:52:43:db:73:1b:ce:5e:e1:
d1:2d:68:d7:7c:2a:8e:18:f2:db:58:34:b8:49:b6:
ef:5c:48:18:b0:8b:9f:e7:0c:12:7c:c1:2a:28:61:
a4:f7:9c:08:06:8a:ed:d4:50:63:36:ac:3c:0c:5f:
63:2d:bf:5a:d7:8a:59:df:97:c2:02:a0:a5:93:12:
99:08:fd:12:17:53:01:74:af:52:7a:fe:1d:4d:91:
3d:02:23:8c:12:1a:87:41:88:5b:74:07:9b:4f:f5:
f0:95:7b:18:b8:8e:b4:2c:e4:ff:17:ff:f3:b7:09:
39:52:4b:44:12:06:74:f5:29:a5:2b:fe:0c:5a:78:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:73:44:72:78:AD:54:13:80:FA:12:21:AE:00:CD:61:27:B5:07:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cXNEcnitVBOA-hIhrgDNYSe1Byo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:3d:3f:ca:5d:cc:9a:ac:13:14:40:e9:f1:a9:78:11:d6:5f:
1f:b1:fe:b2:5c:11:0a:a9:f8:a8:48:56:eb:18:d2:2a:7b:ff:
d3:d4:1e:62:b2:5e:f8:d8:f7:3b:8a:dc:69:e3:ec:04:7a:31:
b1:df:47:fc:80:81:b9:48:26:84:22:2a:da:04:04:9d:f0:7f:
eb:2e:5b:93:9f:8d:6f:a6:25:54:5b:d2:32:01:c0:3d:91:19:
06:3e:b6:46:78:97:40:c6:7c:60:07:bb:d8:e5:b9:71:4e:6c:
8a:54:24:35:f6:8b:70:80:fa:59:60:07:15:94:60:70:18:20:
46:86:1b:36:59:06:0b:56:68:09:33:5d:36:0a:0a:af:fd:b3:
96:32:db:16:4e:f8:96:33:a5:c2:52:12:fa:6a:e3:9b:b0:50:
10:8f:04:99:fb:96:bb:60:4f:ca:8e:81:2d:71:f2:51:50:62:
95:d2:49:6e:6c:1a:aa:8a:f1:2f:1a:14:58:19:0d:a6:8f:37:
bc:00:e9:f0:5e:a0:f8:81:a5:92:f6:f3:8c:89:a5:34:c3:ec:
c5:f0:16:ba:2c:0f:90:94:eb:ed:f2:00:83:d0:18:47:e8:20:
9a:47:e3:93:f1:fa:18:14:fa:42:41:94:04:57:52:54:0b:c8:
5a:db:e7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:44 2025 by rpki-client