Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cbZ_B4jJdGPLtP-sGx4_SW8QCeU.roa
File: cbZ_B4jJdGPLtP-sGx4_SW8QCeU.roa (raw, json)
Hash identifier: gvP0GA1u/8vE7kFjRmnmhfnAx0cXpUlqnrjCxAd1rGg=
Subject key identifier: 71:B6:7F:07:88:C9:74:63:CB:B4:FF:AC:1B:1E:3F:49:6F:10:09:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F659C31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cbZ_B4jJdGPLtP-sGx4_SW8QCeU.roa
Signing time: Thu 03 Mar 2022 20:08:27 +0000
ROA not before: Thu 03 Mar 2022 20:08:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868930097 (0x6f659c31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 20:08:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71b67f0788c97463cbb4ffac1b1e3f496f1009e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:f4:98:01:0b:ee:fb:8c:97:bf:e0:d9:6e:
7e:ff:2b:e3:fd:f2:e4:c8:d4:58:ef:35:dd:e0:2a:
ee:d6:4d:c5:36:a0:a3:d1:e6:a8:78:10:9f:58:e4:
a6:8b:42:ee:84:74:8d:dd:3a:5a:bc:14:83:3e:9e:
a2:41:58:21:de:9a:ea:a1:35:c1:d0:68:fc:68:1b:
6a:6d:d0:ba:f7:7e:27:08:0f:21:11:ac:2f:56:71:
fb:00:30:6d:b2:e8:18:84:51:a4:5d:cf:80:42:54:
80:2a:1d:f1:14:43:8d:03:70:7f:e6:29:48:49:26:
ea:b4:46:9b:d9:db:c9:1a:0a:41:81:2e:0b:22:d4:
c1:09:f3:75:41:8d:f8:1a:5e:2c:80:39:27:a4:73:
ea:41:fb:7d:36:03:40:cd:22:ef:22:24:e9:37:eb:
40:23:0c:de:80:be:b6:f7:ae:2f:8a:61:1d:6a:3f:
eb:14:83:ca:85:05:35:ce:e1:be:42:65:ce:24:e7:
cd:de:cb:ad:97:29:36:8f:74:b8:2c:79:bc:fc:8d:
72:a5:5d:ae:1a:56:8b:7f:7e:b5:e3:07:5a:8c:ae:
ee:2b:c3:ea:95:c8:4f:4e:86:51:db:b0:a5:1f:3d:
97:e8:2d:2c:93:cf:20:d6:53:5d:c9:6c:95:80:1a:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B6:7F:07:88:C9:74:63:CB:B4:FF:AC:1B:1E:3F:49:6F:10:09:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cbZ_B4jJdGPLtP-sGx4_SW8QCeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:b7:9b:aa:99:42:db:86:8c:41:6e:fd:08:a7:3a:80:1b:00:
a9:0c:cf:d0:55:d2:96:85:6a:7b:1a:f7:05:f7:13:45:54:43:
4c:47:97:4d:f3:bf:76:79:5e:52:33:a8:61:7e:4b:30:ab:63:
af:d4:a6:e7:b6:7a:a2:2e:96:c7:53:da:0f:22:40:48:11:e4:
e3:e1:77:1e:cc:b8:fa:ea:c1:08:2a:2a:d5:d7:33:7f:e5:85:
53:88:79:6f:4a:e4:11:b7:e4:b2:af:44:10:ef:fe:02:f7:53:
3e:5e:5d:98:9a:f2:6b:4e:15:57:d2:3c:a4:36:de:7d:44:4c:
75:f0:f2:07:39:64:f7:9f:70:47:fd:b8:29:bc:ce:b6:f9:8e:
21:d2:e5:e5:7c:9b:aa:7a:f6:1e:e4:60:0d:ac:4a:9e:a2:c5:
1f:c2:9a:0c:fb:0c:a7:d4:20:7d:89:b7:8a:a4:6f:1a:9f:10:
6b:89:9a:7e:0f:d8:93:19:2e:53:4c:7d:44:41:3e:6c:bd:98:
f4:eb:ed:45:c0:5d:0c:23:80:ba:b1:93:e7:5c:9e:9a:aa:6d:
70:8a:81:1b:d4:40:7c:40:80:37:2a:5d:ff:c9:d2:93:8b:35:
23:91:cd:74:c7:ea:b7:e7:c6:16:f4:8a:87:9e:d2:bd:2c:23:
3f:56:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:04:29 2025 by rpki-client