Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cbrawZtAo_G7j-r9sBdiwFUCNVM.roa
File: cbrawZtAo_G7j-r9sBdiwFUCNVM.roa (raw, json)
Hash identifier: srV8G/pOWh3Brap7tcm6gce9yiiIlJnP0zyz8vmc9PE=
Subject key identifier: 71:BA:DA:C1:9B:40:A3:F1:BB:8F:EA:FD:B0:17:62:C0:55:02:35:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182BB2BF28ACEC3868AAFD28CA4497C145A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cbrawZtAo_G7j-r9sBdiwFUCNVM.roa
Signing time: Sat 20 Aug 2022 12:13:15 +0000
ROA not before: Sat 20 Aug 2022 12:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bb:2b:f2:8a:ce:c3:86:8a:af:d2:8c:a4:49:7c:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 12:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71badac19b40a3f1bb8feafdb01762c055023553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:f6:5c:84:e4:74:08:bd:96:27:59:a1:c6:
05:90:53:df:45:ef:8c:66:e9:3c:a1:d7:1a:47:74:
7c:27:ba:6d:16:69:54:7f:78:fe:14:78:de:9c:39:
54:7e:80:f9:fd:9c:4b:68:74:fe:a5:d8:da:ad:51:
e9:6c:3b:fc:37:5b:d9:ff:1e:3d:7b:81:11:10:2a:
8b:eb:37:a8:ee:ba:06:d7:15:1d:16:36:66:1d:e0:
48:0c:23:0b:77:d4:a6:e1:47:83:6a:a8:4c:aa:af:
2a:20:61:96:d2:13:b7:69:c5:37:fc:a2:38:96:a1:
5d:1b:64:ea:af:dd:1b:0a:dd:1f:06:ec:a2:9c:13:
86:a3:5a:19:aa:d2:8b:98:fc:c7:23:1c:76:0e:f2:
d1:5e:fb:f1:07:41:54:15:f2:bb:e0:e0:a3:54:9a:
de:d2:3b:96:ec:32:e0:0c:c4:79:63:e2:04:c4:cc:
0d:26:3b:0f:f7:7d:ec:ec:b7:aa:c8:f8:ed:f0:35:
c0:f9:28:7f:be:79:83:5a:46:6c:6d:1a:8f:75:b1:
03:08:b9:40:a8:7c:5b:c3:06:e9:de:0d:d5:fc:23:
fb:a9:9b:8e:90:54:dc:54:46:a1:b1:88:eb:0e:b3:
11:97:7f:79:31:a2:1a:42:2d:bb:02:d7:6b:c9:b3:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BA:DA:C1:9B:40:A3:F1:BB:8F:EA:FD:B0:17:62:C0:55:02:35:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cbrawZtAo_G7j-r9sBdiwFUCNVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:db:0d:c1:66:40:f6:d3:4f:3e:2a:23:3c:77:2a:ad:e8:c0:
2c:81:f1:11:df:97:59:68:98:80:f6:b3:e6:85:04:cb:a2:ee:
e4:27:96:c2:f4:f9:ae:74:27:a2:70:fe:8c:e5:65:5f:8f:3a:
4e:88:f6:b3:9c:6a:1c:98:c8:fe:06:24:19:76:ec:58:ee:56:
76:d1:2e:01:eb:43:d1:d5:13:45:1b:73:2e:2e:c7:e4:bc:74:
96:4c:6b:47:b2:e9:4c:96:ca:7b:84:07:02:1a:73:66:89:be:
f9:26:e9:36:d4:19:e6:fd:89:32:5c:f1:c7:09:5c:c0:04:8c:
d6:39:48:de:ac:a5:b3:67:14:0c:ed:6e:e0:ce:b4:b9:b1:70:
f4:ff:1d:90:60:58:fa:e9:b6:09:28:f4:17:0b:11:b8:8e:44:
1f:4c:c3:98:c2:8c:9b:96:1c:cb:dd:03:c9:d0:83:f9:88:98:
7b:6f:f4:79:57:f9:3c:12:e3:ac:2b:9d:e6:1d:4f:59:fa:1a:
45:62:30:4f:c1:1c:03:d0:4e:e7:7b:94:2c:f9:8c:cb:6c:b3:
ef:8d:15:a1:fb:c3:85:be:83:76:77:4f:82:27:ce:aa:4b:bf:
1f:fe:d9:78:7b:e0:cb:c8:ab:33:17:90:5a:9e:40:80:6b:68:
31:03:dd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:45:50 2025 by rpki-client