Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ccsNlbVWiJiFcyHa9HVpPAyziAI.roa
File: ccsNlbVWiJiFcyHa9HVpPAyziAI.roa (raw, json)
Hash identifier: WI8e08oapCFaDq1gxZaeBNkwoRVRqrBX6nl29Iiu1Eo=
Subject key identifier: 71:CB:0D:95:B5:56:88:98:85:73:21:DA:F4:75:69:3C:0C:B3:88:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018823660901733C2A1EA568B3088F8E0A4D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ccsNlbVWiJiFcyHa9HVpPAyziAI.roa
Signing time: Tue 16 May 2023 07:11:09 +0000
ROA not before: Tue 16 May 2023 07:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:66:09:01:73:3c:2a:1e:a5:68:b3:08:8f:8e:0a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 07:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71cb0d95b5568898857321daf475693c0cb38802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:ec:dd:f8:4e:aa:8b:7d:4d:8c:18:c9:9f:
b6:76:be:d6:a3:f9:1e:cf:8c:b4:e8:d6:4e:a8:ae:
e9:d8:cb:65:ab:56:33:3c:3e:e5:e5:22:62:50:ce:
ba:4a:1a:3b:11:c6:08:06:2b:15:35:72:fd:4e:8f:
b3:02:ba:b7:52:c9:1c:aa:18:90:76:1d:6b:65:96:
72:db:b4:99:1c:aa:3a:89:44:76:a7:b7:a2:f9:e7:
81:1f:ef:66:20:3c:9e:36:8f:d5:af:f7:2a:6a:21:
58:43:75:5e:3e:29:c8:cd:51:ec:1d:88:78:b6:28:
4d:75:32:98:ff:6e:2d:9a:3c:be:e1:ee:6a:75:1d:
34:69:fc:df:56:07:ef:ff:93:17:34:57:90:7b:5c:
e5:fb:c5:68:b5:3c:a1:da:bc:c5:c7:90:4e:de:c0:
ff:61:e5:f8:b3:5c:8e:9f:08:63:99:0b:5a:19:31:
8b:a7:6d:74:10:61:cc:30:3b:ac:da:5e:45:b6:5c:
01:0d:15:2f:42:fb:32:0c:72:fe:99:97:e8:2e:dd:
df:3f:1f:5e:6f:b5:1a:49:ea:a5:92:2d:92:5a:83:
76:54:92:61:91:cb:3f:51:c6:28:de:f9:52:0a:04:
f1:7a:9d:3f:ed:fb:40:8f:48:55:72:a4:86:2d:86:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CB:0D:95:B5:56:88:98:85:73:21:DA:F4:75:69:3C:0C:B3:88:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ccsNlbVWiJiFcyHa9HVpPAyziAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:88:f0:49:f1:de:7a:be:89:1f:d0:7d:1d:6b:c3:2f:56:3a:
c6:ff:15:11:e2:e5:53:56:63:a3:60:bd:17:ef:02:74:e3:ba:
0a:53:bc:1f:42:59:b0:6c:49:ad:62:93:36:50:48:11:e2:cd:
92:7c:16:b7:f5:26:44:11:02:e4:3c:5d:12:a5:92:0e:71:d2:
5e:b2:b9:51:6f:77:7d:d1:87:f7:4e:2a:c0:ef:41:5a:70:81:
e4:da:4f:97:d7:e3:c9:31:b6:80:b2:e5:0c:1d:e8:ec:57:f9:
57:1d:9a:69:3a:ac:8a:3a:a3:3e:70:aa:11:f8:89:2c:1f:ee:
0e:68:3a:25:84:21:11:10:e3:4d:5a:50:12:30:cb:64:dd:af:
0c:8a:86:d6:64:45:bd:36:6b:cb:1f:a3:33:cd:dc:c2:9a:51:
84:75:e1:bd:46:1d:d1:33:3b:40:6d:b8:53:7c:37:3a:2c:03:
3b:1a:f8:4e:25:97:a0:b4:30:ae:cf:7c:69:7f:25:d5:61:ff:
b7:de:c3:f9:de:10:69:9f:f2:ee:51:af:08:da:3e:00:61:b8:
e4:9b:e2:71:aa:b9:af:15:5e:4d:34:6c:56:f4:38:6a:4c:ea:
64:e4:fc:ed:12:7a:5f:02:64:3d:42:49:e2:ce:2a:95:fd:2a:
94:43:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:24 2025 by rpki-client