Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cjgykydrpF7oN1DQkOWeHDLSubA.roa
File: cjgykydrpF7oN1DQkOWeHDLSubA.roa (raw, json)
Hash identifier: Ye2cC313rGiOPlwvFC4YePTQ3dS2V59HJ20pp05bWt0=
Subject key identifier: 72:38:32:93:27:6B:A4:5E:E8:37:50:D0:90:E5:9E:1C:32:D2:B9:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B2AE889
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cjgykydrpF7oN1DQkOWeHDLSubA.roa
Signing time: Thu 09 Jun 2022 03:12:02 +0000
ROA not before: Thu 09 Jun 2022 03:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2334845065 (0x8b2ae889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 03:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72383293276ba45ee83750d090e59e1c32d2b9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:79:6a:0d:0e:77:28:c4:cb:b6:5f:79:2a:
fa:39:c9:6e:01:51:e9:ee:09:31:9b:14:94:a3:a7:
58:f5:ba:b4:b8:55:57:71:cd:f2:88:d3:77:b2:f3:
ec:b1:dc:b4:69:02:32:cf:9a:b6:22:c4:b9:41:d5:
3d:01:4d:f4:19:3e:6b:43:1d:73:5f:c1:d4:27:49:
3a:95:b6:81:32:66:d2:8c:b6:a2:c7:a1:77:7d:3c:
5e:25:29:73:69:67:54:77:ce:4c:03:90:cc:20:f4:
e8:c0:30:d8:83:d8:5f:e3:04:6a:be:97:24:93:90:
8d:1c:49:ee:74:54:ad:cf:28:d5:a7:e0:a7:9b:89:
58:89:2e:83:73:dc:72:a8:e8:20:18:55:ca:74:8c:
e1:a0:f3:1b:e3:74:3e:b2:23:a9:61:bc:9b:e8:87:
6b:02:61:d2:1b:cc:67:26:0e:4e:50:53:8d:67:e8:
05:8b:9f:e2:9d:ea:d1:c3:89:3f:d1:06:8a:c4:4c:
81:84:2a:9c:fb:b8:1c:07:80:ff:5a:03:01:f7:6e:
ba:21:68:be:a4:7d:bb:ad:5e:9f:1b:1c:6c:f1:27:
44:b6:d5:b8:fc:1b:de:c3:8c:8f:db:d8:36:2c:9f:
2a:7d:2c:67:24:51:73:d2:7f:b4:ae:f7:5e:32:d8:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:32:93:27:6B:A4:5E:E8:37:50:D0:90:E5:9E:1C:32:D2:B9:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cjgykydrpF7oN1DQkOWeHDLSubA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:31:7b:e0:db:32:ff:45:24:5e:bf:39:c7:a0:be:8e:ac:0f:
bb:66:cd:88:01:1f:d1:97:ac:38:91:ae:2b:fb:9b:5b:da:d4:
33:01:83:c2:dc:e6:81:db:d4:c6:3f:df:2e:f1:5d:cd:ad:82:
e3:c6:c2:a6:1e:3e:dc:6a:3b:a9:84:7e:f1:e0:5f:0a:26:43:
4a:01:45:11:0e:b9:c7:ff:54:24:36:b4:59:b5:96:ba:c3:cd:
4d:18:5d:b5:23:03:19:db:b6:ab:e6:2e:55:25:e2:1f:68:e8:
70:3f:88:9c:38:e9:3f:b7:0b:f1:1c:15:20:86:bb:94:7f:1a:
22:82:9d:70:82:b4:7b:94:f6:f1:25:2c:0b:48:d0:43:53:8f:
1e:e6:22:b3:85:8c:94:77:51:f8:3e:f1:e4:b7:16:43:cb:df:
31:a7:60:30:fd:de:7c:a1:95:2c:b8:63:66:27:18:ec:46:8b:
46:56:9b:23:ce:43:1a:80:d5:f0:99:32:71:ec:64:f2:72:d7:
59:94:8d:e8:62:1d:cf:5e:7a:34:74:79:07:12:71:14:69:27:
d4:ef:64:28:f8:26:ad:ca:62:f6:90:de:c3:2b:a6:12:05:d7:
9b:e2:d8:88:69:40:1f:86:aa:50:26:bc:dd:90:27:f4:ab:a0:
bb:3d:23:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:28 2025 by rpki-client