Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cnNmwnJuRbEhkqSR3HK5nOl-9j4.roa
File: cnNmwnJuRbEhkqSR3HK5nOl-9j4.roa (raw, json)
Hash identifier: tvXxX8C3/2hP9hz9cZQA1yu1eQ5gm8H1ZOLvTN/lmqE=
Subject key identifier: 72:73:66:C2:72:6E:45:B1:21:92:A4:91:DC:72:B9:9C:E9:7E:F6:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2B8FCF1D6A30F9AEBA47F6192F6BCBF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cnNmwnJuRbEhkqSR3HK5nOl-9j4.roa
Signing time: Fri 25 Aug 2023 07:19:19 +0000
ROA not before: Fri 25 Aug 2023 07:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:8f:cf:1d:6a:30:f9:ae:ba:47:f6:19:2f:6b:cb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 07:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=727366c2726e45b12192a491dc72b99ce97ef63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:d5:5e:da:90:dd:0a:41:de:8d:96:27:c7:
4e:6a:7e:ad:ff:ef:a5:e3:a2:4f:b8:57:2c:72:e4:
ed:44:24:52:00:6e:fa:a6:a3:0d:69:f8:5c:10:a9:
44:59:05:b6:f5:6c:44:e2:87:b4:09:46:55:71:7a:
48:77:e9:3e:14:75:d6:b7:e6:fa:ab:50:07:60:10:
df:5e:ec:2f:6e:fd:c5:7c:c6:c3:1a:c5:d2:f8:c6:
f6:60:7e:b0:6d:c9:b7:1a:94:e2:72:ff:a6:4a:0b:
1d:85:4d:a8:ba:09:bc:27:8e:8d:57:11:89:d2:9b:
9d:91:70:ff:1b:0d:3e:cb:97:67:64:a1:e0:26:02:
1f:c7:cf:43:cf:d6:82:68:69:14:f2:aa:1f:28:f1:
07:98:08:e8:0e:10:df:c4:8c:46:6f:53:4d:e2:cf:
ce:90:db:40:b5:ae:56:cf:4d:a8:2c:d7:72:b4:96:
14:bf:61:87:36:63:74:bb:f5:9c:5e:a5:77:b3:25:
43:e6:48:0f:af:8e:4b:b4:0e:de:bd:71:12:4c:6a:
ec:99:85:ce:62:98:2f:17:51:8f:09:bf:eb:cb:d0:
03:5e:b5:a7:2f:7c:c7:c0:56:9d:bd:8e:4d:5b:f3:
3c:4d:52:95:d7:d9:c0:e7:80:8e:f7:7d:30:3f:2e:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:73:66:C2:72:6E:45:B1:21:92:A4:91:DC:72:B9:9C:E9:7E:F6:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cnNmwnJuRbEhkqSR3HK5nOl-9j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:ea:4c:99:14:7d:1f:9d:be:52:92:52:e9:c6:5d:10:57:38:
0d:79:c8:bd:2b:7b:46:97:18:dc:ac:53:c8:25:da:24:ee:99:
9d:7d:a6:87:61:a0:c5:8e:0e:72:32:f0:ec:8a:d7:19:c7:8d:
a0:be:d7:8f:0b:f8:fd:2e:d6:1e:36:00:42:d8:bf:0a:21:01:
7d:c2:e4:9e:1c:e8:c3:7e:79:c5:a7:60:3d:67:19:3d:bf:a2:
e3:0f:50:2f:4d:6e:ac:63:ed:0e:95:84:71:e4:db:4b:56:a7:
71:91:ef:90:82:bc:fb:e4:7d:d0:96:48:d9:e8:b4:70:82:83:
2a:bc:52:f3:f3:ff:e7:6f:5c:07:81:85:bc:0c:aa:a2:4a:c5:
81:0a:73:cf:17:fb:f5:4f:dd:c6:c3:c8:66:44:6e:84:f5:a1:
32:84:8e:dc:15:b7:83:a7:5c:94:6a:5e:50:02:0f:3b:b1:1f:
2c:9f:d0:bb:26:a0:13:67:6e:76:a6:c6:7b:09:1f:72:0b:69:
75:f9:7c:9c:c7:5d:9a:e7:a6:8b:db:a5:94:7d:1a:c7:b1:f0:
85:15:ee:80:6e:9f:8e:d9:4a:9c:c1:9e:53:0f:5e:63:e1:5d:
a2:ae:91:03:f7:38:86:0f:53:8c:9c:7b:bc:1e:05:f7:ee:e3:
5a:a4:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:21:50 2025 by rpki-client