Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cnVyNhDEeZLWP1tpxcSiCk3MwRg.roa
File: cnVyNhDEeZLWP1tpxcSiCk3MwRg.roa (raw, json)
Hash identifier: gfvjXr0Z5Xttb/3vP29UonxKhOPLWIpIpfOvj4cGnmc=
Subject key identifier: 72:75:72:36:10:C4:79:92:D6:3F:5B:69:C5:C4:A2:0A:4D:CC:C1:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B2BB26346168AD3782AE251C9DF0B5E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cnVyNhDEeZLWP1tpxcSiCk3MwRg.roa
Signing time: Tue 01 Aug 2023 20:12:36 +0000
ROA not before: Tue 01 Aug 2023 20:12:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b2:bb:26:34:61:68:ad:37:82:ae:25:1c:9d:f0:b5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 20:12:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7275723610c47992d63f5b69c5c4a20a4dccc118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:6e:38:b4:89:ef:df:5c:6e:f9:aa:e3:a2:
0e:0f:9b:12:32:9b:0b:12:14:68:03:df:99:56:53:
46:49:e6:b3:b8:20:5e:0f:29:5a:0f:55:62:55:0d:
2a:72:38:22:bd:b4:3b:3c:54:d2:10:e1:82:06:a8:
47:1a:67:1c:43:63:fb:1e:83:99:4f:ea:1d:b8:e7:
5a:a1:37:54:d2:9e:34:67:b4:ec:78:2a:be:11:ae:
fc:a3:58:26:0d:8b:c6:54:41:bd:1e:bc:b3:2a:e0:
66:f4:2b:9e:bb:f7:e5:cd:d0:ab:bf:b5:72:18:7e:
7d:52:81:09:07:fb:ea:4f:51:d6:b8:0a:4f:ad:35:
e2:3c:6d:6c:4c:dd:c3:8d:52:be:f9:df:c1:fc:38:
f1:80:b8:a4:27:98:c5:17:4f:a8:3c:c5:3e:0a:76:
99:07:25:8f:0d:b1:34:26:30:72:23:85:f4:96:4b:
cd:8c:6d:e1:fe:ed:87:66:ce:01:cd:1a:96:8e:78:
da:bc:0b:e8:df:b9:26:45:fb:11:26:57:c5:b3:30:
90:e3:02:09:0c:db:7e:62:b6:46:46:0a:0a:27:dc:
a8:8d:79:fb:18:89:a8:21:6b:7d:e8:95:9e:78:fc:
b4:82:d9:d8:5d:97:87:14:ee:c3:54:b9:5c:1f:78:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:75:72:36:10:C4:79:92:D6:3F:5B:69:C5:C4:A2:0A:4D:CC:C1:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cnVyNhDEeZLWP1tpxcSiCk3MwRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:50:ed:ad:ea:d4:3c:fa:09:77:7d:78:72:67:07:ad:a2:73:
8a:86:5f:38:a8:a1:6f:a6:dc:a0:c7:df:c9:0d:b3:c5:cb:ce:
44:47:84:03:c1:7c:09:08:28:98:34:ea:5f:b6:cb:9c:8a:94:
7c:7e:00:96:3a:22:a0:07:08:93:f0:15:6a:4a:65:9e:58:8a:
f3:e2:51:53:84:e0:26:71:68:51:66:fd:f8:e8:f9:18:6c:a0:
5e:a8:bf:ed:a8:b1:6e:12:c0:a9:85:96:a6:e8:3b:06:86:e9:
5e:3c:7f:77:4c:6a:46:73:71:36:50:46:74:66:a3:93:d0:f9:
b5:83:f7:a1:0e:eb:46:c3:9a:89:05:31:ba:fc:56:fc:16:3a:
a2:19:14:57:9c:db:cb:71:38:16:35:27:4c:96:9e:53:0c:42:
2c:de:0c:e6:d0:5e:94:aa:15:3c:6a:45:bf:55:d3:de:4d:97:
20:1f:d0:5f:42:e7:e8:ca:6e:14:cd:a3:98:57:51:bb:a7:35:
03:df:96:c4:ce:79:40:34:20:d4:f7:62:60:98:a2:ae:48:1d:
82:e9:0a:8d:39:f4:87:2b:65:0a:89:95:d5:9e:78:f2:ad:dc:
cd:46:48:69:cd:32:ba:07:ce:38:9f:78:c4:09:60:99:9f:d1:
20:d6:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:33 2025 by rpki-client