Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cneCuKmA5m1OsYW33CIWK1AlWi0.roa
File: cneCuKmA5m1OsYW33CIWK1AlWi0.roa (raw, json)
Hash identifier: 6CdWE/0q/gcsY6zcGEkcbXVGoPBeFeg6UtzfSz9+dGs=
Subject key identifier: 72:77:82:B8:A9:80:E6:6D:4E:B1:85:B7:DC:22:16:2B:50:25:5A:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E6422944C4F1870D6D8F76C42F0C5C29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cneCuKmA5m1OsYW33CIWK1AlWi0.roa
Signing time: Wed 25 Jan 2023 00:09:33 +0000
ROA not before: Wed 25 Jan 2023 00:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e6:42:29:44:c4:f1:87:0d:6d:8f:76:c4:2f:0c:5c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 25 00:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=727782b8a980e66d4eb185b7dc22162b50255a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:3a:ae:0e:3e:5d:61:1b:49:7c:12:3e:8d:
a7:2c:4a:69:11:0b:cd:25:eb:e5:ef:5c:9c:b3:70:
a6:f7:ab:53:e4:11:6c:2d:15:20:02:78:54:e6:c6:
83:8c:73:b7:f0:54:b0:eb:b1:c6:19:e4:fa:95:6d:
38:82:be:b1:c7:c5:1f:8c:e4:19:6e:1f:c9:63:8a:
74:21:e9:d8:6c:c3:e3:cd:85:d5:0a:bf:c2:b1:5c:
54:73:d5:47:26:8b:ea:3c:28:a5:6a:f7:17:dc:91:
b1:e6:79:0c:3a:30:8c:ae:19:9f:7d:16:44:3b:06:
66:9e:aa:25:52:b5:23:22:4b:1e:b0:cd:8e:09:c8:
ae:ce:c1:45:a4:44:89:01:19:cb:ef:de:6d:ed:a9:
b8:35:65:7f:41:9e:85:9c:68:6b:c6:98:83:40:4d:
9e:5f:25:11:14:01:59:23:0d:e8:0f:3c:04:dd:d4:
15:c8:a3:74:81:c2:a4:e5:20:3e:89:bf:2e:ce:e8:
b1:0f:df:36:9e:b3:40:3d:44:5b:de:06:bf:b7:44:
c8:8a:4d:4b:da:d0:ad:2d:86:af:04:df:06:64:a6:
7d:9c:5a:6f:39:72:74:7c:52:d8:5f:6c:cb:9b:67:
50:a1:dd:a2:b1:35:e6:6a:ce:d0:55:48:3e:ad:0c:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:77:82:B8:A9:80:E6:6D:4E:B1:85:B7:DC:22:16:2B:50:25:5A:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cneCuKmA5m1OsYW33CIWK1AlWi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:1f:27:3c:78:b4:77:60:c5:48:48:cf:d9:9c:0a:b9:c6:8a:
ec:39:9a:14:69:9a:75:f2:f0:73:57:46:d2:e1:94:73:de:93:
a7:48:75:95:8a:b4:34:a6:4f:60:50:b5:6a:b4:3d:65:f1:a0:
a6:32:5a:22:96:aa:17:5e:cb:e2:93:0b:83:18:de:da:db:7c:
49:60:ba:7d:8b:f7:fe:7b:fd:4b:d5:a5:89:1b:ae:53:d8:32:
a0:ac:5d:1d:c2:2b:55:2f:3b:b4:34:7a:6c:b6:84:4f:6d:b1:
39:24:31:1e:1e:a2:b6:86:10:d5:29:29:7b:df:bb:a0:2c:24:
d2:a2:b2:0d:fe:0e:b6:e5:89:7b:8b:9f:8e:8c:bf:01:55:c9:
58:59:09:97:53:4e:d9:40:6e:76:b3:16:99:52:23:b0:e1:39:
fc:f4:36:96:a0:1d:77:3a:d1:73:eb:c8:e7:11:55:80:37:30:
6f:fd:34:45:e9:91:63:f9:86:fe:6f:81:70:85:b0:bc:1a:31:
71:0c:53:b2:4e:a8:15:36:78:88:26:b8:f0:b9:83:6e:85:3c:
0b:e1:18:2e:d3:8f:ef:fd:3d:fd:6b:ca:5e:81:f2:7a:89:d4:
25:87:f6:65:88:51:cc:24:9d:e9:cd:29:b7:10:36:b9:e4:9b:
00:17:10:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:28 2025 by rpki-client