Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpQ2DE7gkpz127EbnqB1M82OPgQ.roa
File: cpQ2DE7gkpz127EbnqB1M82OPgQ.roa (raw, json)
Hash identifier: 8jF7vyZunZgxoAlnAP7V3MBqiCvQwx5eR32VRdNunWg=
Subject key identifier: 72:94:36:0C:4E:E0:92:9C:F5:DB:B1:1B:9E:A0:75:33:CD:8E:3E:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899822385B88EA1ECD693509BF7675EE1D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpQ2DE7gkpz127EbnqB1M82OPgQ.roa
Signing time: Thu 27 Jul 2023 16:15:26 +0000
ROA not before: Thu 27 Jul 2023 16:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:22:38:5b:88:ea:1e:cd:69:35:09:bf:76:75:ee:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 16:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7294360c4ee0929cf5dbb11b9ea07533cd8e3e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:4a:eb:6a:f7:26:60:ca:ca:b6:f2:a5:94:
e3:8c:7f:21:35:7e:f3:4d:36:ec:f0:9b:52:31:95:
eb:6a:3f:c4:e7:95:af:64:a7:6f:89:99:04:9e:33:
f9:c3:a6:8a:42:f6:5d:ef:08:25:ad:dc:7a:c7:d2:
b9:47:a8:9f:7d:28:32:63:d0:c6:9e:b9:57:56:ef:
c3:bf:82:dd:f8:d5:01:1b:b4:dc:5c:a5:a4:26:67:
47:93:db:2d:7d:1e:d2:59:0b:86:e7:ae:18:9c:56:
5e:2d:5d:3b:92:59:5a:0b:4e:04:8c:d9:22:0b:44:
37:cb:81:56:b0:2b:6e:c4:1d:42:29:70:89:40:d1:
d7:d1:11:b1:81:cd:d0:d3:95:73:e6:ea:18:f7:60:
68:72:6b:62:e7:26:61:8b:61:ec:1b:5e:82:0b:32:
8a:53:03:0b:5e:14:96:d5:10:38:40:2f:a2:c3:17:
57:16:9a:1c:31:dc:63:23:ad:5d:f2:70:9b:2f:a6:
53:bd:45:7e:0f:4c:99:6b:b5:03:4a:fe:e5:a7:53:
68:be:de:a5:23:23:4e:72:8a:b0:b8:fc:38:c1:8d:
09:46:67:68:86:77:ee:72:5d:d8:8c:c4:96:1b:f0:
18:93:6f:cd:86:38:e4:bd:b8:47:29:82:b9:f4:18:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:94:36:0C:4E:E0:92:9C:F5:DB:B1:1B:9E:A0:75:33:CD:8E:3E:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpQ2DE7gkpz127EbnqB1M82OPgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:86:0b:7c:0b:dd:0b:16:73:fa:c7:3f:62:cc:0d:1d:14:7d:
4a:ab:d0:1a:86:cc:36:c2:f5:52:ad:3e:af:1c:e9:4f:84:80:
5e:7b:ed:5c:e5:91:a3:55:c5:15:90:d5:2d:d3:93:9a:49:4d:
be:3e:1e:9f:88:c5:aa:25:29:c9:f0:59:22:f2:07:1d:e3:a7:
85:53:31:8e:09:b4:7d:cf:6c:88:dd:f3:90:34:2a:36:e5:57:
1b:2e:b5:ef:c0:51:8f:4e:91:0a:d5:3d:9d:f8:51:6f:eb:18:
2c:65:83:25:5d:d7:18:ea:db:d2:13:76:18:1a:1b:6d:0e:ff:
f7:f4:4a:dd:e3:87:b5:db:a8:cf:9d:92:83:1e:fc:14:ba:75:
50:6a:9c:f2:9e:e8:f3:37:86:ab:07:63:8c:27:07:92:84:3d:
8f:a9:7a:de:5e:f1:4c:4a:60:4c:80:fc:22:71:b9:ce:e0:6c:
1b:cf:35:84:92:97:e5:b4:81:db:2a:0a:cc:8d:60:b9:15:64:
71:59:81:7d:d0:77:42:a0:08:96:2d:46:60:b0:3f:3b:c7:60:
66:a0:93:5b:50:03:45:0f:c0:dd:bb:d7:b1:c6:b3:22:8e:47:
46:bb:a2:87:f6:f8:67:fc:4e:f7:5f:3f:c5:e7:ef:53:7e:46:
9f:94:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:12:26 2025 by rpki-client