Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpRNVsHTKpInv9zkitjUzuYA0jw.roa
File: cpRNVsHTKpInv9zkitjUzuYA0jw.roa (raw, json)
Hash identifier: OBtj9cpspUj0/mhbWW13Qrp7wrcZtoZAvRegU8wVDqY=
Subject key identifier: 72:94:4D:56:C1:D3:2A:92:27:BF:DC:E4:8A:D8:D4:CE:E6:00:D2:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184350EE08EB07C232891EA8AFA36034FFC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpRNVsHTKpInv9zkitjUzuYA0jw.roa
Signing time: Tue 01 Nov 2022 21:17:58 +0000
ROA not before: Tue 01 Nov 2022 21:17:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:35:0e:e0:8e:b0:7c:23:28:91:ea:8a:fa:36:03:4f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 1 21:17:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72944d56c1d32a9227bfdce48ad8d4cee600d23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:76:d3:28:fb:c5:10:10:f0:be:29:99:c7:
95:80:a7:46:7d:27:10:f6:f0:ae:cd:76:5f:ae:48:
f8:6c:1f:ac:f8:ad:31:5d:e0:42:9c:81:3c:ff:24:
bc:3d:4d:ab:0c:bb:58:77:50:bc:b1:81:8d:e0:45:
c8:9f:cd:2e:8d:53:cd:b2:4f:de:78:46:85:fd:8d:
99:e7:21:53:19:aa:13:6d:01:ca:0a:3b:f4:05:c3:
9c:bf:96:ec:30:57:de:82:5a:14:0e:47:f8:05:8a:
7d:64:fc:36:fe:bf:13:9b:51:00:65:16:cd:85:64:
9d:b8:5d:54:1f:8e:b2:98:af:b2:24:ec:1d:6a:9c:
57:ae:a9:d8:da:09:c3:ed:e9:03:19:01:98:0f:32:
be:a1:df:f5:a3:42:65:d2:1c:d0:de:1b:58:3c:11:
60:62:3b:2d:66:b5:3e:e3:bc:72:8b:bb:69:b7:70:
c4:6b:cd:12:c6:30:c2:e7:16:7d:8f:1f:7a:d6:b6:
51:12:d2:1d:9e:2e:9c:40:da:a6:87:69:16:1d:ee:
d9:63:36:bb:2a:29:ea:a6:7e:70:3f:8a:e5:08:49:
4e:4e:5a:3f:ea:50:2a:cd:0d:b6:1d:dd:22:3d:1b:
0f:7b:a3:38:5e:3f:65:67:cf:e0:a4:3a:2a:9c:f0:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:94:4D:56:C1:D3:2A:92:27:BF:DC:E4:8A:D8:D4:CE:E6:00:D2:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpRNVsHTKpInv9zkitjUzuYA0jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:5a:23:2b:d1:bd:21:62:13:22:43:6f:00:f8:dc:19:fd:fe:
51:ad:45:5b:2c:51:b8:ac:00:b9:a6:f8:e9:c6:4c:91:ff:34:
8d:a6:21:ec:ec:88:09:93:75:83:17:5f:06:3c:3c:48:74:ff:
3b:b7:1e:97:62:36:40:e3:5f:e4:75:76:d5:91:fa:3e:4a:51:
cb:af:eb:b3:5f:a7:d3:08:2c:dc:76:4d:e5:5e:11:91:92:3e:
56:e3:1a:a1:ac:cb:4f:49:c8:59:5b:7b:5b:84:59:ab:39:70:
63:75:82:0b:f0:9a:13:56:f0:58:fa:88:23:c5:80:3a:cb:fd:
73:ee:0f:c3:34:fb:70:49:04:d7:bb:1c:86:59:c4:92:37:e2:
1a:ce:4c:d4:a2:ce:5e:af:23:fd:25:49:59:b6:c9:d2:ab:f9:
fb:01:d1:9e:85:39:ec:13:59:03:dc:b0:24:ec:f3:ed:ef:e0:
f7:42:46:19:02:e1:12:67:cc:a0:90:86:0f:79:1e:32:94:61:
59:cc:4d:26:c7:cb:11:ec:3d:5b:03:70:ec:b3:43:9e:d1:1e:
e7:f5:a8:bd:e1:a3:72:9e:54:0c:ae:c4:7b:55:d0:45:65:34:
cd:38:05:ca:3d:e9:fa:c0:e4:4b:63:fc:4b:30:87:fd:04:f6:
13:d0:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:36:41 2025 by rpki-client