Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpfWCLBoeNdSK3Z0mGRFwhxRuAc.roa
File: cpfWCLBoeNdSK3Z0mGRFwhxRuAc.roa (raw, json)
Hash identifier: U3vZUT2WzU7N5JNBMmFQ26ZEdKGICdzPigvAMGiRsqc=
Subject key identifier: 72:97:D6:08:B0:68:78:D7:52:2B:76:74:98:64:45:C2:1C:51:B8:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854DE43FB41806C453D02502EB7EAF4C67
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpfWCLBoeNdSK3Z0mGRFwhxRuAc.roa
Signing time: Mon 26 Dec 2022 10:04:42 +0000
ROA not before: Mon 26 Dec 2022 10:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:4de3:b6f5/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4d:e4:3f:b4:18:06:c4:53:d0:25:02:eb:7e:af:4c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 10:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7297d608b06878d7522b7674986445c21c51b807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:58:46:b2:cc:7e:7d:0f:76:01:6e:5b:49:
54:cc:c7:41:3f:e8:ab:a9:82:56:73:d9:9c:fd:a0:
ae:76:c8:f6:ee:5c:b0:14:05:39:d7:d9:1c:74:c9:
c9:c3:81:6c:a8:a1:28:c5:84:ea:cd:64:f8:20:d2:
16:2a:45:d2:64:c7:70:3e:95:c5:fe:1b:e7:75:24:
d5:fa:70:e6:13:fe:a2:5f:fa:9b:d9:60:37:bd:0b:
b4:3a:70:b0:69:96:ca:71:61:22:81:8c:73:1d:c8:
b4:3e:94:77:61:41:10:3d:75:87:df:ea:2c:1d:8a:
67:fa:45:de:db:24:22:6c:23:b1:49:32:c4:81:97:
9d:b3:0f:77:59:8a:54:cf:16:85:6d:83:32:25:4b:
cf:24:27:ed:4f:20:c6:ca:be:19:bb:c3:9e:a6:2c:
35:09:98:b6:18:27:e9:71:82:f0:4d:4e:2f:a2:82:
be:1b:87:ab:42:12:7b:f3:ac:e7:11:f0:b4:86:13:
60:86:d8:2f:56:4a:27:16:f8:19:b8:d8:96:ba:d6:
97:28:ad:91:33:c4:77:cd:26:53:92:5a:41:12:47:
b8:5f:03:21:f5:17:31:3c:2d:9e:10:52:84:04:eb:
81:16:0f:41:5f:d5:3b:a4:0f:10:fe:22:ce:35:e1:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:97:D6:08:B0:68:78:D7:52:2B:76:74:98:64:45:C2:1C:51:B8:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpfWCLBoeNdSK3Z0mGRFwhxRuAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:96:cc:5c:f1:fc:ca:63:75:b9:a0:0a:be:3d:b0:de:20:81:
7e:7e:c9:2e:f6:a4:65:01:f1:b6:d4:93:47:95:da:6f:a6:a0:
36:37:fc:ad:a1:3c:1c:13:6f:13:61:7b:88:cb:67:e9:d2:1a:
54:1e:6e:92:1c:07:48:9f:b0:ab:7d:f0:c2:3c:17:0e:df:79:
66:b4:68:c7:2c:39:3e:46:9c:86:34:61:01:74:77:5f:e8:54:
7c:b1:4c:d5:cb:8d:30:5e:84:8e:de:3e:5d:7b:6f:a7:91:b4:
7d:72:f9:1e:c6:7d:ae:60:74:60:4e:ad:60:c8:18:36:3d:e5:
ca:6f:0c:93:fc:8f:b1:fb:dd:46:bb:80:ad:9e:8a:f2:7a:99:
59:37:52:51:e4:68:85:85:5f:77:c5:86:50:5c:db:6c:db:ca:
c9:de:0e:38:00:fd:8c:9d:9e:23:65:ea:69:56:78:6b:59:49:
98:56:f8:2b:03:1b:86:64:b1:cd:b8:91:37:4e:88:99:04:ec:
15:c8:1e:fd:a9:99:30:f4:ad:90:78:1f:d2:44:f8:c9:59:98:
bc:25:f2:a8:41:fd:6b:b0:39:c8:1b:83:11:8f:bd:c3:c2:df:
70:e7:04:92:08:af:d3:9e:7d:8f:03:e7:6e:96:bd:5d:18:8c:
2b:20:3c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:41:58 2025 by rpki-client