Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cqCJk5pcR--4WD0C39n-kdPSMUM.roa
File: cqCJk5pcR--4WD0C39n-kdPSMUM.roa (raw, json)
Hash identifier: YTL5yqCfzshJbzAme9oukmvxSsi/efijx/tLmaexyPU=
Subject key identifier: 72:A0:89:93:9A:5C:47:EF:B8:58:3D:02:DF:D9:FE:91:D3:D2:31:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A18039DECB7158DA1EA0EC55574D33391
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cqCJk5pcR--4WD0C39n-kdPSMUM.roa
Signing time: Mon 21 Aug 2023 12:13:24 +0000
ROA not before: Mon 21 Aug 2023 12:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:03:9d:ec:b7:15:8d:a1:ea:0e:c5:55:74:d3:33:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 12:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72a089939a5c47efb8583d02dfd9fe91d3d23143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:19:29:0c:b2:8c:d9:87:d6:8c:97:37:e4:
fd:c7:d1:cb:34:6e:c9:36:bc:22:bb:6a:c1:ba:47:
a4:9b:03:b6:a9:27:b9:1e:1d:59:3d:da:98:f6:a9:
33:78:17:82:19:ff:df:89:db:0a:7e:f7:33:4c:7d:
0c:d6:d1:f2:5d:44:50:af:d9:10:46:02:7d:1d:bf:
8f:85:47:aa:66:86:55:91:4e:4b:b0:0c:c5:ed:bd:
7a:c7:08:be:5d:d2:5c:f3:4c:8a:07:77:28:cf:59:
46:df:88:9f:f9:40:88:09:6c:55:09:95:79:af:3c:
d4:63:68:ad:87:ec:0c:f0:f9:a1:1d:d6:85:6b:2d:
5c:00:4d:ea:c0:0d:5b:76:30:a5:f3:bd:16:85:5d:
c0:b7:26:e5:e1:eb:c8:1a:40:46:46:16:80:ac:3e:
22:d1:b6:0d:14:ba:f8:50:98:a6:4a:b6:e0:be:b7:
92:bf:23:6d:17:93:e2:a5:45:76:c0:40:df:46:29:
d0:c2:a7:47:27:ba:a9:84:5f:2f:3d:c6:55:3f:e7:
ec:20:8b:3a:ea:ba:eb:dc:5b:95:29:ed:f7:e6:13:
b1:bf:54:97:af:b1:15:66:fb:3e:cc:d9:86:e3:8a:
a2:0b:91:47:12:c2:85:98:bc:90:a9:e7:ec:df:e4:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A0:89:93:9A:5C:47:EF:B8:58:3D:02:DF:D9:FE:91:D3:D2:31:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cqCJk5pcR--4WD0C39n-kdPSMUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:3d:db:b3:11:b7:c2:02:06:02:44:59:d0:a1:f7:f9:99:07:
8b:81:9d:1d:85:47:de:bc:1f:53:c3:cb:c9:ed:d5:9a:d2:00:
92:5e:33:6c:a5:a0:06:9e:b5:87:24:fa:d1:9f:dc:5f:fb:2a:
23:2c:64:f3:e4:03:db:e7:fe:6f:b9:3d:b7:53:0c:55:90:84:
af:2d:19:a9:df:ce:64:1d:4e:cd:2e:c2:7f:e7:7e:d1:d9:af:
aa:5c:e0:84:89:ef:87:28:96:26:3e:20:f8:1e:18:60:5c:3b:
57:8f:09:78:22:a6:93:f2:9e:47:c4:6e:4d:35:ac:61:1d:d9:
f3:54:1e:32:49:14:2a:c1:d4:01:be:ef:c9:e0:ff:54:cc:11:
58:b0:6f:e3:02:18:15:d3:a9:36:6f:e2:66:1f:74:9f:ec:2a:
ad:4c:a6:c7:3d:c2:b2:a2:bd:65:0a:22:91:d3:9c:f3:78:d5:
65:f9:f2:a1:3d:29:67:69:a5:c1:c7:0d:d4:16:12:36:1a:d2:
5d:47:2b:40:59:ec:bd:42:b0:a5:3e:64:9a:9d:15:89:3e:3d:
2e:09:bd:ca:b1:ce:23:4b:82:65:26:b6:37:3b:0d:c0:c4:9e:
6c:dc:7b:c2:20:ec:4a:e0:2c:81:b6:49:6c:0d:b5:34:fa:f5:
21:68:89:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:45 2025 by rpki-client