Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/culuz5RGtaI07sC1K6pU68-fBC4.roa
File: culuz5RGtaI07sC1K6pU68-fBC4.roa (raw, json)
Hash identifier: rtpSKMRQTPcSjZUCQ8cBQ338EtGTisL0bUhjfp94UWM=
Subject key identifier: 72:E9:6E:CF:94:46:B5:A2:34:EE:C0:B5:2B:AA:54:EB:CF:9F:04:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827D96E482E34F9723E9427E879C5B3604
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/culuz5RGtaI07sC1K6pU68-fBC4.roa
Signing time: Mon 08 Aug 2022 13:13:37 +0000
ROA not before: Mon 08 Aug 2022 13:13:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:96:e4:82:e3:4f:97:23:e9:42:7e:87:9c:5b:36:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 13:13:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72e96ecf9446b5a234eec0b52baa54ebcf9f042e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:0d:be:4f:21:b2:ad:67:c2:dd:b1:90:31:
e7:13:58:5f:b3:9a:55:71:47:7b:68:ae:7c:91:f4:
41:4e:51:6b:29:23:05:2d:05:c9:b6:e3:40:b6:12:
76:ca:44:3e:66:6d:b1:93:b5:2a:e6:3d:a4:50:24:
d9:16:6b:38:eb:d0:4a:d4:d2:be:81:bc:3c:a9:b5:
bc:cf:55:78:52:e0:1b:be:b6:be:2e:64:d5:53:28:
5b:5c:ce:bc:4c:d0:a1:a0:9e:ec:93:eb:d6:f9:d8:
b3:14:76:0e:1f:27:35:68:2a:fc:8c:ec:d7:de:03:
99:89:e9:b3:55:46:90:dc:03:eb:38:f1:4d:0e:a8:
ba:8d:48:f9:1e:9b:4d:ee:14:e5:6c:c2:4f:f5:0c:
20:91:54:37:31:af:7e:a6:24:db:2a:ae:40:1b:5c:
d1:6e:24:ef:c1:9c:47:b1:da:d6:09:d2:99:38:4b:
85:19:f8:5c:70:96:9b:20:e1:3a:a4:da:b4:47:a4:
55:db:2d:a3:6d:0a:49:ed:1c:3a:16:6e:a7:d1:88:
b6:09:f7:9e:6f:62:14:4f:46:22:0a:6f:4c:1f:0b:
d1:bc:70:14:19:66:c0:27:81:89:f4:d9:d8:b1:3f:
22:5d:bb:1b:e0:87:30:15:c6:f7:e8:f1:cf:45:52:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E9:6E:CF:94:46:B5:A2:34:EE:C0:B5:2B:AA:54:EB:CF:9F:04:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/culuz5RGtaI07sC1K6pU68-fBC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:97:a7:ea:66:06:08:5f:e2:36:a4:d8:e5:a8:43:94:3a:0c:
b4:5c:28:e9:82:b3:22:91:27:5e:0e:b2:d4:a8:a1:dc:3b:5c:
52:3b:97:87:ec:5e:7e:3b:b7:ba:f1:62:71:8b:c3:72:f9:f9:
57:5e:af:8a:c7:7e:71:79:d8:8f:d6:ca:cc:84:66:18:67:d2:
81:c2:3d:a5:c1:3b:41:de:c7:7a:d2:eb:63:25:2f:8a:6a:ea:
4a:3f:ee:da:b9:e0:ef:9b:19:be:64:ee:4b:20:34:7e:d1:dd:
be:b3:99:03:45:53:12:77:a8:a7:c3:65:7a:a3:2f:34:f2:ec:
bf:17:64:d5:f1:ff:4c:a1:cc:4d:52:6d:50:55:6c:92:8e:da:
79:83:97:ea:58:3b:41:7c:af:38:3b:12:17:0b:2b:f9:0d:a3:
25:6b:e9:73:87:95:a5:38:68:ec:e3:9e:02:e7:cf:fd:95:65:
6e:d3:1d:8b:82:d7:14:38:ac:c4:93:d2:70:8b:8d:7f:7c:38:
5f:35:30:2b:58:35:c9:12:c7:8c:d7:07:6a:ec:27:a9:b7:7c:
ed:1f:c5:18:05:45:c2:49:fb:69:6b:0b:62:ce:8f:e7:f2:79:
a7:d4:1f:33:fb:ee:39:0e:4f:24:b6:1a:2e:0b:30:c9:db:8c:
a7:56:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:29:44 2025 by rpki-client