Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cvhPdAfxXF7zBhMIFgSUwy3lKsA.roa
File: cvhPdAfxXF7zBhMIFgSUwy3lKsA.roa (raw, json)
Hash identifier: yYw9xmUh7ymZa4QHSucYLyNseRrUk9oUmhmnqw8TdAA=
Subject key identifier: 72:F8:4F:74:07:F1:5C:5E:F3:06:13:08:16:04:94:C3:2D:E5:2A:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B661B146F40B3B5B2B137A93F89AF49B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cvhPdAfxXF7zBhMIFgSUwy3lKsA.roa
Signing time: Mon 06 Mar 2023 10:05:00 +0000
ROA not before: Mon 06 Mar 2023 10:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:b661:1824/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:61:b1:46:f4:0b:3b:5b:2b:13:7a:93:f8:9a:f4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 10:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72f84f7407f15c5ef3061308160494c32de52ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:63:9a:94:84:ec:5a:95:b8:b7:db:37:0b:
f5:b4:ae:aa:68:a9:dc:61:d0:af:77:f8:b1:ab:2d:
49:fe:9a:7a:ae:ba:1c:eb:07:fa:39:96:ab:b3:31:
f1:f1:5d:c0:21:23:b6:08:9f:d3:a3:8c:ce:d6:1e:
07:54:73:12:72:99:e2:bf:9a:49:98:27:b8:bd:43:
46:f4:64:e5:7c:79:3f:b5:2f:ba:30:4c:a2:1c:77:
e3:68:b0:29:2a:54:fe:c2:46:fd:c9:50:db:f6:83:
fd:0b:c3:06:fd:cf:2c:aa:34:4c:0b:45:a6:a1:32:
c4:4b:7d:40:ab:b3:94:6c:b5:c1:a2:36:21:ed:ab:
ab:1a:be:76:2c:cc:83:e3:14:49:55:82:e5:05:5d:
30:17:4d:3a:e7:97:21:04:6a:9d:b7:53:41:9f:bf:
79:1a:0d:7b:8e:5d:a7:d7:be:62:c4:0e:6a:81:3e:
57:23:17:89:62:71:cf:3e:d8:57:74:78:f6:9b:b1:
66:12:17:39:fc:e2:42:78:36:a4:d5:39:cf:4b:f2:
1a:70:60:63:81:2b:c9:47:b1:1e:43:84:f9:d3:ad:
93:45:ac:ee:84:63:26:2a:1e:59:7a:03:b4:b3:0b:
c2:17:cd:71:47:bf:40:b6:68:bf:b1:f0:4e:d9:e3:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F8:4F:74:07:F1:5C:5E:F3:06:13:08:16:04:94:C3:2D:E5:2A:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cvhPdAfxXF7zBhMIFgSUwy3lKsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:f4:00:3c:f6:c4:0a:b2:6b:1e:4e:b8:cd:18:d1:03:70:eb:
ec:62:63:4b:ef:a5:ab:51:bc:dc:51:da:0f:22:2e:04:59:4b:
c8:ff:98:05:76:b6:4c:e0:6c:46:c8:f0:c8:6a:34:7c:26:67:
fa:ff:08:a0:ea:f8:be:c4:72:ec:be:c7:a2:34:a5:4c:79:f9:
88:ad:e9:e3:4e:f4:06:36:ce:f3:c5:ee:35:5f:4f:56:6e:0d:
e2:6e:85:51:18:85:ae:c5:82:53:ba:9e:ce:65:51:28:42:74:
84:d6:74:0b:4f:54:e0:46:8d:e3:f7:18:1b:7b:7d:67:31:0b:
47:8c:10:d4:0c:bb:a7:b1:fc:be:e1:c5:18:cf:94:2d:a7:65:
66:d3:9a:63:57:01:7a:da:92:7d:52:2e:81:27:34:54:a7:ff:
8a:1d:15:c3:b7:91:53:dc:42:5b:05:e6:5d:af:b1:f2:5f:3f:
3c:1b:50:2e:be:fc:1f:9b:d1:bb:36:92:58:9e:f3:7d:94:dd:
a4:8c:89:a8:cf:10:21:b9:0b:bd:fe:36:a9:48:43:ad:09:5b:
ec:69:46:57:90:7d:72:ac:d0:c8:db:34:da:02:58:ce:03:81:
13:eb:a2:d3:95:52:c1:85:92:ca:17:cd:33:11:e2:c8:72:d0:
24:49:cb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:13:02 2025 by rpki-client