Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cwR6tmObVkme8Y4PwzL5SHiqmrk.roa
File: cwR6tmObVkme8Y4PwzL5SHiqmrk.roa (raw, json)
Hash identifier: LTPkPzF4odH6jrFsf9RJsvsti8cGjB5AvU7rvM/+4dg=
Subject key identifier: 73:04:7A:B6:63:9B:56:49:9E:F1:8E:0F:C3:32:F9:48:78:AA:9A:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018994B266084F28835854CFE31208F56457
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cwR6tmObVkme8Y4PwzL5SHiqmrk.roa
Signing time: Thu 27 Jul 2023 00:14:26 +0000
ROA not before: Thu 27 Jul 2023 00:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:b2:66:08:4f:28:83:58:54:cf:e3:12:08:f5:64:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 00:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73047ab6639b56499ef18e0fc332f94878aa9ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:ef:8c:02:af:7f:c5:48:73:3c:89:9e:30:
5f:39:48:ee:ed:c8:63:da:ae:b8:7f:88:b1:5c:a1:
66:eb:83:01:eb:4c:6e:50:ba:1a:53:8c:ec:01:00:
f5:6c:4f:69:b6:8e:9a:fd:53:8d:3f:6b:f1:f7:46:
a3:de:61:0b:ac:97:21:d6:be:18:da:20:ec:09:bc:
31:b1:1b:d2:a5:91:ba:e2:5c:2c:ae:12:f0:4f:77:
ea:53:64:bf:e1:cf:f1:8b:b1:b9:8b:1d:67:b1:c1:
72:e7:4b:f0:73:1c:0c:de:5c:f4:00:22:34:18:90:
a1:8c:5a:28:5e:19:8b:90:cc:4f:de:d2:df:89:2b:
b2:67:1a:2b:a7:19:a2:09:bc:a0:57:19:f9:a8:a0:
bb:66:8d:82:94:40:c2:5b:0c:e3:f3:a8:b4:cc:1b:
03:9b:0b:76:ba:dd:0a:30:45:14:fa:4e:ea:f0:24:
c9:55:89:25:f0:e3:d0:92:21:45:9f:b5:2a:0b:b1:
27:1c:e0:ff:c6:fa:51:e8:13:f7:bf:c2:6a:d9:c0:
b3:62:cf:b9:16:be:96:58:88:67:50:48:28:bd:2e:
09:89:d1:e4:2f:4e:d1:7e:2b:6c:5a:6f:8b:1b:85:
e6:71:56:05:91:67:06:d8:8a:80:f2:28:92:53:9e:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:04:7A:B6:63:9B:56:49:9E:F1:8E:0F:C3:32:F9:48:78:AA:9A:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cwR6tmObVkme8Y4PwzL5SHiqmrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:14:3a:60:ec:b9:37:1e:7e:05:50:b9:3c:7d:4a:72:1b:d9:
5e:81:0d:34:5b:43:a7:fb:07:95:35:74:63:d4:7a:b8:a0:31:
e2:85:ed:95:ea:0b:29:85:47:2f:0b:98:7a:38:6d:a3:dc:65:
62:ea:c4:09:6c:bf:a7:3b:ce:81:5c:6b:8c:2d:fa:71:40:e6:
2e:1a:87:3b:96:f0:8a:40:23:3d:bc:01:fc:da:8e:dd:2c:9a:
dc:89:ce:6f:23:e2:60:02:57:9e:24:5e:9c:3b:f3:48:4c:61:
01:9e:95:7a:1d:bd:74:32:22:03:23:6d:f4:1e:a9:f1:66:aa:
2d:d8:6b:3e:a1:18:3c:2d:d3:e0:47:33:6f:d7:64:9e:91:fd:
d9:24:03:31:17:c3:39:45:f3:be:dd:3d:d1:bb:6b:d2:6e:ec:
1f:de:0e:0f:b0:69:a7:c9:b2:83:cc:3d:ef:17:d5:f8:98:4d:
a0:77:08:5a:33:08:d8:f0:06:5c:43:70:b5:54:f0:7f:62:7e:
58:7d:d7:6e:6c:51:61:89:e3:9f:a2:35:97:2c:65:15:f8:6b:
5d:86:ea:14:05:1c:18:df:aa:d5:a0:91:f3:1e:69:e9:3e:e2:
6e:d3:cd:ee:91:51:03:d5:6b:bb:c5:92:06:e5:7f:3d:17:7b:
f8:f9:27:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:57:08 2025 by rpki-client