Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cwwYg_Hm_0Zt5zwrOXYRarsx92g.roa
File: cwwYg_Hm_0Zt5zwrOXYRarsx92g.roa (raw, json)
Hash identifier: AW1B7kdTWUAQyi5R3ZS1vbRp9mectdCbvBOIvjfD9jk=
Subject key identifier: 73:0C:18:83:F1:E6:FF:46:6D:E7:3C:2B:39:76:11:6A:BB:31:F7:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184546313F8908A56EFF2DEDE9816531F2D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cwwYg_Hm_0Zt5zwrOXYRarsx92g.roa
Signing time: Mon 07 Nov 2022 23:18:10 +0000
ROA not before: Mon 07 Nov 2022 23:18:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:54:63:13:f8:90:8a:56:ef:f2:de:de:98:16:53:1f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 7 23:18:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=730c1883f1e6ff466de73c2b3976116abb31f768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cb:1a:2f:a7:2b:8a:ff:43:42:cb:da:cd:65:
3e:d8:26:db:f8:31:26:70:fc:4d:5e:3b:a8:e8:44:
03:c5:34:ae:75:7d:cc:4a:c1:35:f5:82:42:36:ea:
2b:46:ef:9f:e8:d4:80:69:f5:f4:61:c2:38:b4:6d:
32:96:9c:fd:84:8c:38:36:30:77:b9:7e:da:aa:e1:
73:41:89:6e:c4:54:ff:7d:0f:80:3a:19:1b:63:7e:
d6:ed:70:e9:a0:cb:13:c1:59:b3:97:a7:3a:5e:61:
c3:10:00:c4:91:63:90:c2:86:4d:b0:40:a6:52:98:
eb:0e:d5:09:95:39:08:0f:67:c0:ef:e4:77:63:6a:
f9:b6:7d:63:8f:2c:c3:23:93:99:21:4a:9e:27:61:
39:44:82:43:15:68:36:be:d7:4c:54:52:12:bb:d4:
8b:f8:29:ae:92:e0:86:e7:46:3c:e4:35:63:5a:da:
2e:ef:6a:48:9c:8a:47:94:6d:24:86:67:7a:ee:96:
89:40:48:45:9b:89:4e:c0:7f:2f:cb:5a:18:da:a4:
f3:75:b7:92:60:bf:f7:dd:f1:4f:56:19:db:a3:93:
92:9d:20:98:93:dc:a4:0b:d7:c6:25:51:2b:88:d4:
81:11:2c:09:2b:4b:ad:a0:bb:72:83:36:da:7c:81:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0C:18:83:F1:E6:FF:46:6D:E7:3C:2B:39:76:11:6A:BB:31:F7:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cwwYg_Hm_0Zt5zwrOXYRarsx92g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:e9:85:90:b1:4d:94:e9:2d:16:19:3e:99:dd:2e:37:9f:2a:
2a:03:b6:49:9b:ba:83:ca:76:e0:18:00:d8:17:2c:49:a1:c6:
d2:ae:7d:9b:1d:1b:7b:17:04:61:a9:ba:4f:ec:c4:e9:3f:d7:
5c:2a:b0:54:ca:6e:33:17:c3:32:ff:84:c0:4c:a3:84:4c:f3:
b7:76:79:6b:af:d6:72:aa:6b:eb:2e:60:1c:38:42:4b:3c:ea:
2f:31:9b:59:42:7d:49:8d:e8:a6:15:4d:aa:d4:42:13:8c:7e:
33:3d:65:5e:90:c7:2c:51:65:68:d0:7f:db:8b:e7:fa:5f:21:
fe:c4:70:95:62:71:e5:56:62:3c:7c:eb:60:b0:37:60:73:d9:
70:a4:a6:f7:e6:ca:6a:9e:df:b6:d6:a5:44:9b:a7:fe:85:e0:
bc:60:a6:f8:65:25:56:5d:21:e8:4f:e1:88:78:91:80:a3:71:
b5:39:63:8e:ec:2b:3d:30:53:6d:ff:af:dd:ba:6b:3c:6e:d0:
9d:a5:b8:4b:f1:3f:0c:a4:76:10:46:ec:2c:1e:b5:d7:d4:36:
b5:cc:e1:c5:e2:c8:ba:fc:f4:83:3a:2b:81:40:f0:ca:b5:ac:
0e:3e:a4:8d:0d:a5:96:e8:c7:a8:6b:57:09:2e:54:4c:7b:6d:
84:82:d0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:37:10 2025 by rpki-client