Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cxDO5dJWtc-ZQ1fYwUkkMMI4Tcc.roa
File: cxDO5dJWtc-ZQ1fYwUkkMMI4Tcc.roa (raw, json)
Hash identifier: vesudvhJVTrA68SwH4TT2djnuUFHO6neo3Q2LmaDCL0=
Subject key identifier: 73:10:CE:E5:D2:56:B5:CF:99:43:57:D8:C1:49:24:30:C2:38:4D:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A41030FFFEFCC7F495026E3A6816AC8D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cxDO5dJWtc-ZQ1fYwUkkMMI4Tcc.roa
Signing time: Tue 29 Aug 2023 11:17:14 +0000
ROA not before: Tue 29 Aug 2023 11:17:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:03:0f:ff:ef:cc:7f:49:50:26:e3:a6:81:6a:c8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 11:17:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7310cee5d256b5cf994357d8c1492430c2384dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e7:93:b5:d9:56:bc:31:67:52:18:4a:dc:8d:
a6:aa:e9:35:e2:94:7d:67:64:15:1b:5f:c5:43:d5:
90:76:88:be:59:f3:c0:6b:28:18:a1:d3:81:0e:92:
01:82:92:99:fe:46:42:26:45:27:49:b2:03:8c:99:
88:8f:ee:e3:0d:19:82:81:2d:0c:00:da:da:c9:7a:
d2:4e:79:12:34:82:2b:12:dd:4e:2b:07:54:d9:7d:
b3:64:95:3c:7a:94:90:f2:b8:94:3b:fb:20:5c:e3:
06:06:ed:d2:cb:98:c9:61:c2:47:ef:d8:d0:f6:ce:
bf:60:03:85:2f:07:5b:2d:81:be:15:da:a7:f0:af:
5d:21:b1:f3:68:43:8d:90:4f:7e:62:9c:41:96:0c:
c5:64:de:82:89:59:4b:91:c4:88:de:ad:fd:c4:28:
d0:7f:b5:bf:7d:1e:80:d1:28:03:1f:e4:fb:ef:54:
8a:2b:28:84:5e:03:a5:de:77:f1:a1:2d:8e:1c:57:
25:92:59:b3:9d:ae:47:eb:92:af:2a:6c:66:f0:0f:
a9:f2:08:cb:62:a4:8f:31:22:15:f7:c4:f9:2f:f3:
47:e7:35:d9:bb:f9:5c:96:b8:a2:21:1c:97:0c:61:
4f:26:98:b9:23:26:1d:a4:68:c4:d0:36:92:76:02:
26:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:10:CE:E5:D2:56:B5:CF:99:43:57:D8:C1:49:24:30:C2:38:4D:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cxDO5dJWtc-ZQ1fYwUkkMMI4Tcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:21:71:77:9b:45:50:ed:60:80:b5:3d:5d:0d:e8:79:1b:b3:
dd:ba:70:ed:6b:5d:70:15:f2:b9:89:72:7e:17:5e:ff:9d:d2:
85:79:be:a0:e4:a6:45:38:eb:b6:e2:f8:47:4b:ef:5e:23:22:
58:8a:2b:24:27:2a:65:a7:22:b7:b3:00:24:71:ac:ea:f6:38:
c5:6b:10:ff:64:49:0a:50:e0:c0:e2:bd:b3:10:88:d1:d5:7e:
ff:46:3c:06:ae:4d:0a:4e:eb:6f:c3:59:9d:5e:68:52:d4:0f:
e4:c9:67:e9:15:10:f7:d6:7f:fc:e4:8b:68:71:92:4c:84:00:
bf:84:5a:fa:67:d1:41:cb:08:8b:f3:a1:dd:46:98:40:8e:75:
6f:a2:d0:d4:d4:ce:fe:8e:d6:cf:6b:5e:45:ca:44:95:31:6d:
a4:fe:68:4b:90:73:96:84:b6:09:a5:d6:b8:0e:5e:41:05:21:
24:49:c6:6d:1c:b2:35:33:b2:5f:12:a3:e4:9a:84:4d:4b:2e:
b7:95:60:ba:60:70:58:c5:a0:30:ef:3c:61:86:00:54:00:78:
c1:28:b7:a6:68:76:23:91:93:6b:97:5f:92:a6:01:0e:3a:44:
1b:a3:03:f4:74:f9:05:09:c3:b5:4b:34:13:6a:77:58:fa:66:
f9:97:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:18 2025 by rpki-client