Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cxXZymRvf9zk6SZPb0lGm31XcaM.roa
File: cxXZymRvf9zk6SZPb0lGm31XcaM.roa (raw, json)
Hash identifier: BvBLoncBoU49V/8MnVvhLW9A+a2M4WqenoB+ZnGNj70=
Subject key identifier: 73:15:D9:CA:64:6F:7F:DC:E4:E9:26:4F:6F:49:46:9B:7D:57:71:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018699A05076F76E862A06071773E170FB04
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cxXZymRvf9zk6SZPb0lGm31XcaM.roa
Signing time: Tue 28 Feb 2023 20:04:25 +0000
ROA not before: Tue 28 Feb 2023 20:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:99a0:28f0/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:a0:50:76:f7:6e:86:2a:06:07:17:73:e1:70:fb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 20:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7315d9ca646f7fdce4e9264f6f49469b7d5771a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:18:cf:52:d0:75:7d:5e:50:30:28:94:c5:33:
06:aa:c8:29:a1:dc:03:c6:4f:12:bb:70:bb:4b:5b:
ed:e9:ba:cc:d0:7c:1d:24:3c:84:1e:aa:5d:e7:89:
c3:13:9c:29:18:0c:70:5e:e6:b0:53:d5:55:51:ee:
5d:1c:19:ef:85:13:9d:32:2d:83:fd:1d:d6:5d:41:
f7:28:61:3c:41:c3:ad:cf:f7:ad:0d:5e:30:23:4d:
79:68:68:6b:90:5e:ba:67:66:25:32:81:56:4a:31:
e5:ee:7e:52:4d:8c:eb:fd:3f:cc:d4:98:be:91:01:
3e:01:11:81:c9:2d:7a:94:8d:d9:30:23:d4:ae:e3:
37:3d:fa:3f:56:71:f4:5f:73:26:ae:16:66:f3:cb:
fc:fd:9c:b1:37:43:a7:c5:4f:bd:b4:12:81:08:c9:
14:3a:a2:01:2f:3c:27:a7:a4:16:fb:cd:13:f7:36:
90:aa:de:f2:99:ac:bb:4c:88:02:2c:95:aa:4b:80:
8f:18:45:3a:db:70:98:fc:b3:2a:5f:e4:be:96:0e:
50:99:95:30:0b:7a:c3:d3:68:85:3d:7f:cd:4b:46:
25:c4:c4:04:10:94:eb:70:0e:97:2b:38:9b:3b:e9:
bb:f3:2d:83:07:cc:88:4d:4e:6c:71:fd:76:64:7d:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:15:D9:CA:64:6F:7F:DC:E4:E9:26:4F:6F:49:46:9B:7D:57:71:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cxXZymRvf9zk6SZPb0lGm31XcaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:bb:37:0c:5e:4c:13:95:cd:36:13:46:19:47:9b:f9:d2:24:
cc:a1:9b:fb:35:cb:25:2b:41:0b:ba:9f:50:4c:fa:93:51:5c:
f3:9c:93:91:ae:57:d5:8e:72:78:d7:63:df:24:a9:a8:62:11:
ae:e0:31:88:4b:28:b0:5a:60:3a:98:9f:ce:88:48:d1:73:f6:
0d:e9:82:8d:39:bf:d9:4c:8e:73:c2:ce:94:4e:b5:98:9f:d0:
69:d0:fa:fd:ec:8b:5e:13:ac:73:5e:bc:77:0d:d6:7e:28:4b:
db:26:89:c5:ec:27:61:81:d8:1b:bf:28:0a:0e:0d:c4:40:3d:
3d:b1:ef:9b:80:97:1c:3b:d2:50:86:c9:c0:9c:7d:66:0b:c2:
e3:9f:00:07:f8:a5:09:e6:e4:0a:b6:8d:d1:2b:71:2c:09:e3:
3b:a9:43:91:08:48:c3:4c:79:93:3a:76:a9:8a:f5:22:5b:54:
c8:bd:0d:84:11:a2:bf:7c:33:13:2b:09:25:99:38:e7:1e:8f:
8e:07:d9:27:0f:5a:a2:5c:4e:f9:e6:0f:e9:27:4d:6f:b8:ac:
3d:f2:82:38:51:be:86:a4:89:9f:64:76:f7:9e:a0:17:e0:29:
89:fa:98:a9:0e:91:ad:27:51:f8:d5:04:bf:c7:f4:b6:8a:6f:
2e:75:32:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:21:09 2025 by rpki-client