Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/svCozgqxAH_tpzwzQi2Dww3Ejp0.roa
File: svCozgqxAH_tpzwzQi2Dww3Ejp0.roa (raw, json)
Hash identifier: UCDZJaKCEVaBZ5Jy3Exf/JsaA1mcVf++lCPCvMRLG5A=
Subject key identifier: B2:F0:A8:CE:0A:B1:00:7F:ED:A7:3C:33:42:2D:83:C3:0D:C4:8E:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018550407C48C654BED59E962CA1F89E7D62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/svCozgqxAH_tpzwzQi2Dww3Ejp0.roa
Signing time: Mon 26 Dec 2022 21:04:41 +0000
ROA not before: Mon 26 Dec 2022 21:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:5040:f15/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:50:40:7c:48:c6:54:be:d5:9e:96:2c:a1:f8:9e:7d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 21:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2f0a8ce0ab1007feda73c33422d83c30dc48e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:4d:ed:45:62:b4:77:2c:a8:68:d1:8b:95:
b2:b0:db:8d:13:76:8d:2d:1f:4e:6f:86:ec:c3:8e:
95:bb:8e:9a:a1:96:34:dc:56:09:aa:a8:e4:6c:a7:
df:c2:ae:af:42:7b:be:52:ad:7f:cb:1d:c6:1c:87:
5a:ed:d9:90:ed:c0:8d:60:a5:da:92:5c:bd:8a:73:
fc:db:18:4c:98:1c:1c:fd:88:c8:68:c1:3d:58:b1:
87:05:6d:6a:ba:3a:5b:0d:ef:2e:cf:b6:51:43:06:
7b:d4:f1:7d:e5:62:2d:1d:d4:ff:18:a6:37:44:6e:
03:c9:56:a5:71:75:00:dc:bf:07:6b:dc:1e:61:ba:
5b:e9:c8:81:c4:fd:ff:18:54:46:37:9b:3c:dc:04:
98:df:07:ce:2d:3e:66:51:44:c5:06:7b:1f:71:73:
35:56:0d:9a:39:1a:30:47:88:d7:b6:6c:7c:86:bf:
fa:65:2d:34:ae:70:87:8f:7f:20:cc:6f:40:1c:c7:
4e:92:87:86:69:b7:a0:b2:ac:4f:95:a2:65:de:da:
d2:06:70:cc:b1:23:59:d7:aa:e1:8a:7f:a1:52:8a:
fb:60:88:6e:00:10:2d:67:53:02:86:55:83:12:90:
f9:c1:39:a2:39:0e:69:be:43:54:91:05:2d:8b:7b:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F0:A8:CE:0A:B1:00:7F:ED:A7:3C:33:42:2D:83:C3:0D:C4:8E:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/svCozgqxAH_tpzwzQi2Dww3Ejp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:96:64:d9:7a:d3:b2:ea:97:41:fd:85:90:d0:b5:ee:ec:c9:
fb:d1:41:59:64:02:23:47:b7:5f:ae:3f:c1:c1:80:67:99:b5:
50:0e:23:17:fa:77:56:15:eb:03:ff:25:f7:53:f7:75:94:5d:
85:31:37:5f:f5:b3:98:4a:37:4c:ce:d3:a1:bc:c6:eb:0d:e2:
b1:2e:14:c3:88:22:4a:43:ab:ee:25:8f:78:5d:15:45:23:57:
cc:9f:87:e7:24:11:fd:79:df:b2:62:4b:fc:d3:88:a9:9e:5a:
4b:e5:06:62:1f:75:29:e4:c4:b9:9f:cf:f0:28:b9:de:55:d0:
b9:28:35:2d:14:1f:df:07:67:3d:64:a0:e8:97:c4:34:25:90:
fc:1c:c9:ad:84:c0:b3:df:49:1c:53:75:53:f1:fe:da:5d:b7:
72:2e:53:9e:09:5e:45:0c:be:c7:5a:45:c7:f0:00:01:3e:af:
2e:a6:0d:9b:80:a0:fb:02:a7:95:eb:ec:51:14:88:ae:cc:2e:
46:4c:2c:a7:74:b6:ee:e5:04:a5:74:86:08:78:66:b4:6d:fc:
57:16:66:ef:06:3f:f3:fb:65:e1:ec:7c:9a:2a:b7:10:3c:ab:
0e:e0:80:f9:4b:a5:59:25:0b:3c:2f:c8:b4:55:de:0b:85:45:
5d:2d:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:40 2025 by rpki-client