Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Cgf2MdGTF7E7ArdwMtjZO5LCc8.roa
File: 2Cgf2MdGTF7E7ArdwMtjZO5LCc8.roa (raw, json)
Hash identifier: dga+Dv1l2rN6anTeqI99KU5/+g5x79EFOs9b0xl8394=
Subject key identifier: D8:28:1F:D8:C7:46:4C:5E:C4:EC:0A:DD:C0:CB:63:64:EE:4B:09:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899DAC5E9DB96EAB2F8D2E4979F2396384
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Cgf2MdGTF7E7ArdwMtjZO5LCc8.roa
Signing time: Fri 28 Jul 2023 18:04:26 +0000
ROA not before: Fri 28 Jul 2023 18:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:9dac:2760/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9d:ac:5e:9d:b9:6e:ab:2f:8d:2e:49:79:f2:39:63:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 18:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8281fd8c7464c5ec4ec0addc0cb6364ee4b09cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:21:9d:de:37:1e:9c:92:e9:37:45:bd:2b:
7e:43:dd:22:2f:f3:9b:4c:92:f7:3e:65:1c:5a:85:
f1:9c:b8:38:b6:e9:40:1f:a8:73:b1:1f:a9:54:0d:
67:5f:62:c6:78:3d:24:22:8d:58:37:4f:8f:8c:9d:
aa:e2:ca:86:d9:51:96:c1:7e:a6:f3:56:41:d2:77:
66:13:bc:68:66:ad:0b:27:b8:32:f5:60:59:13:b0:
1d:69:9a:0c:e0:c5:a8:8a:f7:d4:fb:fa:8f:f1:84:
98:ae:59:e1:78:4b:7b:8e:6a:34:5b:8b:ea:43:a2:
eb:c5:e7:11:03:31:f5:a1:c5:5e:62:91:f9:64:b4:
aa:6e:50:93:8f:d3:da:5b:43:e8:88:b3:55:62:0d:
43:21:e6:e5:95:1f:ad:22:5d:8a:74:b8:e3:86:f1:
cd:b6:26:9c:2b:f7:30:59:2f:67:e8:e2:ef:57:d3:
51:a5:0a:7a:92:1b:68:c6:d0:28:ee:6d:fa:30:db:
d7:66:d7:a1:39:7b:88:fb:cc:14:ae:7a:56:7a:ac:
54:a7:97:9c:43:8c:76:4f:f0:7c:4b:f7:6e:c7:e6:
6d:a3:d6:38:a3:51:61:57:74:1d:e0:c5:29:82:9e:
75:34:c6:f4:72:e2:e9:5c:8c:aa:c4:54:7d:25:92:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:1F:D8:C7:46:4C:5E:C4:EC:0A:DD:C0:CB:63:64:EE:4B:09:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Cgf2MdGTF7E7ArdwMtjZO5LCc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:14:70:d7:98:07:93:49:37:d7:7a:2f:16:6d:29:ac:01:23:
7d:b2:88:09:5b:0e:24:4e:65:55:b8:8e:d7:ab:5b:53:b0:3a:
40:ca:f2:6f:d1:9b:a6:58:0a:44:cf:70:b5:65:28:a0:89:98:
d1:92:d4:64:78:25:8c:43:30:67:21:ad:8d:8f:fe:0d:b3:db:
ec:2a:08:e0:10:56:99:a2:21:65:9d:3c:b8:93:a9:b7:bc:34:
f6:71:27:d9:a7:3b:22:63:bf:de:e9:3c:af:d7:39:96:f6:f9:
61:2a:62:2a:6a:20:fe:8b:2c:1e:a9:04:62:5a:af:11:ad:90:
8c:9e:95:97:50:37:fc:b9:6f:f6:9b:3f:e6:21:98:fe:c7:b9:
b1:39:8e:22:28:40:45:15:58:e0:bb:b3:7a:33:60:c4:33:96:
1f:f8:27:8d:19:5e:01:8d:17:fc:4b:d3:97:fc:07:b8:0f:18:
43:18:44:69:29:6d:a9:14:4c:03:5e:15:72:25:08:dd:ed:d9:
75:ca:50:df:78:93:e7:d8:fe:55:e8:ba:67:54:ae:c6:81:ce:
13:46:8c:7d:3e:d5:cd:45:16:4a:2f:11:bb:79:93:ea:96:29:
01:6a:d3:12:0b:e6:41:e7:38:db:fd:24:d2:0d:f2:25:1b:b7:
99:e8:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:58:12 2025 by rpki-client