Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C0RYrXV3S-X2k-ZokUKznm2C-Eo.roa
File: C0RYrXV3S-X2k-ZokUKznm2C-Eo.roa (raw, json)
Hash identifier: DNvRhQjhsOaLRlbeZbwBMexWPPoy97XyaNZyLhGmSPA=
Subject key identifier: 0B:44:58:AD:75:77:4B:E5:F6:93:E6:68:91:42:B3:9E:6D:82:F8:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885186BE349A39EECE09899A971807F13D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C0RYrXV3S-X2k-ZokUKznm2C-Eo.roa
Signing time: Thu 25 May 2023 06:09:24 +0000
ROA not before: Thu 25 May 2023 06:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:86:be:34:9a:39:ee:ce:09:89:9a:97:18:07:f1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 06:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b4458ad75774be5f693e6689142b39e6d82f84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:fa:18:7f:93:7b:6e:61:b9:53:e7:6c:b0:
51:11:90:66:a0:d6:67:7b:4a:d9:ba:7d:d1:ab:16:
1b:f7:f3:4e:ab:6c:32:3e:ad:43:2f:27:5b:10:53:
e3:d0:c1:d6:53:6f:75:39:4b:cd:31:a0:0f:90:db:
dd:70:39:31:13:58:65:d2:bf:4b:4d:7a:5d:07:31:
97:fd:cf:9f:db:58:7e:79:ea:79:c5:d5:7e:93:f1:
70:09:12:6b:ca:8d:db:2c:60:fe:8d:98:ca:cf:bc:
aa:7e:68:6b:80:75:a7:42:aa:ee:23:22:85:17:90:
d1:5a:b7:c3:ac:48:5c:a2:54:84:cb:7d:0a:8c:c9:
f1:5d:8e:54:0f:66:59:c0:4c:64:4e:cc:91:2c:56:
62:8e:7c:b7:65:c3:8d:75:0d:d6:86:47:ec:01:50:
f2:0c:ca:47:ec:ee:44:2a:14:ac:54:d5:db:e1:24:
4b:01:50:92:03:c4:bf:55:0c:a2:ee:ad:9b:be:67:
52:48:d5:a8:6d:2d:c8:28:88:97:21:8c:7a:04:2f:
e6:de:4c:6a:b9:0b:82:26:89:7b:5e:10:b3:58:c9:
09:9b:55:5e:d6:76:e5:2a:4b:f5:0e:e9:a3:7f:5c:
7c:6d:27:8d:7c:d6:8b:09:e6:fc:e4:37:25:70:a2:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:58:AD:75:77:4B:E5:F6:93:E6:68:91:42:B3:9E:6D:82:F8:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C0RYrXV3S-X2k-ZokUKznm2C-Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:d1:7f:1d:be:55:3e:df:05:ee:a5:1e:49:0a:0d:ef:59:e7:
97:4c:f1:55:47:df:d7:df:71:4e:9f:37:92:72:d2:6f:a9:fe:
0a:ed:7e:eb:59:41:a9:c2:37:7b:d8:1f:28:1b:aa:6b:f2:36:
70:5a:b3:a8:93:6d:b1:cb:19:4d:5b:a4:52:1a:10:56:26:bc:
da:04:c6:60:96:d0:a1:d6:9c:47:69:2d:fb:92:47:d9:bf:94:
3f:3c:ec:08:0a:c0:d9:d6:7d:58:69:5f:65:a3:05:7d:5a:66:
64:9f:47:14:86:b0:bf:03:7f:5e:99:f2:d1:23:b1:ae:1d:91:
cc:f8:60:36:37:d6:87:60:f3:1f:b3:2c:38:cf:3c:6a:2f:e0:
d1:98:d8:bb:63:77:a2:62:c7:0c:0f:3f:28:49:76:a7:4a:9b:
dc:6b:5d:8e:ef:c7:1c:d1:65:00:56:9a:4b:1f:d8:4d:8c:e7:
1d:ea:4f:2e:9a:77:6c:83:e6:b0:1b:1b:a6:b1:d9:02:88:9a:
fa:be:9f:60:e0:36:d1:f0:44:c4:2d:8e:a8:75:e7:95:e4:c0:
d4:18:1e:81:5b:0d:b2:7c:94:93:01:7f:25:d8:4f:f8:d8:88:
d0:f6:7b:36:51:6d:e5:02:ae:45:dc:1d:b2:0e:05:0d:a5:96:
98:e0:d2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:59:39 2025 by rpki-client