Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CR5XOjMOFWCd2tr4UaUCRdtQArE.roa
File: CR5XOjMOFWCd2tr4UaUCRdtQArE.roa (raw, json)
Hash identifier: cKrzxQUK97bqJkUsnbWOR051w7I0f78BT7swKD0Ne8k=
Subject key identifier: 09:1E:57:3A:33:0E:15:60:9D:DA:DA:F8:51:A5:02:45:DB:50:02:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018559B17B22AC81D60B2073A78B19842D9E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CR5XOjMOFWCd2tr4UaUCRdtQArE.roa
Signing time: Wed 28 Dec 2022 17:04:41 +0000
ROA not before: Wed 28 Dec 2022 17:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:59b0:f738/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:59:b1:7b:22:ac:81:d6:0b:20:73:a7:8b:19:84:2d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 17:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=091e573a330e15609ddadaf851a50245db5002b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:f7:00:01:ae:97:de:61:8b:b1:6f:15:6d:
09:a3:71:a2:80:5b:b1:bd:38:17:dc:c3:a5:e0:18:
7e:df:46:00:50:ae:6c:58:5e:b1:c0:c6:82:40:fa:
35:e3:56:7b:6d:10:e9:9c:19:61:35:03:e1:ad:e8:
24:af:9d:fc:d0:3d:9f:ea:89:52:d2:9a:40:22:af:
ff:1a:29:d3:5f:73:dd:f9:6b:28:92:8b:19:67:06:
92:a0:dd:21:77:ae:85:3f:66:ea:ee:1e:90:80:98:
58:01:4d:ec:03:12:5c:07:43:1a:79:12:47:de:4e:
23:dd:86:4a:e3:28:fd:c3:ed:4b:c2:af:6d:88:6c:
c2:a1:3f:dd:2e:05:15:ec:43:b9:fe:b8:9e:6e:73:
f8:f8:06:09:8d:dd:31:0c:0b:7d:8d:28:a6:73:30:
45:63:ea:66:87:3a:e9:70:74:71:9b:c0:4e:58:0a:
a0:da:fb:85:c6:c4:61:45:f0:93:11:f3:86:5e:d4:
fb:e9:58:e3:37:25:86:a7:3a:75:62:d5:f7:30:6e:
27:f6:83:46:f1:2f:f5:fb:a0:bd:75:c6:f1:50:6a:
9b:f3:49:73:de:3f:5a:c5:a4:96:ed:e2:53:2a:7f:
13:79:bc:c9:be:09:c9:fd:05:e4:ec:79:f3:e9:79:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1E:57:3A:33:0E:15:60:9D:DA:DA:F8:51:A5:02:45:DB:50:02:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CR5XOjMOFWCd2tr4UaUCRdtQArE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:d9:8a:41:ea:40:ba:bc:85:81:ad:59:f0:81:af:7d:ec:b1:
99:a6:7e:87:59:6d:21:64:2f:ac:f5:44:b8:9e:c0:65:4b:09:
d6:72:d2:b3:e0:7a:ea:c8:28:c1:b6:45:af:19:57:08:e0:7f:
33:4f:42:b5:ba:e3:6c:bb:22:0d:0a:0d:f4:2b:22:97:b4:b1:
99:f8:e5:87:19:d9:29:ba:03:a1:14:d3:14:76:3b:75:ae:1f:
bc:f4:cb:60:d5:09:96:48:d3:d8:6e:14:a2:5b:a0:59:9f:83:
89:e1:c9:93:51:a6:b7:12:dd:ef:34:6a:e1:2f:d5:d6:27:16:
ec:51:4e:e2:f5:e1:49:ce:7f:dc:de:06:e2:87:2a:17:aa:a7:
9f:dc:5b:09:04:e9:eb:53:4b:c8:0b:f0:ed:fb:b6:e8:a2:b5:
2d:88:99:dd:39:9d:be:0c:bc:eb:62:2f:f1:97:c2:a3:bb:e0:
fe:64:74:33:e4:8f:06:71:6b:f8:ac:57:7c:af:5d:2d:43:ef:
92:74:f4:11:55:cc:c4:d4:7f:7a:a9:3f:5c:d4:77:58:c0:2b:
31:19:2c:4c:23:d5:0e:ba:a9:1b:04:04:86:c9:87:0e:9e:6c:
24:b3:ad:02:da:41:f6:1d:2f:41:0e:c2:e6:ff:f5:88:a6:e2:
5e:4b:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:17:12 2025 by rpki-client