Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CXTVszUvfatK_98V2KLHYZoIlok.roa
File: CXTVszUvfatK_98V2KLHYZoIlok.roa (raw, json)
Hash identifier: X1jipSNilrjFWJ/hRjYXfLZPVwqcZ2vk570ipdF1eDk=
Subject key identifier: 09:74:D5:B3:35:2F:7D:AB:4A:FF:DF:15:D8:A2:C7:61:9A:08:96:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DC2FC4529759E6A1EC54C856E3C94CA2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CXTVszUvfatK_98V2KLHYZoIlok.roa
Signing time: Sun 04 Dec 2022 08:10:28 +0000
ROA not before: Sun 04 Dec 2022 08:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dc:2f:c4:52:97:59:e6:a1:ec:54:c8:56:e3:c9:4c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 08:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0974d5b3352f7dab4affdf15d8a2c7619a089689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:d5:c2:b2:8e:13:cb:f2:e0:5c:ff:3d:dd:
a8:be:55:08:9d:1a:78:c4:02:a7:3f:dc:46:c4:a8:
c6:2f:71:46:9b:e7:35:91:a4:be:51:a6:75:9c:b9:
a6:38:b4:f2:04:5f:09:30:50:b5:92:59:b9:87:8b:
fd:3b:0b:2f:78:1e:29:dc:81:56:8c:3b:8a:58:bd:
fa:9a:45:73:cc:1d:4c:7c:25:d9:43:c6:54:cc:a6:
83:22:ad:d4:0f:11:48:ec:8a:cd:e3:70:02:6f:ca:
65:46:fc:09:2f:a0:d1:ff:37:71:1e:dc:c0:ee:0b:
15:c6:de:57:8f:7d:94:91:15:28:08:22:34:e5:c4:
98:44:4a:5e:41:90:db:8b:57:24:71:07:fe:16:1f:
f9:ab:be:95:1d:d1:a6:64:75:12:48:5d:42:c5:3d:
3f:c8:ce:b4:f4:3b:bd:90:b0:9a:5f:dc:d6:16:f5:
25:13:b4:be:83:75:bd:23:b6:65:4b:fc:dd:6f:9d:
85:67:2f:8c:8a:68:d1:09:3a:fc:0b:9a:ac:3c:ce:
c2:0f:80:09:a3:ad:cf:63:10:4b:0f:e2:0b:54:1c:
14:a7:b4:ce:1e:16:0b:2a:5e:34:f8:ca:95:ca:b1:
cc:29:1a:20:23:f5:9f:54:80:92:74:f6:d4:48:0b:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:74:D5:B3:35:2F:7D:AB:4A:FF:DF:15:D8:A2:C7:61:9A:08:96:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CXTVszUvfatK_98V2KLHYZoIlok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:27:45:e2:01:61:44:dc:b6:86:0b:89:e1:7e:7b:41:53:3b:
72:58:61:ad:f7:48:58:bd:0a:30:95:60:ae:c7:65:a6:44:ff:
0a:c0:63:6b:80:83:bd:ea:f6:da:dd:6b:7b:a6:30:c8:49:7c:
2a:83:2f:24:5e:7a:74:1e:f8:bd:49:19:b5:52:8c:d1:26:14:
97:2a:db:d0:5e:a8:dc:37:a9:67:35:18:96:55:07:ef:c6:2b:
14:99:f1:d8:e9:9d:75:b4:cf:75:f2:fd:8f:e5:58:4e:5e:2f:
7c:86:b5:cd:f6:7c:9c:e0:56:69:f6:68:08:36:df:e6:df:b1:
20:2a:e6:03:be:02:4c:42:2d:b7:99:ce:6b:6b:13:22:a8:66:
9b:1d:d8:32:90:7d:e2:63:55:27:e8:d6:39:c3:24:d1:45:01:
d2:71:a7:41:01:f4:bd:21:e5:c6:84:19:ab:c1:97:06:3c:98:
ca:fd:dd:13:ef:31:de:8f:74:50:92:db:f6:00:6b:28:c8:8d:
63:d3:63:32:f9:57:60:1a:32:07:89:4c:64:08:d6:3d:81:57:
36:e2:99:29:70:b8:40:27:88:0a:0e:2b:4a:9f:6b:fd:b1:75:
80:73:b4:a5:09:34:7c:0a:2d:aa:2d:b1:96:7e:2c:d4:41:f6:
00:10:9c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:02:32 2025 by rpki-client