Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CdBvGGafCe-Zeu-xBMxnfcQ_Ogw.roa
File: CdBvGGafCe-Zeu-xBMxnfcQ_Ogw.roa (raw, json)
Hash identifier: W5vF/dBPEz7NwhBbAt2k6tWfSDBitPoAc0akqLMgN9M=
Subject key identifier: 09:D0:6F:18:66:9F:09:EF:99:7A:EF:B1:04:CC:67:7D:C4:3F:3A:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018992F8333BC61F7DC11628B52F32BDF3D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CdBvGGafCe-Zeu-xBMxnfcQ_Ogw.roa
Signing time: Wed 26 Jul 2023 16:11:26 +0000
ROA not before: Wed 26 Jul 2023 16:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:f8:33:3b:c6:1f:7d:c1:16:28:b5:2f:32:bd:f3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 16:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09d06f18669f09ef997aefb104cc677dc43f3a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:c9:19:02:9b:94:fe:3a:70:6b:de:4f:59:
aa:e2:20:87:2d:f1:e2:29:74:86:1d:87:5c:ef:6b:
02:8e:f1:7d:f5:a1:ef:57:bf:07:56:c1:dc:a1:9c:
2e:9d:4c:c1:f5:3b:3f:5c:f3:e9:83:bc:3b:9f:8c:
32:f8:7b:c0:15:5c:60:02:9a:1b:de:20:04:dd:9e:
cb:07:a6:c8:01:29:2b:4d:bb:ae:d5:c6:63:c1:67:
1e:dd:5a:f5:62:10:de:5c:5e:8d:f6:7e:a1:82:30:
76:51:09:8d:c1:e7:61:9b:c4:98:13:58:ec:8d:e7:
6a:62:4c:aa:ec:d3:d0:d0:c3:4e:56:7b:c1:94:d0:
a3:21:58:24:40:cf:5a:fc:15:21:77:90:77:3d:18:
d4:37:1e:bd:0c:26:49:60:d7:cb:3d:58:2e:c7:1f:
2c:7b:93:b5:6b:2c:12:42:73:f7:ef:c8:fa:ba:22:
d9:7b:fd:f0:18:12:41:d8:87:9e:53:95:31:5c:96:
e0:da:de:3b:5f:78:78:a4:98:0e:c8:05:99:bd:00:
87:25:fa:0d:ce:15:71:8f:29:dc:3c:7d:b7:50:83:
e2:21:73:14:ed:94:87:c7:34:02:89:ed:46:82:12:
ac:6d:13:e3:66:22:bc:1d:f9:72:08:21:ba:98:57:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D0:6F:18:66:9F:09:EF:99:7A:EF:B1:04:CC:67:7D:C4:3F:3A:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CdBvGGafCe-Zeu-xBMxnfcQ_Ogw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:56:fd:62:36:17:2c:45:38:f0:af:71:08:de:14:29:44:2d:
7f:1a:b8:50:19:9a:f9:d4:e1:40:71:b5:78:b4:29:ee:5d:f1:
a1:7d:e6:b0:37:5d:26:cf:15:08:7d:be:bf:4b:07:3c:18:10:
4a:ac:64:a3:4c:6f:b4:10:a1:33:6c:9a:67:b1:60:a1:8e:8c:
94:e5:ad:8c:f9:d2:ba:d3:f5:09:9b:db:20:62:fb:21:57:08:
b5:74:0b:c3:d2:58:90:55:66:3a:b2:b5:1b:59:d7:8d:2f:b9:
34:f1:35:14:2f:5e:ca:90:7f:ad:00:ca:c8:ab:df:1b:e8:c5:
8e:e5:24:21:72:94:52:42:b5:4a:db:f3:ca:8b:cc:a2:01:50:
6f:bb:cf:07:1d:ba:32:82:21:e1:d0:2c:e9:04:43:71:d6:1c:
6d:ec:8d:b2:26:0e:cc:06:e4:6e:23:ae:7c:f9:2d:a7:9d:fe:
fc:59:c9:43:24:53:a0:ee:ed:6c:72:94:b5:90:b1:5b:b6:0a:
7e:af:e0:17:70:f1:ac:29:ae:8b:c5:1f:dc:f6:0c:31:ed:da:
01:b0:e1:c1:a0:6e:5a:86:d5:84:86:d4:1c:59:25:26:8b:f4:
9d:01:b1:b5:31:89:b3:03:d8:fd:43:d6:f6:94:30:59:71:71:
5a:15:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:21:35 2025 by rpki-client