Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cu4IkDxhlVNPdYXJS0y1uUIPS7Q.roa
File: Cu4IkDxhlVNPdYXJS0y1uUIPS7Q.roa (raw, json)
Hash identifier: XRl0TQUo3T49T2gbZm86b28+y/8GE/PU0TMEl/Mdlug=
Subject key identifier: 0A:EE:08:90:3C:61:95:53:4F:75:85:C9:4B:4C:B5:B9:42:0F:4B:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B96874192E0B9F69B89BF340B0195EE7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cu4IkDxhlVNPdYXJS0y1uUIPS7Q.roa
Signing time: Mon 16 Jan 2023 07:08:28 +0000
ROA not before: Mon 16 Jan 2023 07:08:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:68:74:19:2e:0b:9f:69:b8:9b:f3:40:b0:19:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 16 07:08:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aee08903c6195534f7585c94b4cb5b9420f4bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:74:03:16:e0:27:d5:eb:61:c5:ca:d7:75:
73:85:22:70:6c:27:d0:33:7b:ce:e8:75:83:53:8f:
7d:e4:05:6a:ec:3a:52:0f:7c:7c:e4:6f:a0:a0:92:
5e:3e:d0:b9:e7:d2:2c:86:9e:ab:2c:eb:67:e0:d1:
0c:e6:0f:3a:83:d7:0b:20:06:fc:5a:dc:a4:d8:33:
ad:ac:06:43:5a:80:4c:b3:02:4c:8d:c6:38:4c:5f:
c9:fd:e8:c6:1a:73:7b:c4:83:a9:f9:6f:27:86:4e:
70:4f:63:b4:c0:09:30:0e:20:60:fe:4c:fa:7a:4e:
dc:06:d4:65:ee:a2:be:e9:b7:9d:a4:b1:f3:1b:e0:
47:ae:95:8b:5d:63:98:cc:8c:26:69:e4:6b:43:bc:
21:9b:2f:0e:ac:7b:1b:11:a6:b7:8f:79:6e:55:e7:
b8:2c:1a:ca:e5:66:96:47:f9:7a:cd:40:d5:d5:d8:
a1:19:97:9d:af:58:d7:0e:8a:ed:07:75:d8:49:0a:
5f:49:b8:66:45:f1:6b:29:61:cc:b5:2d:88:e4:d1:
6b:89:5c:33:d9:b8:6c:f7:7d:1b:9a:ec:f3:eb:7b:
a5:99:84:12:98:8d:9e:ec:e3:32:4b:b9:d5:0e:b7:
3d:dc:8c:62:66:05:ab:52:19:82:ae:49:63:d7:d1:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:08:90:3C:61:95:53:4F:75:85:C9:4B:4C:B5:B9:42:0F:4B:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cu4IkDxhlVNPdYXJS0y1uUIPS7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:fc:4b:31:b6:1c:53:20:ba:cf:2e:4d:b5:1e:1b:fe:25:28:
39:d2:ab:6f:a7:d9:c4:50:f3:5e:01:0c:9d:63:6a:5d:41:77:
6e:16:98:af:97:bb:33:0a:cf:e4:be:2e:83:17:52:55:eb:45:
5f:8f:9a:1d:6c:cf:0d:6d:6c:61:bc:2a:ea:ee:ce:74:44:f0:
d2:72:6a:b9:9d:e4:6b:eb:b4:a6:65:67:96:ff:8a:a9:82:0b:
44:60:05:03:09:cd:52:8d:b8:18:a5:48:0f:ea:4a:05:e1:fc:
11:f0:f1:f6:1d:70:21:14:89:4f:72:c8:fd:62:ce:cd:6a:18:
a1:87:30:2d:bc:c1:b8:35:fa:46:85:42:33:d0:e3:6f:b3:49:
22:2f:93:7c:bb:3f:4b:57:74:5b:1d:0d:02:0a:c0:ef:57:38:
6a:7a:74:2a:13:ce:b0:53:51:9f:8f:a4:f0:f9:79:6f:f9:c6:
63:4a:6f:e1:89:b4:32:7a:34:30:77:0d:b2:59:b0:dd:fa:31:
6b:0d:33:1f:45:1b:11:c5:e5:97:8c:68:59:05:ac:55:f0:39:
be:0b:9b:ad:e3:8f:a8:09:2e:41:b8:73:bc:d7:a7:c5:44:a2:
33:2e:57:d0:21:e6:c1:ef:d6:1b:dc:b4:50:61:8e:41:fe:af:
e4:d2:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:09:11 2025 by rpki-client