Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBdfW83CPRfQzKizGvjuzpbJEAw.roa
File: cBdfW83CPRfQzKizGvjuzpbJEAw.roa (raw, json)
Hash identifier: gFxTaAAv+F1rjgP7IoSth9kQVQs4TmyfCgeVCpsqy/A=
Subject key identifier: 70:17:5F:5B:CD:C2:3D:17:D0:CC:A8:B3:1A:F8:EE:CE:96:C9:10:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BF2FD023C2F59C4E2C3BC78CD47D1AD8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBdfW83CPRfQzKizGvjuzpbJEAw.roa
Signing time: Tue 17 Jan 2023 10:04:19 +0000
ROA not before: Tue 17 Jan 2023 10:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:ba40:6692/128 maxlen: 128
2001:67c:64:ffff:0:185:bf2f:bfda/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:2f:d0:23:c2:f5:9c:4e:2c:3b:c7:8c:d4:7d:1a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 17 10:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70175f5bcdc23d17d0cca8b31af8eece96c9100c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:ed:d0:d5:5e:d0:a7:3d:4f:1e:68:36:f3:
7c:e4:43:8c:09:0b:80:70:45:5d:35:bc:a0:03:1f:
9f:7d:15:94:0c:fd:65:e5:64:82:5a:a7:4d:c0:7e:
8b:93:12:c4:9a:6f:ea:e2:26:eb:ed:f5:53:17:83:
12:11:14:9a:41:e4:5e:11:88:ad:80:8a:83:4d:45:
48:9a:76:71:cf:24:e7:c7:dd:a3:d0:b7:58:4c:77:
fe:8d:c8:3d:71:15:ba:70:c9:5d:e0:01:5b:cb:d4:
af:0f:56:98:88:16:54:4c:dd:77:75:43:18:33:a5:
68:e2:8c:b4:36:9e:83:d7:6d:f2:c0:bb:f3:11:3b:
83:7d:32:25:32:79:8b:1c:ea:6f:96:09:4a:c2:0e:
9e:9d:11:fb:f4:3c:ef:8d:6b:d2:e6:34:1a:10:4a:
3a:bc:4d:55:50:51:09:5e:ce:5b:97:86:78:cc:f1:
12:17:09:3b:d9:ee:55:18:df:8a:8f:0c:ab:49:e3:
d1:e3:84:79:dc:26:ef:53:c1:89:7e:d0:57:52:72:
4e:b0:b1:f0:b8:9e:ce:a6:de:fe:25:3a:76:c9:a7:
6f:0a:1c:2c:34:d3:17:86:1d:f7:14:2d:a3:83:bf:
7f:59:75:73:1a:22:89:f3:54:b3:56:c8:1e:e1:78:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:17:5F:5B:CD:C2:3D:17:D0:CC:A8:B3:1A:F8:EE:CE:96:C9:10:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBdfW83CPRfQzKizGvjuzpbJEAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:8a:98:76:ad:9c:c9:f6:12:1d:7a:cb:e9:d8:74:c4:92:2a:
86:ab:2c:a5:97:15:55:7d:a5:96:3d:29:56:98:68:7f:62:9d:
39:56:12:0e:2a:61:2f:73:24:4e:cc:5a:38:76:b2:4d:93:6c:
14:11:f9:bb:f5:42:08:f5:a2:66:85:1c:cd:ff:c7:36:8f:20:
c0:84:46:41:bf:1a:a2:04:94:2a:d7:dc:29:17:1c:e6:c6:0c:
a3:51:f3:5f:38:60:15:60:af:40:ed:f8:86:9f:1a:22:1f:5f:
60:0c:7b:5b:0d:4b:45:ef:bf:dc:14:80:78:00:12:8b:cd:4c:
a2:fe:ab:bc:73:7c:ea:0f:44:81:e1:b5:97:dc:99:f2:5c:e0:
2e:1d:f4:4c:42:f6:14:d6:5f:4c:fd:44:f8:af:df:f5:c4:82:
60:d6:52:f1:cd:49:36:db:d5:11:ce:d2:1a:9b:c7:e6:f0:e7:
c9:ba:a0:e9:8e:85:98:e6:1e:3f:ae:24:63:b0:ee:af:cb:8d:
0c:44:6c:e3:77:98:f8:aa:bb:a2:ca:99:eb:4a:ba:83:66:70:
c7:9f:6f:e4:d9:3d:18:76:b8:59:a6:68:45:09:1c:ef:84:31:
b5:59:ac:ae:0e:db:81:de:85:e0:79:69:aa:65:f7:bf:c7:9e:
c6:bc:8b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:34:27 2025 by rpki-client