Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cPBUXECNdowRMNxuWeaq6KkKhUI.roa
File: cPBUXECNdowRMNxuWeaq6KkKhUI.roa (raw, json)
Hash identifier: REw6FiCl0eQIuJWdX7AD7yBZ4nY9cn9b5ZPtGlzO31E=
Subject key identifier: 70:F0:54:5C:40:8D:76:8C:11:30:DC:6E:59:E6:AA:E8:A9:0A:85:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F626FC4C3D1637293145DE3FC8D80319
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cPBUXECNdowRMNxuWeaq6KkKhUI.roa
Signing time: Fri 09 Dec 2022 09:11:00 +0000
ROA not before: Fri 09 Dec 2022 09:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:26:fc:4c:3d:16:37:29:31:45:de:3f:c8:d8:03:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 9 09:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70f0545c408d768c1130dc6e59e6aae8a90a8542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:18:23:7a:14:6f:21:50:65:6c:de:e0:97:38:
7d:2b:4b:49:8f:9c:bf:f2:4c:eb:b3:98:ca:71:6e:
93:a2:62:04:14:38:bb:63:eb:92:c3:7b:f0:bb:00:
b1:8b:ad:b0:38:00:1f:2c:22:d7:1a:2c:c0:f0:02:
1a:df:d8:26:76:f9:74:8f:be:56:76:c4:87:ab:7e:
25:37:01:4f:a1:41:44:6e:9f:5d:58:c3:ac:fb:2d:
9a:9c:36:fe:79:0c:13:50:6a:40:e1:0b:5a:16:60:
89:34:6f:ed:76:a7:1e:b3:6f:e6:83:30:16:57:03:
77:d6:e5:c7:de:20:87:53:a2:0d:0e:0a:68:1f:d0:
06:21:50:87:b9:43:87:c5:73:93:44:c3:2a:64:8d:
7d:2a:f4:1f:a1:6c:0a:50:29:b3:b3:a8:55:67:39:
95:fd:d5:1c:7f:2b:bc:fc:57:1b:fc:11:b0:9c:be:
2c:b3:a7:7f:49:01:03:da:5c:50:fe:33:3a:b1:23:
a1:21:f0:8d:5b:50:ef:ed:2d:56:33:5b:e9:8f:d3:
ec:0b:3e:49:55:ae:1f:96:fe:0c:30:40:a1:c8:02:
8b:d3:a7:e7:56:63:6b:22:ef:15:56:9c:55:ae:84:
ed:b7:bd:f3:23:6a:ce:1b:b1:0b:b3:db:e2:fe:38:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F0:54:5C:40:8D:76:8C:11:30:DC:6E:59:E6:AA:E8:A9:0A:85:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cPBUXECNdowRMNxuWeaq6KkKhUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:23:44:de:47:b6:7d:55:dd:ba:8e:f7:a9:8b:02:0c:a4:75:
14:54:40:0f:c1:de:0c:1a:dd:5d:35:0e:54:10:e1:40:d6:7d:
66:97:f0:65:ec:fe:50:d1:6f:cc:af:8e:f9:14:39:eb:1d:00:
d6:a8:50:a8:32:37:aa:bc:7d:06:d9:03:58:d0:eb:2a:65:d5:
ba:07:a7:f7:e0:a8:6f:16:3f:a0:d4:85:65:ed:03:04:57:eb:
50:5a:00:c0:1c:a3:c0:a6:fe:f3:64:09:2d:ef:57:15:26:0d:
70:d0:7a:b5:39:e5:e1:13:79:94:12:c8:06:37:9f:a5:32:15:
1d:8c:71:01:83:a0:00:03:86:db:ea:da:38:5f:79:ed:28:b6:
d5:66:1f:63:25:59:b8:70:3f:55:83:7a:61:aa:e0:57:aa:04:
2c:ba:31:e3:a1:31:1c:2b:1d:1e:f4:43:37:67:d2:52:a0:cf:
e4:f8:4f:00:dd:35:4b:0a:26:b7:0f:01:9f:e3:ce:07:7a:0a:
98:50:c5:8b:68:79:74:e8:96:c1:02:c7:30:d1:08:ce:91:80:
24:5f:b0:0e:25:7c:f7:03:e3:c0:58:f2:88:67:61:c6:14:ee:
a6:a0:c2:d1:f4:55:db:99:4a:62:28:3f:df:76:0d:94:30:94:
61:a9:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:29 2025 by rpki-client