Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpvEQA4H-E3-EgCxnuCdNWZklpU.roa
File: cpvEQA4H-E3-EgCxnuCdNWZklpU.roa (raw, json)
Hash identifier: pVb6/LPiLUKk3Re9tFzQj0KtK6fhJ6t0PbWwc6tx0fA=
Subject key identifier: 72:9B:C4:40:0E:07:F8:4D:FE:12:00:B1:9E:E0:9D:35:66:64:96:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854EC57590E9C30631928E4ECD1C25255B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpvEQA4H-E3-EgCxnuCdNWZklpU.roa
Signing time: Mon 26 Dec 2022 14:10:41 +0000
ROA not before: Mon 26 Dec 2022 14:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:c5:75:90:e9:c3:06:31:92:8e:4e:cd:1c:25:25:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 14:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=729bc4400e07f84dfe1200b19ee09d3566649695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:aa:ce:27:93:eb:d6:fd:23:81:8b:d5:7c:
42:4e:1f:fa:31:b8:7f:3a:16:20:19:6b:b6:58:c1:
b9:41:8f:88:d2:95:95:b7:97:81:6d:6e:ec:dd:98:
15:4b:1e:ae:63:7f:88:20:32:cf:64:5d:a0:bb:3c:
b0:be:ef:81:17:4e:52:e0:4e:8e:f2:49:31:6f:d2:
6a:9c:36:ce:ce:a0:0e:2d:4d:2a:71:34:b6:a0:94:
e4:14:93:14:a7:91:70:33:5c:af:cf:c1:73:7e:cb:
5b:22:c8:0b:39:73:92:4c:5d:59:f8:50:ec:89:52:
c9:58:14:7a:13:3e:f1:be:a3:4f:e2:57:84:aa:84:
1e:d0:91:ed:78:bc:6b:5e:34:92:e8:42:bc:5d:d0:
d0:49:4f:3f:e8:ce:41:66:2d:23:ed:2e:bc:2d:c3:
59:47:7d:f0:ca:65:b6:e3:87:83:07:1b:5e:b3:66:
3f:75:41:32:6e:c8:a0:ec:bb:19:fc:b5:74:81:27:
49:c2:8d:e4:e1:c6:eb:9d:5f:b6:54:3a:33:7f:de:
24:6d:c7:36:04:79:54:a7:83:77:0a:33:44:df:c8:
3a:5a:b1:f5:b5:c0:d9:61:5f:7d:24:c2:f6:52:7c:
24:09:3f:d7:bd:1f:a3:86:d9:14:6b:b3:6e:d1:65:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9B:C4:40:0E:07:F8:4D:FE:12:00:B1:9E:E0:9D:35:66:64:96:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpvEQA4H-E3-EgCxnuCdNWZklpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:c7:24:c8:f8:d3:7b:71:c5:19:c3:14:71:64:9b:cf:66:26:
2c:3f:d9:29:a1:19:12:0d:4b:ec:87:cb:a1:5c:12:d9:a6:be:
4a:05:e3:67:9c:f0:84:36:44:a9:41:45:7e:9a:2c:14:4e:43:
ec:df:a1:83:90:ac:91:dc:12:be:60:eb:d5:89:1a:fd:8f:c9:
d1:93:70:3e:f8:18:6f:b2:54:33:27:bc:a6:ec:c0:20:85:f1:
33:fe:04:2a:a7:7a:ba:2c:07:28:34:aa:c4:9f:91:d3:bf:7b:
a1:c6:e2:96:72:d4:33:a7:ce:02:7c:88:56:11:49:d6:73:74:
b0:bd:f2:a0:28:ef:a6:41:36:af:aa:18:7c:84:a0:b2:ff:68:
8e:13:75:15:38:77:2f:10:d2:06:0e:cd:b1:2f:43:db:42:db:
b5:f9:d4:2e:0a:d1:37:f5:52:bc:9d:4a:1f:45:5a:98:ee:b6:
e4:19:42:00:fd:26:2f:b6:60:47:4a:c3:19:72:75:37:00:ce:
8e:31:d7:b2:61:01:79:b2:ba:bf:df:b1:1a:7d:b2:77:ab:4c:
98:95:5b:20:94:f7:20:25:c5:7d:61:b2:7b:f2:a9:c7:ce:9b:
a3:0a:3c:7c:0f:c4:2b:07:99:d4:ac:75:6a:86:27:f9:03:40:
44:aa:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:27:08 2025 by rpki-client