Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Q8ZvNRSFg8X8ZBwsXXOJueX-t8.roa
File: 0Q8ZvNRSFg8X8ZBwsXXOJueX-t8.roa (raw, json)
Hash identifier: F5D1bge83gKh3KxhIDZ4ro/dn6P8NQC6F6aLrLdWrQE=
Subject key identifier: D1:0F:19:BC:D4:52:16:0F:17:F1:90:70:B1:75:CE:26:E7:97:FA:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018552337353F6F08BFC542937CF9AEC8235
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Q8ZvNRSFg8X8ZBwsXXOJueX-t8.roa
Signing time: Tue 27 Dec 2022 06:09:41 +0000
ROA not before: Tue 27 Dec 2022 06:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:33:73:53:f6:f0:8b:fc:54:29:37:cf:9a:ec:82:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 06:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d10f19bcd452160f17f19070b175ce26e797fadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:ed:00:63:a5:99:27:6e:a1:fe:d9:c0:21:
80:13:25:ef:91:50:80:21:8c:4f:c2:6d:fe:e3:ea:
64:cc:d0:e1:24:4f:ef:d4:57:2f:74:39:36:8c:3a:
ce:22:df:01:bc:8b:46:ab:59:26:69:84:d9:cc:ec:
53:c9:70:49:46:57:e0:40:85:f6:4f:64:a4:87:3d:
40:8a:92:dd:79:ca:ff:37:bc:98:2c:96:fe:19:52:
f0:ef:ae:c6:43:e3:e2:59:ad:02:b8:62:a5:26:b2:
8f:4f:53:c7:81:ac:11:81:31:5e:a4:d1:7b:c8:7b:
41:73:ea:ea:c4:87:6d:bf:f0:e9:80:31:a0:59:f9:
34:9d:fc:9b:dd:c5:64:4e:ab:5b:a4:16:65:6c:b6:
07:7b:6a:23:4a:bc:f8:b3:6a:b1:67:10:49:6e:85:
fb:28:d3:48:58:de:77:2f:a6:4f:9e:4d:18:40:75:
21:03:be:59:9f:8a:45:91:d5:11:75:00:7e:09:3c:
37:be:9e:15:c7:23:9c:c7:a5:94:16:b9:4d:82:1e:
37:81:da:4f:31:0c:98:1d:fb:6c:46:6e:6d:02:ae:
24:ea:01:8f:3f:6a:80:39:11:f4:58:38:1b:08:f2:
eb:00:5e:01:63:cd:0d:08:a3:7e:67:24:9e:b1:bf:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:19:BC:D4:52:16:0F:17:F1:90:70:B1:75:CE:26:E7:97:FA:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Q8ZvNRSFg8X8ZBwsXXOJueX-t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:cb:ad:fd:9c:58:76:56:a1:1f:36:91:11:7e:b2:5f:c2:6b:
71:c6:c3:2b:08:83:26:c3:2d:85:6d:56:5d:1b:ce:93:5b:99:
d8:3a:f8:30:b6:e8:4d:f8:41:e3:46:93:28:d4:07:55:78:cb:
17:57:ef:60:9f:a9:4d:fe:71:76:51:86:93:55:50:b1:ab:e7:
1b:1f:00:f2:90:16:3c:97:eb:b6:5b:e5:56:97:bf:2f:26:12:
9f:db:fd:04:97:a2:3e:1d:5c:f8:7f:5d:7b:80:f6:6b:6b:6e:
61:c0:b5:d2:f4:0d:76:c9:98:79:10:7e:42:53:c2:03:43:e1:
c3:01:fe:cf:79:27:b3:66:12:03:40:18:ec:7e:97:40:47:08:
35:a7:f8:4a:b1:70:8e:b8:96:9c:ff:bf:c4:c1:5f:79:09:05:
da:75:c3:f5:d6:0b:21:de:41:f4:1d:1b:9d:0c:0d:de:72:f6:
61:8c:ff:93:40:49:9a:3a:40:a3:6b:56:c4:dd:75:a3:be:ff:
f8:84:f0:1e:fd:4e:78:35:d3:da:df:45:71:55:c6:df:15:7e:
b4:06:df:2b:c8:72:10:0a:a4:47:7a:c2:fe:af:dd:91:91:5c:
3c:d6:b6:f8:e7:3a:ab:4e:b3:fe:dd:ac:c5:55:dd:af:ea:1b:
5a:6f:63:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:07:23 2025 by rpki-client