Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0m8J87ZWhGf7I0VURKRxnFZ1Fi8.roa
File: 0m8J87ZWhGf7I0VURKRxnFZ1Fi8.roa (raw, json)
Hash identifier: j3xNspYRQ9JEg5+F7h4MjVYnPMC3oVleP609kup+KZc=
Subject key identifier: D2:6F:09:F3:B6:56:84:67:FB:23:45:54:44:A4:71:9C:56:75:16:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8BF3353C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0m8J87ZWhGf7I0VURKRxnFZ1Fi8.roa
Signing time: Sat 11 Jun 2022 23:11:02 +0000
ROA not before: Sat 11 Jun 2022 23:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2347971900 (0x8bf3353c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 23:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d26f09f3b6568467fb23455444a4719c5675162f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:b9:50:2f:50:f5:84:b7:28:dc:7d:26:25:
4b:8d:f1:a4:3d:8b:07:e7:c0:66:9d:53:a4:42:cd:
0e:f5:47:39:ae:48:14:a1:1f:ce:df:6d:6f:21:a0:
34:d7:40:6c:c0:f1:0b:21:73:69:a9:80:22:8f:d8:
aa:a6:4b:3e:2c:ca:96:35:99:69:fd:52:fb:6f:25:
c1:03:25:63:56:11:9a:47:39:3f:d8:cc:95:14:e5:
74:bc:3a:19:d0:97:a7:f8:2d:00:02:11:9c:bb:e0:
61:3b:90:d0:3b:23:2a:44:da:74:bb:c7:e1:d4:15:
7f:28:08:c2:22:70:e7:09:0f:54:22:4a:07:f6:ab:
1d:b8:3b:39:ef:b2:01:c0:39:c5:04:db:eb:50:6c:
c1:5c:16:86:fe:c1:9f:95:55:13:0c:bf:8c:7c:a5:
b5:0e:28:b7:15:db:8a:33:8e:da:64:71:f8:11:d7:
30:f7:59:e6:89:e9:60:23:87:3f:54:22:d8:32:1c:
8f:38:1c:da:a9:91:d9:f6:4c:0c:14:68:6f:56:f0:
a6:d6:8e:02:27:9f:cf:e2:2d:3b:00:86:11:9a:11:
29:50:b5:b7:b2:78:15:68:a2:93:a5:38:bc:68:0e:
53:a6:d7:81:62:44:03:b8:f3:ca:01:ed:a0:fb:ff:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:09:F3:B6:56:84:67:FB:23:45:54:44:A4:71:9C:56:75:16:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0m8J87ZWhGf7I0VURKRxnFZ1Fi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:ff:11:b2:e3:a7:f7:7a:fe:32:4a:56:65:e2:2c:a4:76:e1:
fc:56:1e:39:45:f7:37:05:f6:10:41:2f:dc:66:de:61:01:d1:
63:b0:62:ca:96:09:68:02:57:eb:9f:cd:9f:81:d2:99:d4:6c:
e3:e6:12:97:42:ea:68:b3:65:26:ad:bc:79:7a:5a:2c:7e:5a:
24:62:10:27:58:43:5a:84:bd:ba:f6:e4:52:fa:f6:12:e2:28:
7a:85:90:d1:f1:2a:b7:20:c2:10:69:19:ae:79:98:b0:e6:3d:
ea:cc:2e:f3:4b:62:d4:03:24:46:ef:df:28:d0:09:29:29:bb:
fc:9c:f0:95:5e:c5:a0:28:1f:20:39:f6:3d:5a:5f:aa:68:c3:
f7:eb:de:99:68:be:1b:32:55:00:af:8a:31:ff:31:71:6e:03:
28:c8:2a:cf:aa:09:70:b8:52:32:a8:8a:dc:3b:46:aa:5f:5a:
94:fc:8a:a8:14:cd:10:79:4f:9a:3c:6f:96:ca:63:5c:7b:aa:
4c:de:d3:d2:43:34:f2:01:ce:db:a4:37:9c:cf:c2:30:47:b4:
46:67:40:dc:3d:1a:ba:9f:1d:84:db:49:6f:36:b9:9c:48:a4:
97:98:92:04:87:0f:f0:26:30:ce:84:cf:c5:b0:77:df:54:23:
ed:e6:a8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:03:10 2025 by rpki-client