Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-8si4RKPH59-mR63Lh_qWe-OqGo.roa
File: 1-8si4RKPH59-mR63Lh_qWe-OqGo.roa (raw, json)
Hash identifier: MQhodeOrylzbqn6NJSXjitN3TnvUuR2JA9uXV0AEPbc=
Subject key identifier: FB:CB:22:E1:12:8F:1F:9F:7E:99:1E:B7:2E:1F:EA:59:EF:8E:A8:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018527EFA73497CB0FADA46F8D8F6D1A33D2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-8si4RKPH59-mR63Lh_qWe-OqGo.roa
Signing time: Mon 19 Dec 2022 01:11:35 +0000
ROA not before: Mon 19 Dec 2022 01:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:27:ef:a7:34:97:cb:0f:ad:a4:6f:8d:8f:6d:1a:33:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 01:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbcb22e1128f1f9f7e991eb72e1fea59ef8ea86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:14:95:d2:f7:0b:8a:5e:f0:2d:78:96:1e:
79:db:f3:9d:b9:ea:7a:46:af:8b:e1:fe:f6:1d:ab:
a2:d2:db:ab:50:9c:2b:30:42:b7:b2:5a:a1:ca:84:
20:62:b7:4b:8c:66:78:e0:bd:21:7c:e3:4a:ff:65:
21:ab:80:95:4a:54:b3:38:88:94:b3:1d:10:97:5c:
66:a3:be:b0:65:ef:f5:d3:d7:4f:49:14:5a:b2:fd:
b5:52:be:4a:c3:d3:7f:5c:30:f0:6b:f0:48:40:ef:
6a:40:34:08:82:3c:67:51:43:07:ee:b3:a8:15:3a:
21:97:eb:bf:de:83:58:22:19:06:21:72:41:4a:76:
40:c8:c5:6d:32:0f:35:2d:54:9f:3d:c7:19:d1:de:
e7:a4:a0:2e:6d:a7:4b:67:04:e3:3d:2e:f9:8d:c6:
07:00:39:b3:b8:bb:47:0c:eb:a5:bc:f6:f4:84:b1:
e5:4f:38:ad:ff:ad:ac:9b:b3:aa:26:82:6f:9f:40:
6e:ee:11:37:1c:2a:91:37:64:0d:a1:c1:73:fd:c6:
3e:e3:65:a3:05:33:c7:2c:ce:7e:11:91:3b:03:86:
a5:76:d6:22:40:a2:c1:80:16:bb:1e:d8:3d:8e:f9:
e1:dd:63:34:38:26:0e:14:10:c2:27:c9:ab:51:1b:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:22:E1:12:8F:1F:9F:7E:99:1E:B7:2E:1F:EA:59:EF:8E:A8:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-8si4RKPH59-mR63Lh_qWe-OqGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:6a:13:eb:48:62:0d:63:c4:df:3c:d7:92:7e:51:63:dd:15:
14:5c:00:21:7c:15:70:82:18:c8:d4:08:f8:8a:06:e7:08:d6:
22:05:cc:35:45:eb:89:25:ce:51:de:8c:34:ac:c3:1b:26:16:
ea:1d:49:db:00:7d:92:f9:16:f6:54:fc:a6:8e:8e:8f:ae:1a:
7e:9e:d5:bb:c7:ee:62:90:87:f5:2f:85:dd:69:33:01:48:6b:
ef:d6:5b:8d:81:e3:67:b4:51:81:56:be:41:a4:e3:af:3b:7a:
18:cd:6e:a7:36:4b:58:91:ac:5c:df:c6:d2:ef:ca:ad:3a:65:
6b:13:9c:21:24:c5:5f:ab:ac:a0:5d:18:1f:a1:a4:79:a5:ba:
7f:9e:65:89:2f:67:d3:ae:cc:ae:29:ec:30:6f:74:ac:3f:62:
72:8e:c9:3e:25:89:96:ea:5b:7c:d1:be:2e:f1:7c:e0:bc:e4:
73:c9:1f:44:5b:9c:42:a6:35:ff:d9:39:81:9f:44:96:e7:02:
4f:78:f6:a4:67:63:5e:b7:c1:e4:a5:aa:5d:0c:b2:d5:79:55:
b8:a6:a7:1d:0b:14:b3:19:e2:29:c5:ea:da:81:91:ae:60:9e:
28:1d:28:b6:a9:1b:4b:d2:7a:bd:1a:ad:67:f7:52:c4:89:e4:
6f:6b:66:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:37 2025 by rpki-client