Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-L8FeREV8OY7uLJDyiA0dzEmaV8.roa
File: 1-L8FeREV8OY7uLJDyiA0dzEmaV8.roa (raw, json)
Hash identifier: RaNvJtPP4rDi9mUnil1mPanDGERNosg0RWPkwXG9Evg=
Subject key identifier: F8:BF:05:79:11:15:F0:E6:3B:B8:B2:43:CA:20:34:77:31:26:69:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187060339609F279C715BE3B2909E3096BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-L8FeREV8OY7uLJDyiA0dzEmaV8.roa
Signing time: Tue 21 Mar 2023 21:11:27 +0000
ROA not before: Tue 21 Mar 2023 21:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:03:39:60:9f:27:9c:71:5b:e3:b2:90:9e:30:96:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 21:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8bf05791115f0e63bb8b243ca2034773126695f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:bb:38:53:85:ba:ba:bf:53:29:57:9e:9d:
86:c0:dc:01:f6:72:b4:60:23:8e:ce:9d:62:bd:9e:
3c:19:de:a3:ed:e5:86:56:d3:f0:40:62:75:8e:bc:
51:00:dd:f7:91:36:61:cd:02:0c:41:8a:d5:51:b2:
12:01:2a:c8:53:5f:58:0f:7a:f9:b0:f6:92:fd:de:
66:d6:23:c5:93:1b:c4:e0:b7:11:df:5b:cb:46:b1:
56:b9:3a:1a:e2:d6:44:01:f5:c4:84:ae:a1:6a:10:
5a:72:7b:28:ea:c3:db:c6:ad:72:14:b2:49:f1:ce:
86:ac:a1:6f:6e:80:d9:5c:37:c6:97:aa:7d:3b:b8:
c2:d7:83:0a:62:c3:2b:9e:72:a2:bd:3c:b3:a2:e1:
5b:99:76:96:eb:59:4c:8e:23:4a:44:93:27:74:be:
a7:3d:93:99:54:47:61:a5:a3:4d:5f:06:10:0e:9a:
dc:3a:45:3a:c4:eb:13:dc:6e:60:a8:13:d3:6e:9b:
bb:26:0c:18:30:49:c7:1f:da:78:d5:63:86:6f:27:
e8:54:ef:0e:4d:a7:79:ca:a6:ce:3c:ad:39:84:a9:
9d:e4:1e:0c:87:08:eb:ef:cc:89:93:b9:01:6b:00:
db:0d:7b:66:9b:0d:cc:31:d9:04:6e:4d:ee:51:3e:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BF:05:79:11:15:F0:E6:3B:B8:B2:43:CA:20:34:77:31:26:69:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-L8FeREV8OY7uLJDyiA0dzEmaV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:52:e1:53:fb:ea:d4:8d:ce:73:15:bb:51:c5:51:5d:99:25:
05:b2:c5:49:06:7c:3a:3b:6b:da:f5:fb:e3:3a:5c:e3:60:25:
a5:09:3b:7b:b8:3f:67:2f:52:6d:33:bd:16:d8:c7:7c:d7:7e:
d4:a7:61:92:a9:f8:bd:5a:d8:62:7b:7e:41:80:4a:8f:94:ac:
6f:70:0a:5e:49:8c:56:35:0c:ff:b3:4c:41:11:79:00:2a:ba:
9c:8e:e8:9e:5e:6f:52:e7:cb:ff:d5:a6:be:79:47:63:0e:6d:
4c:9d:89:0f:15:5a:d3:f4:b8:55:a5:19:ad:37:da:a1:f5:7d:
5b:65:0e:c1:14:b4:81:1a:08:f5:a8:54:6b:1d:33:a8:6e:65:
42:bf:4a:a0:1d:0f:d1:5f:e7:41:35:d5:f9:ea:ca:ea:f6:92:
b1:f9:f3:92:c9:86:1a:df:e3:89:e1:5f:c4:6d:1f:01:33:ea:
fc:e1:2b:a3:d5:6a:e4:42:fb:3a:f3:55:87:2b:05:20:7b:0e:
72:9c:e6:81:d7:33:ab:7a:50:6a:6b:68:2d:ba:b9:34:d4:ea:
8a:81:7b:d4:e3:d0:99:2d:72:41:63:c1:fa:aa:ea:87:dd:e7:
72:75:37:12:4c:73:0d:3a:3c:d4:e1:71:7f:d7:c6:13:90:c2:
b7:08:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:31:06 2025 by rpki-client