Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-O9_8OPRrwqXvDtiCU4joCaQJ4o.roa
File: 1-O9_8OPRrwqXvDtiCU4joCaQJ4o.roa (raw, json)
Hash identifier: ae2EtlMVh1QJttbe7zGa7nfbDk8vrdA4lN37seSho/g=
Subject key identifier: F8:EF:7F:F0:E3:D1:AF:0A:97:BC:3B:62:09:4E:23:A0:26:90:27:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186180A491BB65E2155A947F6D432783081
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-O9_8OPRrwqXvDtiCU4joCaQJ4o.roa
Signing time: Fri 03 Feb 2023 16:09:32 +0000
ROA not before: Fri 03 Feb 2023 16:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:18:0a:49:1b:b6:5e:21:55:a9:47:f6:d4:32:78:30:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 16:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8ef7ff0e3d1af0a97bc3b62094e23a02690278a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d9:dc:2d:65:8c:4d:84:6d:26:ed:f1:c4:cf:
83:d0:b7:9c:ea:b2:c9:da:d6:a6:b7:79:e8:0f:59:
a4:38:15:1a:80:51:61:7f:75:b4:f4:ff:b2:d5:c1:
c2:23:03:36:e6:84:36:33:4e:4d:9a:3a:ae:53:b2:
58:d3:38:4c:2f:e8:24:bd:c6:a5:68:ac:20:8f:93:
2b:6a:1e:9e:ee:88:4e:df:25:7c:ff:2f:47:89:8e:
76:e6:ad:d2:4c:3a:54:90:9d:37:1d:0f:0a:a4:73:
1a:5f:08:46:6e:b0:20:76:15:19:a7:00:6e:fd:99:
a3:a5:2b:8b:0a:ce:3f:21:a4:fd:70:e9:ac:03:ba:
33:63:4c:8c:31:8a:3b:5c:3e:f0:3d:71:7c:16:73:
7e:25:d3:8e:08:48:a1:64:58:56:a9:f3:42:cc:30:
5e:d9:9f:d1:a0:a7:8a:58:20:8d:4b:3f:08:77:81:
1c:f1:97:33:fe:94:92:1e:98:4e:15:2a:df:b7:84:
9e:bd:4b:ac:99:37:7e:2c:b6:95:a3:41:cf:93:ad:
79:ee:45:26:1f:93:18:8d:94:c6:f3:9d:5b:c9:b0:
e6:ad:53:87:28:dc:9b:fd:8c:8d:fa:aa:ca:72:48:
1a:e7:0d:90:b2:ce:c9:5d:99:2d:56:5c:f1:f1:2e:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EF:7F:F0:E3:D1:AF:0A:97:BC:3B:62:09:4E:23:A0:26:90:27:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-O9_8OPRrwqXvDtiCU4joCaQJ4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:a3:f4:19:38:0c:96:81:4a:b6:25:6b:ab:e4:9c:c8:0b:51:
e7:80:fb:5c:d0:a5:22:f1:44:6a:97:8d:68:b5:d9:fd:d5:f7:
d6:c0:18:6a:78:31:85:43:44:1f:75:60:81:88:9c:dd:9e:d1:
e8:53:01:4d:f5:c0:c1:ae:62:f0:bc:5c:60:b5:fc:63:74:c8:
18:f3:35:f5:75:93:80:d0:85:54:65:fe:76:04:b6:f9:9b:78:
a9:94:04:45:2c:a9:c0:cd:df:8c:41:32:62:db:b6:6b:34:68:
c2:56:3a:73:b9:37:42:5d:c6:ef:92:a1:25:c6:e0:5a:6c:20:
d1:ef:0e:3d:aa:ca:43:25:8c:76:68:31:6e:56:2c:06:59:82:
57:6a:43:45:dc:24:4e:7c:84:b9:36:c0:e9:83:2b:73:a7:91:
82:1a:52:e0:e7:71:7c:26:61:95:cd:06:f8:56:e2:5a:d0:a2:
28:5b:78:82:bb:ec:09:05:6e:63:99:d8:e3:24:96:78:c7:80:
a1:08:d3:82:6c:8d:47:ca:17:d6:7e:d4:dc:0d:e7:1f:26:02:
08:e5:16:8f:86:17:f7:df:27:f0:5c:8b:73:85:c8:79:9a:eb:
80:09:7f:c4:c5:90:05:cc:47:0d:e1:98:45:65:8f:a0:a4:28:
b4:3b:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:23:30 2025 by rpki-client