Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-S8xS6OLlFHlC51_qYisAlUtyb8.roa
File: 1-S8xS6OLlFHlC51_qYisAlUtyb8.roa (raw, json)
Hash identifier: mChQ232oJncT545fa7ucN/26+wOlvSwdeUr1vnSDK0Q=
Subject key identifier: F9:2F:31:4B:A3:8B:94:51:E5:0B:9D:7F:A9:88:AC:02:55:2D:C9:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A44079E3EF4118A04053ACA93A190CE9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-S8xS6OLlFHlC51_qYisAlUtyb8.roa
Signing time: Wed 30 Aug 2023 01:21:04 +0000
ROA not before: Wed 30 Aug 2023 01:21:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:07:9e:3e:f4:11:8a:04:05:3a:ca:93:a1:90:ce:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 01:21:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f92f314ba38b9451e50b9d7fa988ac02552dc9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:65:39:da:a9:aa:6f:e2:53:7d:79:8b:df:
35:e7:e3:04:ef:e0:a0:c3:f5:dd:46:78:e7:80:7a:
a1:26:59:37:cf:ac:f9:10:f8:55:4b:d2:74:13:1b:
28:1d:e7:44:aa:0c:c3:04:7a:9c:58:9e:63:25:6b:
c6:cd:08:92:02:d2:26:34:50:12:71:92:85:e7:f6:
dd:67:72:c5:58:26:8f:ac:2b:70:3d:a7:2f:4f:83:
ca:ac:2f:4e:82:ab:f0:c6:f9:da:75:66:87:94:be:
9a:03:10:8e:7e:87:e3:59:d1:e3:d0:5a:40:3f:ed:
5e:c7:05:0b:37:09:17:e6:84:b7:8c:ab:7f:45:f2:
ec:43:f5:bd:5e:a3:2f:da:6f:38:4a:53:88:ea:0d:
9e:61:4d:df:19:d2:42:5d:2a:b4:c5:28:6c:52:43:
71:1e:17:7b:5c:8a:88:9b:26:72:e3:b4:d8:dd:fe:
f7:26:04:cd:3f:04:27:e8:31:fb:ea:77:e9:24:8c:
fa:bd:f2:2e:0d:b9:c8:42:f1:5d:22:f1:f5:63:0c:
0a:c6:f9:80:7a:2f:e8:6d:41:e6:b2:ed:a1:f7:b0:
af:92:16:df:73:72:c3:c2:5b:64:94:4c:15:46:a0:
28:25:14:39:4f:5b:7c:80:bf:7b:1e:b9:c7:c9:ca:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2F:31:4B:A3:8B:94:51:E5:0B:9D:7F:A9:88:AC:02:55:2D:C9:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-S8xS6OLlFHlC51_qYisAlUtyb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:e3:f7:37:ab:03:64:d0:21:9b:46:76:48:d8:12:f2:78:8a:
57:aa:1a:c7:49:8d:cf:f4:f6:1d:ff:fc:49:a7:f2:4f:ca:85:
8d:2a:00:c2:01:cb:2f:c6:6b:db:67:02:5c:9f:f7:b4:8f:6f:
03:6d:d2:10:2b:5c:e3:2e:2c:c9:e5:a0:d9:1e:4f:c0:30:e2:
e4:f3:bc:f8:d0:84:44:8e:3c:c6:e4:f5:72:44:33:51:81:ab:
a6:16:ee:3a:ee:e4:c3:69:02:e9:57:a7:48:a6:4f:23:2a:83:
44:b7:28:09:c6:2e:82:22:56:19:f8:30:57:35:f2:48:3c:b3:
9e:c3:82:41:77:84:93:81:ab:73:34:b0:9d:03:4b:a2:69:5a:
67:9a:c7:17:66:05:21:0b:d5:d7:26:fb:e5:4e:d6:ad:ed:9f:
1a:b0:6d:6b:c2:a3:a7:6c:d5:6e:9b:f4:13:9b:14:7c:c6:5c:
be:56:06:a9:b3:f3:8e:b1:e7:4c:e7:d4:c3:ba:33:cc:6e:46:
eb:11:27:59:ea:b6:a7:48:05:16:69:16:b9:1e:d2:fe:6b:e8:
48:7d:b2:90:a6:a4:6f:3a:d9:d4:34:58:54:08:8b:d6:f1:3d:
05:05:79:7d:f2:5d:8c:af:70:ba:2a:19:ad:37:cc:62:c7:88:
7c:95:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:01:59 2025 by rpki-client