Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2c8SKzWlmFziqVzJONnmJqAmoUI.roa
File: 2c8SKzWlmFziqVzJONnmJqAmoUI.roa (raw, json)
Hash identifier: cieKXKQljL6OX2WpC8bAdW+3cuVNRl7Tt8a2Heg5nEA=
Subject key identifier: D9:CF:12:2B:35:A5:98:5C:E2:A9:5C:C9:38:D9:E6:26:A0:26:A1:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D147BE9BEABB4ADEE53FA6D7795C2CEA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2c8SKzWlmFziqVzJONnmJqAmoUI.roa
Signing time: Wed 06 Jul 2022 02:12:28 +0000
ROA not before: Wed 06 Jul 2022 02:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d1:47:be:9b:ea:bb:4a:de:e5:3f:a6:d7:79:5c:2c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 6 02:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9cf122b35a5985ce2a95cc938d9e626a026a142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:90:c4:be:92:07:99:9c:fb:e3:a8:5c:76:
7c:ee:3b:ce:34:44:b1:44:d4:b8:0c:e8:74:e2:82:
09:3e:b2:df:31:73:db:22:33:74:3c:e6:ec:9b:4b:
dd:b4:8e:f7:1a:ad:73:85:45:c9:25:e7:a1:29:2f:
ce:40:5b:e9:9d:91:5e:26:cb:3c:5f:a0:b6:58:b0:
4a:1e:d2:ae:2d:9b:79:85:4a:5e:22:cc:de:e1:24:
e6:91:60:85:78:27:b3:71:bf:73:1a:6b:69:c8:e8:
01:33:f0:24:39:2e:cf:15:94:2f:28:09:2b:b6:34:
a1:06:fa:d9:3f:3c:6c:26:b9:3a:6d:33:95:ad:4c:
06:51:46:80:61:c6:e0:3a:79:fe:a5:03:e8:63:5f:
e6:f4:d2:62:85:68:cf:80:c7:11:2f:4e:76:48:51:
4b:1a:26:4d:f1:88:3d:83:a3:67:f3:e7:0a:9e:e1:
a1:61:91:31:3f:eb:f5:57:2f:53:59:f7:53:0b:33:
56:1e:6c:cc:f1:92:cf:3a:c5:b1:52:9c:ae:b8:06:
4e:e7:f2:d5:1a:50:19:d0:3e:cf:07:ba:c0:e3:74:
46:91:c6:c5:19:46:ea:c1:7b:d7:c4:83:25:4e:77:
d8:9c:5b:07:6f:e2:8f:1f:27:7b:bb:32:cf:23:ed:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:12:2B:35:A5:98:5C:E2:A9:5C:C9:38:D9:E6:26:A0:26:A1:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2c8SKzWlmFziqVzJONnmJqAmoUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:d4:df:e7:6f:d1:d0:89:18:a1:5b:9f:b2:5f:d9:f6:b5:2e:
c7:7d:8d:57:6f:5a:5f:36:18:a9:59:3c:f1:80:1a:d9:cf:ba:
c5:8b:a6:1d:15:b6:bc:04:a6:e8:eb:bc:b5:6c:6a:9b:c6:42:
be:92:99:fe:5a:34:d6:ce:46:f7:55:b5:2a:56:88:ab:a1:ce:
40:45:89:ee:eb:4c:35:2d:9f:ca:1f:9c:64:b8:38:bb:96:7c:
af:47:d1:d8:cc:74:42:13:56:03:51:99:87:54:93:9e:6c:c1:
fd:fa:a0:e3:18:c9:75:da:15:75:e9:6d:d2:f6:07:94:52:7b:
e1:cc:a0:38:ab:d6:83:e7:7e:72:75:16:e4:08:61:4a:42:de:
99:fd:7b:f3:de:c9:d9:7b:fd:ab:69:f5:c5:c1:6e:84:38:ef:
b0:d5:33:b4:66:23:95:f6:a8:6d:7d:9e:5e:c5:ad:c4:df:5f:
de:ba:99:cf:5e:14:80:5b:f1:04:d9:59:86:e6:68:1e:44:c0:
1c:d0:07:0c:71:97:0e:90:79:2a:2f:e8:6f:71:02:f4:c0:9c:
08:a2:cd:06:08:f8:c2:27:85:fd:29:11:c4:16:05:5e:56:3d:
1d:f4:2c:22:58:6c:4f:94:19:d3:91:5d:62:46:b2:c5:3b:25:
8d:f6:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:09:38 2025 by rpki-client