Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8-AsQeksJ4muaJcVRxZ4kkUqbbk.roa
File: 8-AsQeksJ4muaJcVRxZ4kkUqbbk.roa (raw, json)
Hash identifier: kPZG2o/eTQum0Ei/YFflNKpyaMiHA9zKQ/999v47GnY=
Subject key identifier: F3:E0:2C:41:E9:2C:27:89:AE:68:97:15:47:16:78:92:45:2A:6D:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184AC5A513C7230C48918C6D2190F1842D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8-AsQeksJ4muaJcVRxZ4kkUqbbk.roa
Signing time: Fri 25 Nov 2022 01:15:10 +0000
ROA not before: Fri 25 Nov 2022 01:15:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ac:5a:51:3c:72:30:c4:89:18:c6:d2:19:0f:18:42:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 25 01:15:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3e02c41e92c2789ae68971547167892452a6db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:fc:33:59:a5:2e:0a:38:e0:30:d6:d1:ea:
cc:e6:e8:f0:c2:aa:70:66:97:42:8a:f7:a4:bf:b8:
84:90:17:99:77:a4:71:27:f6:e3:00:6a:ac:04:f2:
26:c9:1d:bc:8e:7a:52:8f:7e:c5:59:ad:d5:74:e2:
43:f3:97:58:ae:08:b0:c3:79:8f:ea:5a:e9:0d:7b:
6c:fa:e2:7d:26:ca:12:8c:7c:47:1e:67:a9:42:31:
42:eb:79:5b:9b:6f:8b:a8:46:3e:a6:af:94:73:b3:
48:f6:ea:8d:fb:59:5f:b4:3a:5d:af:f3:34:bc:a3:
b1:31:74:eb:4e:17:1c:e8:af:1e:80:0e:73:f4:3b:
a3:77:56:c4:68:04:fd:dd:b6:99:ef:e8:bd:8c:64:
c0:df:f4:8a:23:5c:ff:0b:3a:27:55:a4:0e:d5:c9:
1a:72:9c:1f:fc:cb:ee:bc:ec:5b:fc:24:7f:4b:25:
5a:b8:da:0c:48:c7:cf:5f:8b:e3:85:27:05:0f:78:
e0:cb:cb:c3:22:7d:cb:f9:8e:0c:ff:82:6f:2c:47:
21:4e:5a:de:ae:8a:c1:08:f1:86:a3:7a:e8:fd:f4:
2d:60:fa:d9:f6:90:b5:4b:98:a3:98:90:07:fe:75:
37:aa:ba:2d:89:aa:7d:a0:bd:3c:1f:17:00:ba:86:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E0:2C:41:E9:2C:27:89:AE:68:97:15:47:16:78:92:45:2A:6D:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8-AsQeksJ4muaJcVRxZ4kkUqbbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:95:b9:4e:40:36:28:04:a3:54:5e:73:38:6c:95:70:77:18:
de:88:3a:23:6f:04:76:75:f0:3c:c2:f3:e3:ee:49:34:29:70:
d7:e5:4c:9a:45:42:4f:b6:71:83:0a:e3:79:58:34:dc:b0:69:
52:01:b9:fe:b3:4e:82:46:22:93:b8:ee:82:85:55:bf:69:24:
c5:b8:28:08:e7:0a:07:8a:5a:32:c8:28:33:25:a7:1a:c6:fb:
bd:b4:d7:67:9d:eb:20:4e:84:69:4c:dc:7c:da:54:b0:1d:66:
56:4b:87:b5:fa:9f:7c:2e:82:71:ee:08:0f:c0:a2:b0:2a:b9:
8c:5c:84:06:9f:84:dd:56:ee:c9:c3:bd:47:6c:3b:03:c3:b8:
0e:13:9c:21:c4:95:07:cd:e6:50:81:50:3e:02:67:f6:5b:f7:
87:71:0c:fa:68:38:33:10:29:76:e5:f8:17:ea:36:3a:70:31:
a1:77:07:8f:aa:72:53:ee:89:e4:a5:d0:50:11:c2:45:8c:26:
eb:01:c6:5f:c8:8e:f4:4b:03:cd:7c:7e:33:d7:0e:d2:96:24:
a9:14:02:b5:4a:87:54:a5:3d:11:8b:52:6f:9f:90:42:77:ee:
65:e0:05:28:78:41:22:33:7d:89:0f:af:58:cd:95:57:f7:cf:
5a:b3:78:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:25:16 2025 by rpki-client