Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8-vg-N4MH8kdiSaiG_SXZJfdAZM.roa
File: 8-vg-N4MH8kdiSaiG_SXZJfdAZM.roa (raw, json)
Hash identifier: O7sfp4i1CTmIX9XjMwJ7czE4ozP1WN2Y9b/zLLH6zB8=
Subject key identifier: F3:EB:E0:F8:DE:0C:1F:C9:1D:89:26:A2:1B:F4:97:64:97:DD:01:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866C96F4A3F4013BAC9FA8167F48264D51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8-vg-N4MH8kdiSaiG_SXZJfdAZM.roa
Signing time: Mon 20 Feb 2023 02:11:17 +0000
ROA not before: Mon 20 Feb 2023 02:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6c:96:f4:a3:f4:01:3b:ac:9f:a8:16:7f:48:26:4d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 02:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3ebe0f8de0c1fc91d8926a21bf4976497dd0193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:c6:cd:33:71:1c:8b:1f:34:eb:da:ac:87:
0d:98:03:96:4b:d1:5c:13:95:f2:47:ef:b2:c6:7e:
51:f8:7a:0e:9c:42:28:d8:75:92:04:dd:af:8e:27:
ef:e7:0b:40:22:b7:08:3d:d7:d1:3b:c5:6f:77:eb:
dc:78:ba:39:3a:db:ae:99:68:44:6b:44:4c:73:ba:
d3:83:f9:da:89:b6:96:d9:e6:43:a0:8d:18:48:4d:
8d:75:88:7f:67:e3:08:fd:e3:b4:d1:f0:39:b1:61:
db:e9:eb:7b:80:e3:eb:90:0d:5a:25:1e:d7:ed:88:
7d:18:69:ff:10:8d:47:b5:fc:e4:19:56:3a:cb:5e:
50:eb:2a:e0:f0:d7:9c:22:f3:9c:73:6f:ef:02:a5:
3e:1d:8a:ef:ab:9d:bd:bf:83:f8:16:98:6a:0d:64:
ee:db:72:67:33:8a:2d:20:82:17:a7:70:d6:f2:f3:
2d:32:90:db:e5:c4:b6:88:a3:f8:7a:62:56:62:55:
2c:55:08:7d:b4:b8:26:4e:7e:10:1e:13:63:78:40:
69:07:0e:45:3c:e5:2d:7d:67:13:94:83:ae:68:e7:
1b:d5:4c:68:b9:ea:16:c6:51:6c:f4:9f:b3:30:dc:
db:0d:c6:80:10:5b:21:64:01:49:9f:c6:76:48:d9:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:E0:F8:DE:0C:1F:C9:1D:89:26:A2:1B:F4:97:64:97:DD:01:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8-vg-N4MH8kdiSaiG_SXZJfdAZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:fe:72:28:40:d0:6e:92:ad:8f:e9:7d:66:bb:71:a8:6e:29:
f9:be:1a:aa:74:82:d4:2c:d0:14:55:09:8c:f8:8a:60:f4:49:
20:be:17:3d:b9:d7:bc:f8:7b:45:4f:e2:70:77:13:8f:2e:83:
97:83:81:4f:ad:78:39:c8:99:48:33:d2:6e:96:c0:04:62:aa:
17:22:c5:bc:78:25:80:b6:59:1d:89:1d:14:91:a0:7a:63:df:
bc:f0:9c:ff:96:66:e1:88:b2:22:de:81:8b:ad:da:14:21:8c:
b9:00:2a:dd:5c:42:7c:c1:6d:04:f9:cd:f7:2d:2d:b2:66:24:
8a:91:94:47:09:90:59:9d:90:9c:8e:64:f2:11:3b:a0:e7:cb:
dd:3c:54:5b:59:17:40:61:ce:85:4d:1a:61:6b:02:1b:f8:d8:
fd:41:bf:65:ca:50:a3:1f:37:c5:be:2c:a4:52:7d:86:5f:8f:
97:36:d0:a6:63:36:0e:bf:37:95:7b:a1:dc:ad:9f:50:06:27:
30:1e:24:20:01:5a:b0:f7:80:2d:32:c9:6c:50:89:50:d5:43:
2b:a3:3c:1b:9a:aa:30:bf:bc:5b:75:55:6d:33:fb:62:a1:6e:
a8:57:04:b3:c5:91:a9:ed:53:99:57:65:55:a8:a6:a3:35:10:
5c:50:09:b1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZslvSj9AE7rJ+oFn9IJk1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIwMDIxMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2ViZTBmOGRlMGMxZmM5MWQ4OTI2YTIxYmY0OTc2NDk3ZGQwMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb7GzTNxHIsfNOvarIcNmAOWS9Fc
E5XyR++yxn5R+HoOnEIo2HWSBN2vjifv5wtAIrcIPdfRO8Vvd+vceLo5OtuumWhE
a0RMc7rTg/naibaW2eZDoI0YSE2NdYh/Z+MI/eO00fA5sWHb6et7gOPrkA1aJR7X
7Yh9GGn/EI1HtfzkGVY6y15Q6yrg8NecIvOcc2/vAqU+HYrvq529v4P4FphqDWTu
23JnM4otIIIXp3DW8vMtMpDb5cS2iKP4emJWYlUsVQh9tLgmTn4QHhNjeEBpBw5F
POUtfWcTlIOuaOcb1UxoueoWxlFs9J+zMNzbDcaAEFshZAFJn8Z2SNnCoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPPr4PjeDB/JHYkmohv0l2SX3QGTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOC12Zy1ONE1IOGtkaVNhaUdfU1haSmZkQVpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHn+cihA0G6SrY/pfWa7
cahuKfm+Gqp0gtQs0BRVCYz4imD0SSC+Fz2517z4e0VP4nB3E48ug5eDgU+teDnI
mUgz0m6WwARiqhcixbx4JYC2WR2JHRSRoHpj37zwnP+WZuGIsiLegYut2hQhjLkA
Kt1cQnzBbQT5zfctLbJmJIqRlEcJkFmdkJyOZPIRO6Dny908VFtZF0BhzoVNGmFr
Ahv42P1Bv2XKUKMfN8W+LKRSfYZfj5c20KZjNg6/N5V7odytn1AGJzAeJCABWrD3
gC0yyWxQiVDVQyujPBuaqjC/vFt1VW0z+2KhbqhXBLPFkantU5lXZVWopqM1EFxQ
CbE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:12:56 2025 by rpki-client