Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8CmRXE-Cinz6lYdoFiDO1qbSn7k.roa
File: 8CmRXE-Cinz6lYdoFiDO1qbSn7k.roa (raw, json)
Hash identifier: HgK69/68oArFGp72LQPBRIbIWBldiVLcVOJGicPKZBk=
Subject key identifier: F0:29:91:5C:4F:82:8A:7C:FA:95:87:68:16:20:CE:D6:A6:D2:9F:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181EE74545225F6CE7AE6B262F1BB8AF003
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8CmRXE-Cinz6lYdoFiDO1qbSn7k.roa
Signing time: Mon 11 Jul 2022 18:10:09 +0000
ROA not before: Mon 11 Jul 2022 18:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ee:74:54:52:25:f6:ce:7a:e6:b2:62:f1:bb:8a:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 18:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f029915c4f828a7cfa9587681620ced6a6d29fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:15:5f:20:1b:bb:e9:fb:ba:1e:96:3b:fe:
31:1a:6a:f7:0d:6f:81:03:92:a1:f0:61:03:15:ca:
64:76:16:b0:90:28:85:d0:42:ad:3f:06:35:fb:b8:
b4:ae:98:23:6b:93:f3:ab:5a:cb:04:52:7c:ab:91:
03:48:00:d9:f1:0e:29:71:bc:62:37:21:57:be:4a:
12:a9:c7:8c:0f:27:81:38:33:95:0d:5c:f8:c4:f1:
e7:e0:35:c6:02:50:5b:da:b2:61:f1:51:e6:a0:f9:
df:40:71:87:7f:92:33:2e:a0:6e:fa:bd:2a:5f:40:
5a:d6:6c:ce:11:a9:79:9e:3b:5b:3d:26:f7:f5:7e:
d2:83:9a:76:3d:60:4d:4c:2e:fe:54:4d:de:50:42:
79:11:51:e2:53:b6:dd:ed:cd:96:90:e5:64:21:59:
57:b5:1d:fd:9d:92:f8:d1:6d:13:80:fe:fd:72:88:
c8:dc:aa:df:28:8f:77:8e:33:2c:9f:fc:bd:b9:15:
b4:04:62:d1:e2:44:9b:a8:7f:fd:f0:fc:8b:a3:53:
05:a3:5f:8a:76:77:6d:66:90:00:b8:78:9e:21:41:
2a:9f:f5:07:f0:65:c3:c1:1a:fe:cc:1f:d4:66:e8:
b1:d4:34:fd:d0:1c:e1:fd:2c:55:11:d0:42:78:e5:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:29:91:5C:4F:82:8A:7C:FA:95:87:68:16:20:CE:D6:A6:D2:9F:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8CmRXE-Cinz6lYdoFiDO1qbSn7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:c4:80:5c:40:39:fb:e8:95:38:f4:d7:9f:49:25:e9:31:77:
5b:00:09:32:a8:e1:8f:5c:7b:83:ab:81:2c:8d:93:30:de:07:
9c:3e:3f:2e:f6:39:e7:96:6c:93:25:d2:7a:a4:b9:f4:50:10:
a3:ce:6e:38:f5:04:65:40:59:d3:66:1a:13:8a:d6:3a:21:6a:
c3:4c:81:96:a3:96:83:8f:69:9f:79:8f:ee:25:08:e2:2d:fc:
75:cc:00:7f:bb:17:be:ea:4d:a8:33:d6:87:8e:30:96:fb:47:
a4:0a:00:31:a5:5f:0c:8f:ef:6b:91:af:12:ad:b6:b8:06:cb:
9c:62:2a:8b:49:7d:7d:9a:00:f9:c4:18:cb:07:2b:a8:62:10:
15:bb:b8:3e:92:f5:5a:ec:7c:25:5c:99:a5:cf:c3:91:e5:4e:
47:45:c4:52:0a:9b:94:16:22:95:16:fc:12:6a:46:d5:60:af:
26:ac:a6:4e:96:9b:51:e8:3d:81:da:2a:4d:fb:58:a5:54:e2:
ef:13:9f:98:16:90:87:38:18:d4:17:70:65:26:89:26:b0:0b:
cf:98:47:40:f5:c2:44:ff:44:96:9a:2a:fd:7c:dc:08:e5:c6:
77:8d:b2:40:9a:63:ce:ae:a3:88:85:14:7e:5f:4c:ca:91:c1:
c7:7f:92:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:58 2025 by rpki-client