Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8FZ8Ban3et1wqaDZBpHcO869IRg.roa
File: 8FZ8Ban3et1wqaDZBpHcO869IRg.roa (raw, json)
Hash identifier: RLpheG7xr2IOoE0pLVUigzd7rE9ue1+CdqYeqmzGwpY=
Subject key identifier: F0:56:7C:05:A9:F7:7A:DD:70:A9:A0:D9:06:91:DC:3B:CE:BD:21:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7AE6EFCE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8FZ8Ban3et1wqaDZBpHcO869IRg.roa
Signing time: Wed 13 Apr 2022 10:04:38 +0000
ROA not before: Wed 13 Apr 2022 10:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:2261:d3a5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061955022 (0x7ae6efce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 10:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0567c05a9f77add70a9a0d90691dc3bcebd2118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:27:69:d9:51:23:c6:31:00:b9:d0:9c:cf:
e0:4a:5a:7a:e8:ce:98:02:34:df:89:d0:45:36:a6:
77:e0:3e:c4:61:f4:8e:f6:0c:3e:34:56:f9:ae:33:
0b:7e:44:d6:dd:29:c7:9c:3b:b6:e4:fd:93:28:0c:
00:00:7c:b2:3d:79:09:86:66:b8:61:32:30:7d:45:
9e:30:7b:71:f6:e4:4e:54:1d:58:e8:a7:bd:c1:61:
5e:a7:a6:e8:d6:9b:0d:26:97:00:42:fc:c5:58:c6:
da:8b:d0:27:85:74:c8:24:c9:13:45:27:6c:69:48:
39:31:b4:89:7a:49:07:70:96:a9:36:15:55:d6:15:
35:74:a1:03:28:a7:e8:50:65:86:fc:ae:46:86:46:
84:8b:b6:2d:6e:c4:58:7d:e6:6d:d5:a7:e8:3d:fd:
05:a3:bb:57:38:0e:07:11:89:94:75:40:e1:a3:a6:
6d:91:5a:d0:ac:84:08:b6:3d:d2:52:59:b6:ac:60:
bc:84:9e:bc:9e:07:d7:fb:fd:6f:90:82:94:c3:d2:
1c:93:4c:6d:11:91:2c:c5:6d:ce:a0:48:ff:ce:f5:
f4:9b:df:00:4c:67:c1:7c:db:c6:1e:bc:fa:1a:f2:
63:60:78:84:99:02:43:c0:ff:01:20:e3:cb:c2:60:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:56:7C:05:A9:F7:7A:DD:70:A9:A0:D9:06:91:DC:3B:CE:BD:21:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8FZ8Ban3et1wqaDZBpHcO869IRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:67:8e:16:1d:b6:b1:f5:4e:4d:b2:5e:4f:56:d0:42:f0:62:
73:23:8d:0d:5e:42:fb:44:a1:b1:78:0a:42:94:44:04:b2:a0:
25:73:5e:50:6b:75:c0:80:4c:48:c2:a8:76:63:50:0e:65:d1:
ae:a8:14:33:d6:e5:63:fd:bd:dc:cb:53:49:95:79:f0:ac:4c:
75:43:f9:30:8c:09:fa:ee:61:d9:36:cc:89:c6:fe:97:2e:cd:
18:b7:06:43:35:57:6f:be:a8:2a:9b:90:84:fa:64:34:71:d2:
d1:e6:dd:9f:9a:82:05:48:49:50:7f:f0:60:1f:b1:27:3e:f1:
37:65:76:ba:0d:43:13:a7:d4:ca:d8:a1:0a:bd:e7:14:21:7a:
1b:0f:2c:5a:db:9f:1f:00:5f:e6:07:7f:36:85:32:63:f4:03:
6c:b5:75:3a:ac:3b:71:1b:ee:23:a2:d2:dd:4c:db:51:be:06:
6d:b0:70:d4:23:a2:ec:3a:bc:30:8b:83:6f:8b:fc:ee:cf:f3:
55:40:f8:e3:9e:83:1a:d3:9e:4d:ce:52:e9:30:88:a3:94:82:
6f:f6:ae:94:cb:9d:68:0c:ed:e8:f4:90:e8:2f:b0:21:0b:44:
be:7d:c6:32:2d:f0:9b:1b:34:0e:99:ad:c2:93:22:e2:7f:c7:
e3:f9:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:42:52 2025 by rpki-client