Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8H8SjPO-unfy7q5tr43UO-OCwfM.roa
File: 8H8SjPO-unfy7q5tr43UO-OCwfM.roa (raw, json)
Hash identifier: 0DcCm67EOC8XiEkXKX2OA/lDCkGNf6oRi90/hhhITUs=
Subject key identifier: F0:7F:12:8C:F3:BE:BA:77:F2:EE:AE:6D:AF:8D:D4:3B:E3:82:C1:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018235F017E99DBF261C08FFA488125D43A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8H8SjPO-unfy7q5tr43UO-OCwfM.roa
Signing time: Mon 25 Jul 2022 15:18:23 +0000
ROA not before: Mon 25 Jul 2022 15:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:35:f0:17:e9:9d:bf:26:1c:08:ff:a4:88:12:5d:43:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 15:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f07f128cf3beba77f2eeae6daf8dd43be382c1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cf:e0:fe:8b:0d:1f:98:37:41:69:8a:95:52:
0c:a4:9a:3c:a8:00:28:5d:e5:64:ac:f5:96:65:59:
c1:49:e8:52:ed:95:04:4c:63:42:ee:ee:69:43:f5:
c9:58:ea:4a:a3:52:76:a1:e2:65:be:68:d5:4c:a5:
aa:cb:9e:65:06:78:f8:09:dc:c1:e8:96:f2:0d:7e:
67:12:b6:4d:03:31:8f:3b:3a:8e:b4:3d:75:76:5b:
5a:10:4c:e3:46:fc:db:c2:df:6d:7b:a1:01:81:ef:
60:44:9f:64:3c:6a:c9:30:0f:93:c1:38:b0:24:50:
e0:13:23:d6:01:a5:5d:6d:82:c6:1a:83:a8:7c:1f:
7a:f1:84:7b:ce:20:f4:5e:45:bd:13:35:e1:32:65:
2d:5d:78:67:a8:78:62:61:c1:2a:64:89:ce:3e:45:
f6:8b:8b:b6:b2:0d:13:f7:59:d1:fd:8f:8b:a0:c4:
3c:6b:91:a5:6b:16:38:16:95:ca:94:04:f7:e4:b2:
38:d0:e4:b3:6b:a6:c0:fd:f8:c6:83:8b:d3:eb:ca:
e4:c9:21:ca:69:44:07:13:14:b9:25:d8:1b:ea:e5:
f3:e9:82:f6:85:3d:1d:36:ad:2d:e9:b2:51:f6:ed:
af:a6:9d:40:f0:7d:e1:b4:87:e7:4e:1d:d2:70:2f:
08:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7F:12:8C:F3:BE:BA:77:F2:EE:AE:6D:AF:8D:D4:3B:E3:82:C1:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8H8SjPO-unfy7q5tr43UO-OCwfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:9d:15:bf:47:11:f9:09:5c:c2:98:0e:50:58:70:0c:20:d1:
cd:8b:29:2d:e8:01:75:18:63:e6:5f:33:0a:66:06:f7:7e:1e:
cf:b7:a4:bc:65:b8:25:94:0a:17:31:d4:88:23:4a:4e:e4:ec:
05:28:ad:e9:b3:19:7f:f9:8b:61:12:ec:45:b7:10:e5:4e:6f:
19:04:c4:41:af:b7:b9:07:05:e4:77:5a:b6:fa:01:f1:c5:8c:
ea:30:73:9b:14:09:66:37:83:ca:ed:25:e4:f1:f2:55:5d:f2:
80:68:4f:3d:e3:14:ae:11:31:69:be:03:12:9a:08:02:01:74:
87:6e:15:d1:df:21:29:c3:9a:97:68:2c:3d:94:c2:1a:4b:07:
76:1d:e3:6a:7a:06:af:b0:6c:9a:3b:91:13:36:a4:93:3e:d2:
64:cc:4d:bc:a8:77:13:13:c0:b4:26:63:76:21:2c:69:fc:97:
7e:2b:6d:cb:c4:66:39:8e:1c:56:79:72:55:e4:f6:88:00:b1:
48:00:d2:4a:c3:ce:f7:a8:ad:9d:e7:2d:41:65:03:80:5e:6a:
1b:35:1e:9e:93:53:1d:b0:72:cc:d6:da:7e:c3:8e:97:24:fc:
8c:3d:c3:77:75:ba:48:3d:76:0f:8b:b9:c4:25:9b:ea:c0:18:
d5:f5:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:44:39 2025 by rpki-client