Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8HxdZpYqpQNTX91F14S9qecBg5A.roa
File: 8HxdZpYqpQNTX91F14S9qecBg5A.roa (raw, json)
Hash identifier: CWlkbnW1w8qO5jdnJk7t6tq+n7CneEpJ4kTfSWGVY6A=
Subject key identifier: F0:7C:5D:66:96:2A:A5:03:53:5F:DD:45:D7:84:BD:A9:E7:01:83:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 760F6BA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8HxdZpYqpQNTX91F14S9qecBg5A.roa
Signing time: Sun 27 Mar 2022 05:09:38 +0000
ROA not before: Sun 27 Mar 2022 05:09:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980722081 (0x760f6ba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 05:09:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f07c5d66962aa503535fdd45d784bda9e7018390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:4b:56:f3:f8:e6:25:3e:7b:f6:89:be:bf:
f9:56:38:52:13:05:6f:dc:6c:e4:44:1d:41:85:80:
bd:ed:dd:72:38:1b:4a:9e:07:5c:ae:5d:39:6d:06:
a1:c3:d9:83:f7:99:99:be:26:7b:71:4b:7b:49:7a:
1c:da:1c:dd:a7:ce:43:21:ff:2d:79:1d:4a:32:0f:
eb:7f:de:2e:d1:9b:ef:6b:f1:db:8e:49:c2:a9:c9:
52:fa:79:1f:71:e5:10:bd:15:0e:9e:14:fa:7a:59:
3f:b0:ab:9e:43:01:a6:53:2c:5d:05:54:eb:0c:98:
55:09:de:14:9a:d6:f8:ed:08:d0:c3:c6:18:a2:bf:
c5:c7:2a:34:89:0c:2c:bb:86:2a:58:0d:5c:b1:2c:
e8:3f:a0:88:28:11:68:ff:91:fe:82:d1:ba:3a:bf:
77:87:e4:d3:17:7e:0a:45:83:2c:8d:4e:91:9e:b5:
ec:08:82:eb:37:a8:70:64:97:60:32:d3:e4:dc:33:
bc:51:93:e1:09:64:27:7a:d6:a5:d6:97:e3:b6:f3:
4c:5b:4d:e3:d3:42:19:af:86:19:f5:8a:16:23:ab:
d4:d4:5f:07:de:de:5e:08:c3:a5:67:68:cb:55:f3:
3c:fd:53:54:4f:83:2c:52:e5:09:f6:6e:5e:bd:23:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7C:5D:66:96:2A:A5:03:53:5F:DD:45:D7:84:BD:A9:E7:01:83:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8HxdZpYqpQNTX91F14S9qecBg5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:5b:22:58:92:de:d3:71:5c:63:80:44:15:67:c2:3e:50:94:
bb:ce:6a:19:00:d5:e5:cd:19:e7:fd:59:d0:0a:00:de:cc:46:
22:57:d1:04:f8:7b:fd:83:76:d8:c3:65:d7:51:95:2d:b7:ab:
da:ce:2a:fa:a2:94:5f:09:09:80:32:a6:a0:8e:5e:6e:53:8f:
65:a5:79:d3:75:86:94:ba:39:9c:63:52:d3:a6:31:e1:2b:1b:
31:5b:e8:c9:e1:b8:0b:d7:12:c7:c7:87:00:39:26:38:6b:81:
09:ce:56:35:3f:61:20:7e:b2:1f:1f:93:97:1a:4b:e2:01:f5:
dd:f1:d8:c9:d4:d5:ae:d9:f0:36:44:d1:79:b0:b7:f2:be:cf:
73:14:c3:d1:0c:dc:cf:b5:15:9f:0f:1e:f4:bf:c4:3d:bb:21:
60:f1:b1:52:44:c8:51:b6:df:10:51:7d:0a:cc:93:5e:60:0e:
b4:50:9c:fd:3a:8f:a1:8c:44:34:17:d8:82:a4:2f:72:4f:ec:
ae:a8:12:9d:76:79:9e:5a:fe:03:ac:39:42:37:e8:cb:13:7d:
52:7d:85:00:55:d3:41:a7:64:32:e5:57:43:33:c3:1b:e1:f5:
f6:4f:f9:28:3f:44:a2:bb:37:df:3b:e4:88:08:70:05:3c:0c:
92:ec:01:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:21:19 2025 by rpki-client