Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8I79ZzeVePCbTYfsJqItOG9-S3U.roa
File: 8I79ZzeVePCbTYfsJqItOG9-S3U.roa (raw, json)
Hash identifier: +qgHDTT/hQNrS/SZSxxi2G5yLsePGRKWseTvIhveLaM=
Subject key identifier: F0:8E:FD:67:37:95:78:F0:9B:4D:87:EC:26:A2:2D:38:6F:7E:4B:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BFDEACBC46C532CF731124A2DC968602
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8I79ZzeVePCbTYfsJqItOG9-S3U.roa
Signing time: Tue 17 Jan 2023 13:15:19 +0000
ROA not before: Tue 17 Jan 2023 13:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:de:ac:bc:46:c5:32:cf:73:11:24:a2:dc:96:86:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 17 13:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f08efd67379578f09b4d87ec26a22d386f7e4b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:18:af:6c:36:38:f1:1e:6d:e6:13:98:76:ac:
18:0c:1e:27:02:48:43:7d:81:f4:14:cb:ef:d1:f5:
17:4a:73:5d:a9:4a:f3:46:92:46:2e:4c:6f:77:19:
c4:3e:62:d7:9a:84:05:a3:9c:87:91:c5:0c:60:a7:
3b:fe:39:9b:f1:ee:9c:7e:c5:b6:94:3f:8e:d5:6f:
8a:50:2d:44:e4:9c:db:0d:a8:b2:f4:57:0e:c4:ad:
17:a0:1f:ab:4b:98:be:20:ec:ab:2a:9d:ed:47:ea:
1e:80:21:9b:4b:4f:3e:76:67:f0:b5:5a:9b:99:47:
db:b6:73:0e:b9:fb:4a:06:28:5f:33:b6:c1:60:e4:
bd:eb:78:d0:90:3e:7d:44:38:50:43:68:e2:d5:fd:
5c:52:de:ae:d0:13:83:7a:06:75:38:fc:0b:e4:b4:
74:f0:b7:11:ab:a7:65:71:5f:2d:eb:b6:64:b2:78:
fd:54:50:80:f4:df:1e:04:b1:2c:13:26:61:82:95:
94:30:83:bb:e1:55:ef:0e:4b:02:fd:fc:df:2e:19:
17:ef:c5:cc:5a:f7:d7:92:a7:08:b8:09:b5:79:3c:
15:00:b4:78:7f:d5:fa:b9:bb:a5:87:fa:03:70:94:
df:0f:64:d3:19:66:50:d4:f4:e3:56:0c:54:0f:ad:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8E:FD:67:37:95:78:F0:9B:4D:87:EC:26:A2:2D:38:6F:7E:4B:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8I79ZzeVePCbTYfsJqItOG9-S3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:f9:60:e7:22:19:d5:10:69:0d:4a:7e:25:77:7e:48:a4:32:
a6:1e:d0:f0:e2:db:4e:1e:cf:51:0a:bc:03:9b:0c:d8:85:5b:
e4:d0:66:b9:c2:ed:95:e6:7c:66:53:d6:8b:da:a8:c8:45:9e:
c2:da:23:07:0c:cc:a3:78:2f:0c:04:84:93:06:11:17:90:01:
94:c3:64:88:81:39:c9:e0:96:dd:17:ea:bf:8f:96:9d:59:41:
62:73:70:e2:7c:e1:a6:db:27:94:3f:6b:be:07:d5:2e:4b:21:
84:9b:84:3a:bc:ca:f1:0a:3d:88:2b:2a:76:d8:59:e9:34:11:
b5:86:14:43:61:65:32:38:e5:e9:9b:b5:bf:fc:aa:c6:85:95:
63:02:77:a9:9f:b8:13:a2:c3:8f:78:96:13:20:f2:aa:d6:98:
11:c4:9b:06:0c:e7:95:8b:8c:8a:da:b3:8b:54:91:c5:ee:a2:
5e:78:2d:0a:82:59:c5:93:e6:05:15:34:f3:6a:45:d9:ae:12:
a4:03:5a:f9:a2:fa:88:95:b3:49:07:d9:58:19:7b:ce:9e:8b:
01:bd:ba:0f:6b:9f:36:be:6a:3f:82:cd:a8:0e:1f:a8:dd:8d:
07:6d:34:79:23:4e:09:dc:9e:76:01:89:67:02:b4:12:41:7a:
2b:21:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:01 2025 by rpki-client