Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8JrelTtnCf-kHjVGfd8dOuHOHXg.roa
File: 8JrelTtnCf-kHjVGfd8dOuHOHXg.roa (raw, json)
Hash identifier: l3wZUaOmh5TokgNNq4eughZjfem7d7mYIqO5OlFnjRI=
Subject key identifier: F0:9A:DE:95:3B:67:09:FF:A4:1E:35:46:7D:DF:1D:3A:E1:CE:1D:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018823D290370544ACCB93AEFD564EE0D462
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8JrelTtnCf-kHjVGfd8dOuHOHXg.roa
Signing time: Tue 16 May 2023 09:09:42 +0000
ROA not before: Tue 16 May 2023 09:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:d2:90:37:05:44:ac:cb:93:ae:fd:56:4e:e0:d4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 09:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09ade953b6709ffa41e35467ddf1d3ae1ce1d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:3f:d1:0f:e4:f5:d4:d8:b5:78:74:3a:67:
6d:5b:6f:9b:2a:86:c1:55:91:e3:c0:b3:5e:b2:c1:
aa:67:86:49:5f:fc:cd:4d:ba:97:91:35:02:37:d6:
1f:b5:e4:da:ce:44:25:b1:65:9f:2d:90:48:2e:24:
e2:41:64:ce:57:e7:29:ff:e9:46:47:1d:23:a0:47:
c9:3c:0d:93:8b:b3:a1:ec:d7:52:fb:c8:4c:eb:64:
ec:97:de:61:22:03:f2:00:08:5b:1f:9a:18:b0:20:
71:f2:16:5b:b8:88:32:cb:6b:ee:a1:1f:a6:3b:8a:
ef:23:c5:2b:1f:04:71:b6:08:e0:08:c5:d1:13:72:
92:d3:21:cc:18:fb:49:96:c2:70:7c:33:c1:15:25:
05:a5:e9:ea:68:7e:23:91:2a:e4:7a:be:cc:8a:50:
4a:97:1c:ec:9e:2b:82:4d:48:a8:ef:76:15:0a:d8:
9d:c4:32:ab:3c:6c:5b:c8:4f:ff:16:00:93:4b:58:
94:13:13:76:2f:ee:35:6a:2d:91:1d:3e:d7:36:19:
5c:72:6e:e4:c4:17:f6:60:ef:c9:75:c8:8b:7b:4f:
6f:a5:7a:f6:96:f1:62:54:99:94:1f:ad:07:2a:e4:
de:3c:c0:a4:7e:54:03:05:1f:3f:5f:eb:e2:2f:6b:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9A:DE:95:3B:67:09:FF:A4:1E:35:46:7D:DF:1D:3A:E1:CE:1D:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8JrelTtnCf-kHjVGfd8dOuHOHXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:b1:1a:98:f7:74:df:c3:23:09:51:16:3c:0d:27:7c:56:34:
8f:60:c1:84:79:0c:24:8c:94:25:7f:b7:54:4e:00:4f:f6:24:
ac:87:77:63:22:64:d3:4e:03:7b:1e:73:4a:ae:35:44:db:5b:
d8:b9:0f:68:06:4a:f6:96:33:ac:3f:94:c9:c6:51:36:c1:f6:
ef:88:e2:5c:5a:47:e7:9c:e0:9a:dc:7e:89:6c:3f:5e:a1:fc:
b3:78:87:43:44:70:66:10:d1:f3:af:db:ca:49:f3:46:87:3c:
68:5a:ea:b1:68:4f:62:57:71:fc:d5:2f:0a:b9:0c:67:5b:e9:
61:c6:6b:16:a8:43:f7:f6:4b:9d:5f:f0:af:c3:95:15:81:11:
52:97:0e:3a:bf:3f:f1:e4:02:0d:f3:25:9c:7f:54:39:b4:ae:
21:a6:ad:f2:fd:ae:96:a5:7e:c2:4c:93:fc:21:e2:d0:5b:d7:
a2:f1:6b:ff:1d:70:77:ab:bd:9c:ec:86:59:ab:7c:18:16:9a:
f0:81:17:83:4c:da:d9:bb:17:53:4c:e2:1e:53:1c:06:03:43:
8f:ae:8f:a6:64:23:09:2f:6e:25:22:d1:0a:ee:db:af:81:25:
d8:15:6e:1f:fc:44:46:24:07:b8:92:d3:c4:77:d1:04:5f:6f:
19:f0:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:32 2025 by rpki-client