Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8K7id58Vva_1sEBkOu2O1k-EmZI.roa
File: 8K7id58Vva_1sEBkOu2O1k-EmZI.roa (raw, json)
Hash identifier: tOR8FK/JoS5NBxEYDiXJTixS4rWmzVA8f47AyvN9OV8=
Subject key identifier: F0:AE:E2:77:9F:15:BD:AF:F5:B0:40:64:3A:ED:8E:D6:4F:84:99:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79863BB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8K7id58Vva_1sEBkOu2O1k-EmZI.roa
Signing time: Fri 08 Apr 2022 13:10:21 +0000
ROA not before: Fri 08 Apr 2022 13:10:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038840242 (0x79863bb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 13:10:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0aee2779f15bdaff5b040643aed8ed64f849992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:ec:bd:58:df:26:73:f4:81:c6:03:19:39:
30:3d:35:1c:ce:3a:a3:79:10:40:c5:6a:02:67:1a:
e7:a2:39:53:61:ec:9d:1c:93:27:6d:49:2b:d9:d1:
43:6f:4d:64:06:dd:69:02:e8:3f:ce:87:12:1b:45:
3d:bb:db:48:a9:7a:b8:ac:08:4a:6b:34:21:2f:fb:
70:1d:8f:cd:26:56:2a:ef:37:03:cb:51:66:00:b3:
ea:d5:01:9a:7e:25:94:de:81:70:b8:d4:7f:c7:08:
9c:82:eb:56:14:9c:11:e0:7a:92:fe:2b:48:7c:73:
18:63:6f:06:59:47:17:25:9f:a2:0d:f9:65:ad:f2:
16:1e:e7:60:69:91:dc:0c:9d:cb:99:c6:fa:e6:86:
37:c0:9f:82:cf:7b:03:82:96:4c:44:81:b9:67:14:
37:aa:b1:08:a7:8d:3a:28:63:a7:55:78:1b:eb:32:
63:68:f2:89:cc:2c:48:b8:5d:1a:b1:99:47:9a:3f:
f5:0f:73:01:d3:03:20:9c:b9:3c:93:26:7c:4c:5b:
50:10:09:8a:37:5a:3e:6a:67:37:21:f3:d6:85:97:
50:dd:45:a4:5e:1e:1f:b1:92:78:28:c2:ed:cf:63:
d6:eb:4a:94:0e:b3:5e:ab:8f:eb:ab:fe:c6:2e:84:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AE:E2:77:9F:15:BD:AF:F5:B0:40:64:3A:ED:8E:D6:4F:84:99:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8K7id58Vva_1sEBkOu2O1k-EmZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:a2:89:3d:9a:ef:30:82:35:04:21:06:84:57:5a:6b:cf:f9:
9b:44:c7:1f:10:be:ed:c3:9b:dd:d6:74:ab:11:df:84:6b:6c:
b3:ee:76:68:d9:37:1a:99:7a:1a:7c:1b:35:d6:f5:6b:c8:e3:
02:0d:00:3d:34:ff:d2:5a:07:26:a9:d7:b8:fd:15:69:db:7a:
55:25:70:ec:1e:de:eb:06:c3:12:90:97:ae:d9:82:52:12:cc:
32:89:07:7e:a8:c3:50:7d:f1:55:ec:18:35:cf:00:6f:3f:89:
be:c4:20:5b:83:6a:67:60:d6:4c:1d:bc:96:ca:c7:07:68:1e:
ec:b4:29:97:b4:3b:f9:4e:6b:83:7c:37:07:b2:bf:90:e1:4b:
3c:33:9f:d6:c6:8d:b4:e8:49:78:d0:51:6c:50:c3:69:0e:08:
bd:33:4a:a6:f6:06:ae:18:00:a8:e1:a4:a6:5c:86:b3:b0:6c:
d2:54:9c:f8:fd:55:23:c7:30:1b:7f:e2:45:ae:0c:7a:57:b9:
04:40:ab:b2:83:fc:5d:6a:62:82:a5:be:fe:9f:d9:c7:b0:24:
b5:cd:a2:fb:88:4c:d1:64:79:a4:b3:f4:e3:16:f1:5e:6d:50:
da:79:8f:85:a8:0e:90:02:c2:a2:e9:3b:cf:fc:62:34:2c:03:
63:51:3c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:56:34 2025 by rpki-client