Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8KaZgAcvZSqiXR9rhjK24IdYsiE.roa
File: 8KaZgAcvZSqiXR9rhjK24IdYsiE.roa (raw, json)
Hash identifier: yfTBfLwbPj1tZGASgnLuS2cg7j/HFhT/9L65MBw6kbs=
Subject key identifier: F0:A6:99:80:07:2F:65:2A:A2:5D:1F:6B:86:32:B6:E0:87:58:B2:21
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862CDC21D71EE038C7A55BD10DCD45052A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8KaZgAcvZSqiXR9rhjK24IdYsiE.roa
Signing time: Tue 07 Feb 2023 17:11:09 +0000
ROA not before: Tue 07 Feb 2023 17:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:dc:21:d7:1e:e0:38:c7:a5:5b:d1:0d:cd:45:05:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 17:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0a69980072f652aa25d1f6b8632b6e08758b221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:ed:8e:33:69:87:ea:93:c1:d3:1c:49:50:
1a:92:c6:d6:cc:75:f3:76:72:13:28:01:b9:ef:a6:
2b:91:05:fc:a1:82:4b:9e:c8:5b:03:4e:f6:b0:fa:
b8:ad:91:a3:af:b8:76:77:b1:b0:88:a3:82:11:bd:
d3:4e:cc:e4:17:ca:cd:ff:07:c9:1d:46:e9:7d:20:
7e:75:ff:84:2d:8e:10:e4:c4:c0:ae:06:81:66:64:
fc:b6:6b:c1:03:fc:c0:09:ac:a4:f8:d0:0a:4e:42:
65:e2:3b:56:11:f0:a7:df:8f:39:f3:2f:a7:43:26:
95:05:92:a7:b1:d4:29:fe:dd:bd:e0:ac:a5:4e:74:
49:0c:43:07:a2:b8:49:52:e6:78:1e:8e:5f:22:66:
1e:15:fa:fb:09:a0:1c:72:bc:2e:d0:67:db:33:42:
7b:e4:fb:f5:14:32:33:bc:5e:8b:80:5a:01:e3:8c:
31:61:0c:40:2c:c7:74:07:dc:78:99:0a:8b:b6:8b:
2b:54:c6:4d:8d:8f:e8:7e:27:f0:e7:77:7f:5e:bd:
88:c8:04:82:4d:69:b3:e3:f8:32:a1:1b:21:7f:25:
e8:81:1a:ec:83:cd:dd:2f:6d:a4:e2:bf:21:ea:14:
a2:3d:a4:23:6f:d4:5e:d7:68:80:eb:e1:b2:44:31:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A6:99:80:07:2F:65:2A:A2:5D:1F:6B:86:32:B6:E0:87:58:B2:21
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8KaZgAcvZSqiXR9rhjK24IdYsiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:2b:dd:eb:e1:46:88:3e:8a:90:33:fe:17:97:41:6d:20:19:
a6:a0:f5:3a:60:5a:ea:f9:ae:15:bd:60:e9:dd:44:7b:55:f7:
23:e0:4a:de:21:51:c6:99:0f:fb:15:79:37:19:05:2e:2b:51:
d5:c7:45:ea:d2:06:64:fe:39:78:ec:11:25:60:e2:6c:7f:ad:
8d:96:3e:f6:26:c8:1f:cc:ef:25:4e:b7:6a:94:73:51:81:c5:
f9:d7:9e:88:bb:41:c3:01:3e:27:75:46:39:94:85:8d:ba:03:
bc:ba:95:d5:08:fd:3f:e2:2c:cb:99:e4:a5:e5:7e:e3:35:fe:
11:7f:fc:ea:7a:9d:34:f9:e0:17:b5:98:16:a1:09:e0:af:0e:
bf:9c:72:70:fe:e0:f6:ae:b8:93:8e:4a:d4:31:f7:0f:89:c7:
3c:52:eb:9a:03:24:56:b4:79:4e:79:99:63:60:3f:1c:28:ce:
bd:fd:7e:98:85:35:7c:02:7c:af:0d:68:ec:03:38:76:2f:a8:
82:a8:50:98:58:d9:c8:4b:7f:41:eb:bc:bb:23:d7:2d:2a:66:
be:9d:f9:5d:6b:95:eb:67:a4:aa:f7:44:05:c1:71:00:22:e5:
bc:e3:c9:5b:1f:c3:30:c3:a9:24:2b:ba:f1:50:bf:12:ba:f2:
a8:d3:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:49:46 2025 by rpki-client