Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8KrLXlThHXC4l7MbycKNYpTRv14.roa
File: 8KrLXlThHXC4l7MbycKNYpTRv14.roa (raw, json)
Hash identifier: KtJdLayo5FP5BSLe357sOShU8Al2U9gDOWT0Lju3KtU=
Subject key identifier: F0:AA:CB:5E:54:E1:1D:70:B8:97:B3:1B:C9:C2:8D:62:94:D1:BF:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018598FE464940B87CF4605CB8735207D525
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8KrLXlThHXC4l7MbycKNYpTRv14.roa
Signing time: Tue 10 Jan 2023 00:04:39 +0000
ROA not before: Tue 10 Jan 2023 00:04:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:98fd:ec71/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:98:fe:46:49:40:b8:7c:f4:60:5c:b8:73:52:07:d5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 10 00:04:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0aacb5e54e11d70b897b31bc9c28d6294d1bf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:d4:63:d2:7e:17:f0:2c:7b:72:56:fb:22:
e5:2f:df:bc:c3:6d:51:ea:35:a7:45:ba:0b:54:2c:
ac:c5:02:87:2d:7b:c2:18:7c:0a:a0:10:37:5b:8f:
9d:2d:33:dd:c5:66:0b:fb:39:be:b2:8f:09:af:67:
39:b2:4a:1f:fc:d4:23:81:6b:11:0c:6d:88:56:cc:
f2:97:c5:91:f1:d8:26:75:f5:db:05:09:e2:0c:80:
5d:44:13:8a:af:31:c4:91:ac:94:86:cb:40:a7:63:
fc:15:42:f8:6c:4c:b3:bd:d6:b5:8d:1a:3a:84:fa:
51:52:fa:aa:44:33:96:2c:cb:98:f1:4b:25:f6:15:
8a:bb:b7:aa:db:73:65:d7:7e:a8:d1:24:d2:81:fb:
e2:83:15:02:a9:5d:2a:19:25:bf:7e:6f:10:ef:4e:
3c:3a:fa:e1:ef:78:12:16:2b:97:01:d9:d3:88:0c:
ff:15:b5:34:5b:6d:63:b2:70:a5:de:02:94:81:40:
bb:ab:d1:46:27:69:6a:e9:ba:6c:97:f3:f5:c3:11:
fb:58:51:c1:22:50:e3:d6:ce:51:e2:0e:d6:e4:41:
dd:ec:07:7c:4e:a7:2b:b6:ad:dd:f1:5f:22:5b:c9:
23:90:ef:b1:ac:ef:4e:08:30:4c:46:a7:3a:fd:a5:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AA:CB:5E:54:E1:1D:70:B8:97:B3:1B:C9:C2:8D:62:94:D1:BF:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8KrLXlThHXC4l7MbycKNYpTRv14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:a7:10:e3:1e:d5:1f:76:11:e6:78:f4:3e:c4:89:c5:a5:88:
7d:47:8b:f0:73:87:9a:6e:ac:bb:05:59:b9:ce:87:63:6d:77:
2b:cf:d5:e4:c7:0e:52:57:9a:bd:d2:9b:d2:23:d2:96:78:52:
07:40:60:f4:f2:5c:d2:1c:28:70:f1:0a:55:2b:f0:1a:6e:11:
54:2e:2c:01:09:e0:7f:1d:82:97:9d:9e:f8:2a:0f:e5:c3:d8:
4e:b3:91:44:65:2a:ba:b4:4a:62:00:b6:2f:6d:20:9d:27:76:
a8:43:f9:a0:09:72:97:c9:82:d2:e5:b3:3b:45:8a:38:b4:ed:
e9:c7:15:98:a2:d1:de:de:b5:29:c0:05:73:5f:c3:61:fb:54:
cf:cc:1f:07:f5:13:e0:36:7a:f1:89:2c:6b:3d:4c:68:1f:46:
e5:1e:b6:f7:37:b4:79:5a:00:15:9a:ee:0e:84:f4:b7:92:22:
6b:cd:00:61:bc:62:f6:9c:04:89:87:d7:51:24:f3:19:43:f6:
85:12:f7:99:db:f5:d9:14:b8:5a:12:5b:54:2c:cb:b0:c7:a5:
eb:e9:ff:93:46:22:ac:72:32:ee:f7:49:0d:84:2d:72:71:df:
d7:e5:9f:ab:48:a7:f7:73:bd:d8:7f:bb:58:b1:e5:8b:54:34:
56:c9:64:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:34:12 2025 by rpki-client