Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8L1GbUf8rHuFAkH_S1q4Liw1Bio.roa
File: 8L1GbUf8rHuFAkH_S1q4Liw1Bio.roa (raw, json)
Hash identifier: 60y73pxy2O9hdq6PNWwRWrLPIY28uGXzAIlq9mbUgjA=
Subject key identifier: F0:BD:46:6D:47:FC:AC:7B:85:02:41:FF:4B:5A:B8:2E:2C:35:06:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01844B28E312FA9E56CA84BC3E01CC37FB21
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8L1GbUf8rHuFAkH_S1q4Liw1Bio.roa
Signing time: Sun 06 Nov 2022 04:18:01 +0000
ROA not before: Sun 06 Nov 2022 04:18:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4b:28:e3:12:fa:9e:56:ca:84:bc:3e:01:cc:37:fb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 6 04:18:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0bd466d47fcac7b850241ff4b5ab82e2c35062a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:49:a8:e1:f2:f2:ef:25:2e:93:77:89:6c:
00:da:09:b3:b9:8b:f9:47:dc:27:5c:d4:60:fe:14:
0d:9c:89:4e:c5:af:f0:8e:b8:16:df:59:cc:ed:9e:
48:ee:d5:1f:53:a8:2e:a9:4e:6f:fe:63:27:bd:36:
6b:c8:58:3d:8c:c8:3d:d4:08:6c:b9:57:28:36:9c:
5d:3f:80:4e:1d:02:15:06:0f:3b:ac:73:92:2e:a4:
c4:9e:3f:a9:4a:77:79:41:1f:52:24:f1:e7:c9:bb:
4c:81:c4:e8:c6:3c:c3:fd:d9:29:41:f1:77:bc:ae:
cb:ea:2b:76:52:9d:8a:ac:7d:a2:ac:99:f2:21:41:
29:a1:9e:8e:ce:2d:80:c1:eb:b1:f0:05:18:35:fb:
a0:e7:fd:50:86:a9:79:83:4d:7c:95:e5:fc:8a:78:
f9:dd:6b:ad:bf:a1:09:84:b6:26:c7:72:d5:d4:cc:
4a:fc:2c:f6:97:52:6a:87:67:6f:55:47:7b:02:eb:
99:dc:c6:ef:6b:72:a1:42:c1:46:09:f4:15:0d:8c:
f2:b6:fd:59:8e:23:7d:e1:2c:3f:6c:de:93:34:6d:
b5:3f:64:0f:70:82:10:b6:38:e0:b8:61:33:e1:8d:
85:e5:2a:e3:de:6e:00:f2:7c:e2:88:35:0d:9f:d2:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BD:46:6D:47:FC:AC:7B:85:02:41:FF:4B:5A:B8:2E:2C:35:06:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8L1GbUf8rHuFAkH_S1q4Liw1Bio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:ea:e6:a6:05:8c:27:5d:8c:09:35:42:55:4b:08:eb:df:5c:
09:96:d3:72:5b:7d:a0:a6:61:03:6a:9c:c4:90:5d:d8:de:45:
37:16:3e:10:b2:c2:1b:cb:b5:c9:8d:86:68:9e:46:69:84:68:
79:11:94:64:ce:4e:d5:76:f4:2f:da:c6:71:82:f7:a1:a1:19:
8d:d9:75:be:39:1c:1d:90:81:81:55:20:5b:d9:46:02:6d:e2:
5b:29:15:fe:66:0c:0c:1d:4a:d5:19:05:fa:f8:1c:08:5e:d7:
4b:ce:e6:ad:1d:33:2d:40:3d:ec:5f:44:e7:88:29:25:d4:cd:
4b:14:1c:d3:57:24:83:98:4d:f5:d0:8b:3f:84:53:96:7a:4c:
c5:51:0a:58:36:8e:6c:d2:ab:0a:b4:e2:54:51:78:cf:4b:bf:
10:25:00:10:d5:51:b1:4c:1a:12:ce:2b:c3:a0:41:85:de:23:
48:55:24:26:4a:65:cc:85:ba:0e:71:5c:82:59:1c:1f:f0:56:
18:8a:54:ef:8d:f0:04:d6:9a:fe:1d:00:d2:fd:5d:30:8a:b4:
3e:60:3d:d5:24:d5:4d:0b:8e:05:5d:d5:6f:66:30:9d:07:c1:
b4:4c:58:1b:b2:b4:d4:a7:d3:9c:c0:fc:9e:cc:a3:5d:c3:40:
52:65:d2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:59 2025 by rpki-client