Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8MGhPqbJYqVOqymrLzH0ScC9VGA.roa
File: 8MGhPqbJYqVOqymrLzH0ScC9VGA.roa (raw, json)
Hash identifier: yethstn3jlhMvWhncR/3sPux453ee0EFVlIeUbjfAyo=
Subject key identifier: F0:C1:A1:3E:A6:C9:62:A5:4E:AB:29:AB:2F:31:F4:49:C0:BD:54:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A6202310D25B7084F3603ED45A075693
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8MGhPqbJYqVOqymrLzH0ScC9VGA.roa
Signing time: Fri 03 Mar 2023 06:19:29 +0000
ROA not before: Fri 03 Mar 2023 06:19:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:20:23:10:d2:5b:70:84:f3:60:3e:d4:5a:07:56:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 06:19:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0c1a13ea6c962a54eab29ab2f31f449c0bd5460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:03:9c:3b:5b:fd:fa:db:64:dc:90:d5:3e:
5c:64:f0:45:66:bb:13:2c:1d:af:1d:bf:bf:b9:3a:
a8:0f:df:35:ce:6e:6b:d5:09:1a:9d:18:fa:bb:7a:
fd:d1:91:c8:83:29:41:ee:09:b8:6f:18:1a:c0:95:
4d:d8:b2:db:0b:3b:d1:90:eb:cb:8c:81:27:f2:50:
d7:c1:68:6c:9a:eb:3b:43:e5:e9:83:d3:3c:e3:4d:
38:d2:60:48:6f:b6:53:e0:83:70:b6:5a:3d:0b:2b:
48:ed:af:2c:b3:0d:9f:f5:6f:b2:a3:1b:0b:ab:25:
b0:22:49:7b:52:6a:d4:d6:db:ba:6d:5d:ad:71:81:
37:09:5a:3f:d4:a5:bf:5f:bc:15:ee:f2:b5:1c:90:
25:39:04:8a:9e:c1:d6:86:69:b5:64:7a:e2:4e:a8:
21:ae:10:6d:71:0d:f9:56:a7:05:e0:42:6a:79:d6:
18:e5:fb:bb:12:50:82:c9:03:29:48:13:8b:08:0a:
23:c0:b9:06:48:81:7b:81:66:60:af:c7:8b:31:c5:
ef:d3:bd:f7:40:d4:55:b8:9a:f2:f0:a3:7f:9d:09:
2d:98:e9:73:62:47:d3:8e:89:ad:fc:93:e6:ce:fb:
56:c3:8f:8f:4c:57:3b:b6:f7:42:e1:e8:c5:22:33:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C1:A1:3E:A6:C9:62:A5:4E:AB:29:AB:2F:31:F4:49:C0:BD:54:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8MGhPqbJYqVOqymrLzH0ScC9VGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:b3:92:a0:2b:02:e1:ee:a6:78:aa:40:97:fe:6b:f1:58:ea:
74:55:43:62:33:e1:d7:23:34:f4:af:58:a1:fa:ad:5d:46:f1:
89:26:77:91:a7:ac:57:f9:7b:3a:cc:e6:de:97:e4:d5:d4:f7:
62:cc:74:66:05:50:62:db:e0:b9:9a:90:d5:33:f2:91:80:c7:
67:8e:f5:a5:d8:4f:62:b1:10:44:4b:52:db:4e:40:6c:6d:ad:
fa:7f:af:fc:24:d9:7b:a4:74:0a:88:3d:5f:05:d6:90:f5:3d:
ef:fc:5f:e2:e0:d3:20:43:9e:b6:82:27:c8:98:ea:a5:58:1e:
0c:38:08:73:7e:46:1a:d8:d0:eb:d2:83:2c:8c:52:59:2b:5b:
df:f5:ad:c0:ea:e3:bc:37:35:d7:4e:8c:c4:07:bf:8a:85:82:
d2:2d:3b:a6:6b:cc:a9:96:62:aa:41:33:42:85:88:ca:67:7c:
43:f6:b9:7f:bf:55:49:dc:0f:c0:b2:b1:68:e5:f9:27:10:d9:
fe:85:c6:88:53:44:aa:5c:6c:68:98:2a:7f:50:bb:2e:4c:2d:
e2:01:07:97:ca:e9:2f:a8:1f:12:e2:5f:92:42:f3:ab:7e:3e:
5e:a8:b2:2d:be:12:d4:2f:a2:31:18:c7:6a:4b:76:fe:bb:9f:
a5:53:d9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:24 2025 by rpki-client