Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8MQ6JxrkCokEjds4gpUvQCWWucs.roa
File: 8MQ6JxrkCokEjds4gpUvQCWWucs.roa (raw, json)
Hash identifier: 9eZjBzgwW+s/lpp1T1R/db0YeiIDbsUk3bF/hsCY/TU=
Subject key identifier: F0:C4:3A:27:1A:E4:0A:89:04:8D:DB:38:82:95:2F:40:25:96:B9:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188544C45D898E276747AE0681B782BBCB6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8MQ6JxrkCokEjds4gpUvQCWWucs.roa
Signing time: Thu 25 May 2023 19:04:24 +0000
ROA not before: Thu 25 May 2023 19:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:544c:4111/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:4c:45:d8:98:e2:76:74:7a:e0:68:1b:78:2b:bc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 19:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0c43a271ae40a89048ddb3882952f402596b9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:29:f5:28:c8:2b:1a:a7:56:d4:d3:74:d9:
f7:8a:2d:22:96:9a:5f:f4:4f:1b:70:bd:bf:db:cf:
c1:4b:23:e4:0d:64:9c:f0:57:26:f8:38:f1:f8:ae:
a1:2d:05:f0:80:12:c8:d4:9c:b5:c3:1e:a3:64:cb:
f9:e8:a1:ec:87:f5:6e:03:db:6b:4d:f4:fd:2f:6e:
38:52:38:14:96:6e:3b:54:92:86:95:b7:ad:cc:79:
90:1f:be:5a:31:d4:e1:a4:f6:ff:40:d3:88:07:a6:
b5:43:48:d1:4c:d9:2c:f1:01:c5:30:85:70:17:6f:
2f:de:42:5f:c7:64:97:75:55:15:fd:46:03:10:b0:
2c:04:19:8e:70:f0:2a:ae:59:c0:0f:a6:a6:0a:15:
90:53:07:2a:6b:7b:b3:b4:3b:b0:95:3d:0f:cf:84:
b4:1a:b5:22:39:ae:ee:1c:e7:8b:40:b3:e4:ec:79:
11:7b:7d:91:94:b7:8b:50:7e:33:16:2b:67:7a:b5:
6a:2d:42:7f:89:e0:80:86:a3:c2:01:7f:b8:56:3d:
93:7b:0a:5a:92:37:af:14:7c:5e:51:a6:60:ca:47:
a4:39:c9:70:e9:42:e3:e9:ad:85:b0:74:a6:0a:b8:
8f:19:b7:a8:31:64:ef:01:cb:4c:f7:49:a0:61:ee:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C4:3A:27:1A:E4:0A:89:04:8D:DB:38:82:95:2F:40:25:96:B9:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8MQ6JxrkCokEjds4gpUvQCWWucs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:de:95:1f:e8:23:28:2c:96:fb:d7:97:37:99:b4:1d:b7:31:
02:51:48:0f:f1:8e:1c:bf:08:13:27:6d:bc:08:22:27:40:17:
a5:33:13:05:bb:42:b8:6b:fc:5a:7c:ad:a6:ee:cb:81:e1:24:
4f:ee:89:59:d0:d0:1b:f3:d3:4f:65:6e:e4:7b:39:54:6a:e7:
ed:04:4d:a6:c7:9e:a4:58:2f:df:8c:da:22:1b:0a:84:db:3d:
ff:1a:29:f0:af:64:58:de:e3:e5:81:74:be:b9:16:81:65:e9:
44:97:99:fb:87:7e:a9:4e:19:ed:04:a7:50:19:79:b5:c4:d9:
72:13:c3:fb:08:1b:8d:27:5a:e6:21:67:7a:63:a7:4a:de:33:
ef:15:bf:57:69:fd:15:70:5c:98:40:60:b5:4e:60:45:47:5c:
b8:1c:1f:2d:59:5f:4a:fe:18:ec:03:12:12:af:69:22:bc:d4:
4f:28:7a:8c:a3:56:db:76:33:75:3d:a8:00:02:f9:13:5e:9b:
e4:0b:c2:31:56:2e:99:42:20:b9:f6:d9:d5:42:74:a5:1b:eb:
7d:8f:06:4f:b6:ca:23:2a:a3:bc:01:f3:ef:a6:90:53:1e:39:
12:a3:89:bc:02:a5:40:91:2e:74:b0:4e:4c:06:28:a3:f4:c6:
83:3d:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:53:58 2025 by rpki-client