Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8NMSBRYYLQpZz7rxX8zw5__LhIc.roa
File: 8NMSBRYYLQpZz7rxX8zw5__LhIc.roa (raw, json)
Hash identifier: 0mxFwqW4wbX7bXnCh404NLGTTKS7vbMQ1LPQ6yNZiI4=
Subject key identifier: F0:D3:12:05:16:18:2D:0A:59:CF:BA:F1:5F:CC:F0:E7:FF:CB:84:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826CDBD858AF0C69A4F49DBD9793546D23
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8NMSBRYYLQpZz7rxX8zw5__LhIc.roa
Signing time: Fri 05 Aug 2022 07:15:23 +0000
ROA not before: Fri 05 Aug 2022 07:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6c:db:d8:58:af:0c:69:a4:f4:9d:bd:97:93:54:6d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 07:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0d3120516182d0a59cfbaf15fccf0e7ffcb8487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:fe:c7:7a:d0:d4:20:99:83:da:dd:25:5c:
8a:de:5a:6b:12:bc:f6:53:fb:87:43:54:09:2f:95:
ac:11:13:c9:ba:00:e6:d2:bd:0d:e5:11:56:50:a5:
4d:ca:2f:29:45:38:83:6c:48:11:e4:83:c6:34:1e:
f3:7b:87:02:4b:f9:e9:e1:b7:be:63:69:bc:16:e1:
bf:be:4d:1b:9d:32:70:5a:c5:9c:4f:7e:97:ac:20:
ac:c0:57:90:2b:38:c7:17:11:b3:67:fd:e5:4b:0f:
f3:12:f7:77:e0:12:3e:0c:ae:39:87:86:1b:f1:97:
93:ee:83:7a:fe:b6:23:f9:df:c3:2f:3c:13:4b:d6:
f8:33:68:47:fe:3c:6e:8c:17:5f:d3:97:ff:10:8d:
af:9b:19:ab:df:13:a5:0e:89:6f:6b:42:9c:04:67:
fb:89:6b:d9:42:7a:5b:1c:c7:da:e0:f4:0a:fe:cb:
59:7e:54:c5:42:0e:08:2b:a7:91:cc:28:18:6b:ea:
19:f6:11:51:28:ae:6b:46:e5:9b:dc:9d:90:44:81:
06:c1:13:f3:e3:b0:85:a2:d3:17:4f:4e:ca:24:8a:
3a:a6:67:73:a7:9a:98:02:f6:9e:39:0e:cb:95:50:
4f:d1:c8:1c:ca:75:38:22:5a:4a:95:f8:07:d0:e8:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D3:12:05:16:18:2D:0A:59:CF:BA:F1:5F:CC:F0:E7:FF:CB:84:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8NMSBRYYLQpZz7rxX8zw5__LhIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:0b:a6:c2:71:7c:17:a9:9c:6e:a4:32:63:00:ac:a8:2a:90:
d6:71:c0:4a:63:07:e9:f6:fa:2e:83:5b:34:9c:66:e6:09:a5:
e4:54:f5:bc:7d:fb:4c:3b:9c:ef:19:b4:62:88:a7:fc:95:92:
cd:8c:9f:b1:9f:e3:af:da:43:3a:2f:b8:eb:bc:2c:2e:5e:b4:
1d:87:a8:e5:83:fd:14:13:05:d7:9a:d1:d8:70:9b:7e:fc:0e:
49:10:d3:85:e8:38:26:0a:ee:4f:83:f6:1b:9d:2d:74:e2:31:
fc:2b:87:03:8d:83:4f:6d:60:9a:a1:b9:1d:45:51:9c:0b:64:
f3:60:c0:6b:f4:69:53:ee:dc:38:a9:08:c0:a0:4d:8a:ce:a7:
9b:30:c0:1f:53:0f:10:93:3d:a5:c6:ba:5f:a8:59:51:b4:5c:
4c:90:cb:99:d0:63:98:a6:a5:58:56:5f:53:28:5d:0d:a9:d0:
3e:e0:d5:ee:d2:4f:89:33:a1:5b:9f:d4:04:d0:b0:ad:2b:c1:
5d:30:04:bc:31:29:90:30:4d:95:53:2d:05:d0:87:cb:7d:5c:
22:0b:ef:ce:6d:87:7e:3e:e7:fd:84:66:da:64:1a:dd:22:8c:
31:e0:de:f0:7b:fe:fc:01:76:da:69:51:81:27:8f:08:70:17:
56:72:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:20 2025 by rpki-client