Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8NQw0ORxNo0eWIvU4nh8C8OBsos.roa
File: 8NQw0ORxNo0eWIvU4nh8C8OBsos.roa (raw, json)
Hash identifier: 2oOOX6sNrY7iIYBorUksbahp22JwKBhxn8ByxdFd4xI=
Subject key identifier: F0:D4:30:D0:E4:71:36:8D:1E:58:8B:D4:E2:78:7C:0B:C3:81:B2:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855C493C72BC8ADAF2946D6B698F2E8A95
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8NQw0ORxNo0eWIvU4nh8C8OBsos.roa
Signing time: Thu 29 Dec 2022 05:09:41 +0000
ROA not before: Thu 29 Dec 2022 05:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5c:49:3c:72:bc:8a:da:f2:94:6d:6b:69:8f:2e:8a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 05:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0d430d0e471368d1e588bd4e2787c0bc381b28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:8b:50:e1:ba:b8:be:3c:63:53:b9:c1:55:
30:8f:8d:8a:50:93:24:fd:72:40:1d:9a:25:0b:21:
d1:09:b1:77:f3:6b:a5:f7:d1:3c:d4:0b:96:03:56:
ab:f3:e6:44:e3:ad:a0:b0:a8:4b:0b:0e:3b:49:f6:
b0:ef:72:a7:aa:57:90:bb:6a:68:a5:a7:20:65:b7:
33:d2:0a:d2:fc:08:3f:26:18:0b:50:a3:10:95:33:
e0:7f:38:05:5c:b4:3d:0d:48:3b:64:f0:3e:5b:47:
a7:3a:04:9c:db:4a:58:79:cc:5a:e5:a1:5e:80:22:
5c:84:de:50:e8:35:6b:ed:11:51:db:57:8c:cb:8b:
15:db:6a:c6:13:dc:3e:94:21:c2:35:0c:83:f2:e4:
02:49:f9:1d:5f:1c:4e:69:fb:29:2a:65:81:03:0a:
5b:5a:57:a1:a7:a6:23:cb:1a:c5:c6:26:a7:78:4d:
d9:1c:a1:3c:0d:47:7c:c7:98:18:b9:e2:97:f7:d2:
ce:7b:4a:f3:bd:d4:02:0d:2f:f0:3d:45:1c:e7:64:
09:70:22:7e:20:af:e0:46:aa:1e:a6:92:f4:28:5b:
9d:48:b3:8e:46:6a:e6:4d:19:4e:1c:71:38:12:4b:
45:9a:f9:50:8f:a7:00:bc:89:2c:08:41:15:d4:38:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:30:D0:E4:71:36:8D:1E:58:8B:D4:E2:78:7C:0B:C3:81:B2:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8NQw0ORxNo0eWIvU4nh8C8OBsos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:1f:ac:37:75:f0:33:0e:ae:14:4d:12:e7:67:82:b7:0d:60:
53:ba:e1:8c:90:39:7d:dd:33:56:73:ea:91:e4:47:3b:54:ae:
f2:07:68:7d:22:c3:9b:7e:31:52:d5:e5:75:46:70:26:0d:1f:
e6:f8:d4:fa:6e:e3:a4:12:fb:21:ae:a4:8b:8f:1d:8f:13:6a:
31:df:90:bc:da:7b:20:21:4b:b8:43:8f:b7:ec:ff:01:e0:30:
87:ea:ae:2f:09:34:1f:57:dc:a5:f7:13:f7:5a:7d:9f:a4:d4:
8c:41:2f:de:f7:6b:16:43:56:32:6d:4c:4e:d1:d3:ef:33:60:
67:86:66:47:0c:72:1d:6d:50:6e:01:a1:63:fb:ee:02:ea:82:
ea:97:e9:5e:06:45:70:b2:31:a4:f3:2c:df:2f:f5:5b:19:87:
b1:97:99:d7:09:ad:cc:62:aa:3a:cc:7f:de:2f:2b:f9:a7:15:
be:d6:d3:9e:fe:ae:6a:a3:11:6c:c3:bf:f8:3b:c1:a7:4b:f8:
d8:19:1d:d9:aa:68:ce:2c:9c:8d:1b:2f:6d:e3:00:f2:05:b8:
a5:f6:54:fd:33:df:35:9c:6b:69:d1:f0:c7:48:55:6a:63:70:
1a:c2:54:e3:ce:8e:18:b5:da:a8:3e:51:78:07:75:3c:1b:40:
44:fb:4c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:17 2025 by rpki-client