Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8OOIVPnzYRDzxVmTjLYILKiETzU.roa
File: 8OOIVPnzYRDzxVmTjLYILKiETzU.roa (raw, json)
Hash identifier: Z3UzHf6XFAC1+HG7kjWi/S6ewFRQHogEfBbrU+cBWRk=
Subject key identifier: F0:E3:88:54:F9:F3:61:10:F3:C5:59:93:8C:B6:08:2C:A8:84:4F:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187FE7BF672F1A498DF86107BEBAC96A067
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8OOIVPnzYRDzxVmTjLYILKiETzU.roa
Signing time: Tue 09 May 2023 03:09:09 +0000
ROA not before: Tue 09 May 2023 03:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fe:7b:f6:72:f1:a4:98:df:86:10:7b:eb:ac:96:a0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 03:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0e38854f9f36110f3c559938cb6082ca8844f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:57:53:99:9a:49:45:e1:e7:5c:1c:96:64:
d7:b1:13:71:2f:99:c1:34:74:1b:67:36:53:7b:42:
eb:2e:65:c2:4f:88:69:64:6c:51:0a:ce:c2:c2:00:
05:7d:24:d0:3e:ed:4f:05:a1:db:ef:35:92:a4:47:
ad:9f:10:8d:0b:43:40:26:72:bc:1d:71:ed:f9:01:
6b:e7:a9:75:ae:d7:4a:89:d6:d4:81:a8:93:bd:24:
86:7c:b9:79:b0:69:f0:1c:b2:ca:f1:17:d1:97:9f:
fd:c3:9d:e9:c0:81:47:a0:99:86:37:db:a2:32:23:
63:8d:d5:b3:52:f9:69:a8:0c:e8:92:9a:86:6e:71:
ea:14:88:8a:08:e8:fd:d7:83:c9:e5:e8:10:ae:13:
d2:c0:28:b3:7a:56:e4:29:a0:49:d6:1d:aa:e1:5c:
6b:9b:82:de:7c:23:e4:3c:24:7b:1f:be:fd:06:b3:
11:04:a4:e9:a6:c4:1f:a4:f3:c9:a9:1c:c5:f0:7b:
5a:7d:f8:67:35:c3:b2:07:39:5f:0b:f0:c5:44:c2:
d8:6e:1c:5a:6e:d6:b5:fe:71:4f:45:7e:f0:8e:c6:
12:43:97:60:76:ab:45:cd:6a:8f:f1:21:8c:15:4a:
46:7b:e9:67:21:e2:8b:ed:0b:90:8a:76:39:b0:f9:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E3:88:54:F9:F3:61:10:F3:C5:59:93:8C:B6:08:2C:A8:84:4F:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8OOIVPnzYRDzxVmTjLYILKiETzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:ac:de:97:da:77:20:40:a7:5a:80:33:e1:f1:75:ca:a8:f7:
02:74:fd:67:ce:36:d8:11:8c:18:0b:81:8c:ec:16:ef:90:f4:
30:40:2c:f7:8d:f5:5c:99:48:25:90:75:28:15:d3:c1:84:35:
f2:c4:ab:e5:00:26:ea:a9:d0:b3:db:de:67:c8:53:45:85:5e:
07:aa:b0:68:4b:85:81:b2:2f:d5:c3:4b:55:87:dd:4a:c4:9c:
f8:d3:41:34:b6:0d:43:a8:ce:31:05:98:f3:71:e2:7f:1d:03:
7d:d2:68:42:86:d0:3f:7a:90:bf:f1:0c:12:bc:af:a5:b8:62:
73:89:1f:0f:3b:5f:a9:69:3b:57:79:f9:9c:06:74:ef:50:a4:
28:de:b2:ac:1c:16:38:29:91:e2:ea:74:00:81:0e:6f:47:cd:
cc:a5:9c:6e:51:71:18:cb:32:67:46:be:e5:22:56:6b:7b:1f:
02:bf:11:f4:b0:e6:4e:99:21:58:b0:6d:39:e8:3d:99:44:99:
c6:55:90:fc:b0:de:e0:1c:7e:0f:14:5a:94:e3:ce:42:02:50:
0a:8f:0b:85:48:04:52:d3:e3:fc:68:0d:04:c7:28:fd:1d:e0:
22:cc:26:47:86:09:c1:ac:e3:43:8e:f5:3e:23:39:57:82:e9:
6c:04:92:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:30:36 2025 by rpki-client