Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8OT596SJHd1KbeMdIzPzANdMLiQ.roa
File: 8OT596SJHd1KbeMdIzPzANdMLiQ.roa (raw, json)
Hash identifier: jFiVz5c3HSRc33JkHf3H0oCKzUB14/Yaex6MOR91r6A=
Subject key identifier: F0:E4:F9:F7:A4:89:1D:DD:4A:6D:E3:1D:23:33:F3:00:D7:4C:2E:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018811979F9B25F0BF66D56BB0C6A69D4911
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8OT596SJHd1KbeMdIzPzANdMLiQ.roa
Signing time: Fri 12 May 2023 20:12:09 +0000
ROA not before: Fri 12 May 2023 20:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:11:97:9f:9b:25:f0:bf:66:d5:6b:b0:c6:a6:9d:49:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 20:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0e4f9f7a4891ddd4a6de31d2333f300d74c2e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:83:c9:33:81:d9:3e:de:11:c0:6d:f0:55:
ec:92:1e:6a:13:01:4f:07:23:54:3c:b8:45:ee:e9:
97:fe:5f:6d:4b:c4:44:cd:c6:bb:26:30:5d:35:e1:
28:cb:40:40:b8:3d:3c:24:18:7a:6d:55:52:0a:d1:
9a:f5:e6:86:04:c8:aa:19:d2:8b:83:6d:2c:76:b8:
c0:00:60:c5:2f:74:ac:e2:8b:d3:83:fa:9a:50:0d:
4e:e3:e2:fc:53:45:58:c4:6e:71:fb:20:3f:c0:9a:
6d:15:33:dc:48:05:b4:7c:6b:37:50:8e:e6:f0:59:
67:5f:b1:2c:fa:93:6b:8f:17:a2:1d:63:ba:0e:4a:
5f:7c:f1:63:75:7f:af:a3:af:a5:2d:38:0b:e6:81:
68:d1:b5:b0:b9:f5:fb:88:fd:03:64:2b:ba:9d:f9:
55:bc:83:39:9a:95:25:a1:7b:7b:19:14:14:93:23:
e5:32:23:08:3c:42:de:0d:58:de:94:3d:16:a4:3d:
45:52:92:1a:3f:ea:ec:ad:4a:24:21:81:d9:51:35:
8a:9f:98:78:26:1a:0d:29:0f:08:a4:bb:9d:25:85:
cb:8e:09:2f:47:6e:42:21:00:e5:f1:27:95:f7:d5:
dd:85:6a:b8:c6:97:30:07:e8:fc:28:93:f9:78:23:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E4:F9:F7:A4:89:1D:DD:4A:6D:E3:1D:23:33:F3:00:D7:4C:2E:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8OT596SJHd1KbeMdIzPzANdMLiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:85:45:cf:1f:c8:78:84:95:e8:79:7c:0f:f9:3a:b9:8e:ea:
92:6b:7e:09:d2:4f:5e:08:fa:4f:c2:5a:15:f2:47:05:fc:30:
5f:cc:cd:81:a1:df:c0:5a:13:3d:ba:b9:6b:8a:52:b9:ce:fd:
86:7b:22:15:d4:67:7b:04:f3:dd:ba:26:12:6d:43:21:19:56:
95:25:55:52:5b:58:6a:ca:99:12:11:e9:c4:f0:23:3b:c5:40:
46:29:fb:0c:f8:54:5a:8b:72:d0:df:b4:f5:5c:b2:34:9d:48:
fd:a1:f4:24:92:d5:05:a1:54:92:de:0e:24:ba:b5:27:de:2c:
e1:27:c2:e3:7d:33:27:db:fa:e7:4f:cd:3d:e8:52:34:88:ee:
aa:cd:02:58:eb:ab:84:08:05:58:e4:f6:cd:5e:62:27:64:c8:
80:16:41:4d:78:ff:c2:24:7e:77:bd:e3:5f:c3:e0:84:1b:7c:
11:8c:33:ae:90:e5:64:61:a4:14:77:f3:9a:2d:4d:73:27:e4:
a3:ef:4f:84:2e:0f:c8:63:c4:ac:33:77:da:19:4f:8e:6b:ff:
4a:f6:78:e8:b7:7f:2f:19:df:22:22:2d:9a:1f:fa:19:8a:50:
26:b9:13:25:4f:d7:67:68:c8:3e:9a:98:b4:36:4a:ca:04:8d:
24:07:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:14:06 2025 by rpki-client