Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8P9T9mArG0c6C70hr2zOvQ4Yecg.roa
File: 8P9T9mArG0c6C70hr2zOvQ4Yecg.roa (raw, json)
Hash identifier: 05+x08Q57VC/ZC97u9d5gbJsP/sahVxCs+PgyXTTq38=
Subject key identifier: F0:FF:53:F6:60:2B:1B:47:3A:0B:BD:21:AF:6C:CE:BD:0E:18:79:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C2C67B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8P9T9mArG0c6C70hr2zOvQ4Yecg.roa
Signing time: Sun 20 Feb 2022 05:08:27 +0000
ROA not before: Sun 20 Feb 2022 05:08:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814849461 (0x6c2c67b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 05:08:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0ff53f6602b1b473a0bbd21af6ccebd0e1879c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:9f:4c:19:54:0f:e7:35:c1:a7:dc:71:c5:
a9:25:c8:4e:1a:99:82:1b:85:42:59:45:30:22:93:
75:48:0c:9f:ff:81:0f:e3:96:e0:82:61:7f:b3:03:
52:9e:da:87:a3:8f:0c:cb:39:87:c0:c5:30:9c:e6:
a6:65:6a:d0:48:1c:9c:18:75:70:5f:c0:e3:35:84:
ba:be:88:e9:83:20:7d:16:83:c5:2e:6d:24:8c:bd:
60:aa:68:a5:a3:b0:1e:d9:f4:29:86:fe:62:18:73:
38:02:23:04:fc:f7:0b:d9:c5:a1:87:d0:08:56:32:
24:cb:97:34:47:45:f9:05:9a:92:4c:07:97:61:f9:
b5:77:73:2b:b8:79:2e:6f:1c:f9:11:52:2c:63:65:
72:af:b9:58:b6:66:2f:5e:cb:e2:08:a2:8e:bc:81:
03:a0:9a:28:a2:b0:35:64:d6:0c:8e:50:84:3b:c1:
d1:56:e6:5f:4f:45:a5:84:c2:8a:14:2c:f2:ae:5d:
46:2c:1c:66:99:28:72:48:41:a1:12:8f:bf:b4:d1:
82:fa:bb:cc:6f:29:be:1d:1c:0c:a8:5e:52:00:23:
bf:7d:bd:a1:38:4f:c7:4a:cc:26:f7:bd:ce:a0:05:
9c:5a:21:d9:66:9b:0b:83:6f:16:4d:13:58:31:10:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:53:F6:60:2B:1B:47:3A:0B:BD:21:AF:6C:CE:BD:0E:18:79:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8P9T9mArG0c6C70hr2zOvQ4Yecg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:27:59:e8:3d:80:17:72:02:10:23:c7:2e:d3:cd:1a:9d:55:
12:76:68:41:8a:a2:f4:1f:7a:4d:44:a7:b1:9b:72:9b:c6:bb:
09:b8:5a:82:c6:9e:c1:4f:d2:02:b0:61:ea:7f:11:9a:2d:19:
a7:06:15:b3:3e:f6:8f:da:b0:6c:c0:a8:c6:13:8e:7c:a9:b8:
f7:e0:a9:8e:6a:73:9b:fd:c6:2c:d3:03:0c:57:df:bd:6f:d8:
5e:5a:88:a6:6d:7e:c6:9b:b1:23:fa:5e:53:21:8c:ac:77:32:
2a:86:ba:af:16:25:a1:97:38:ef:c7:1a:a1:e8:91:98:0a:19:
14:c9:43:df:6a:78:85:3b:f4:e3:1b:4d:17:bb:de:33:da:2d:
28:f2:eb:68:5b:8d:bd:a2:92:96:de:1b:59:7a:cf:e8:21:a0:
05:7a:d3:8e:af:22:b4:20:72:44:60:f3:aa:e2:d8:89:bb:f3:
fd:8b:5f:3c:d8:b8:74:7c:98:15:30:46:55:0e:46:37:03:40:
8c:2f:4d:21:05:70:4e:3e:b5:40:e4:7b:36:68:b2:8c:0b:cb:
d4:67:91:29:46:a2:b4:d0:4c:4c:ef:b1:4c:20:ae:63:25:db:
ec:21:67:c4:35:83:a4:20:ac:77:dd:36:d3:9c:f3:20:03:0a:
6e:b3:c7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:06 2025 by rpki-client