Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8P9aAjHMD39giHHQ-J0Za1mBqzg.roa
File: 8P9aAjHMD39giHHQ-J0Za1mBqzg.roa (raw, json)
Hash identifier: F1l3VNtwTDzV6VKHj5i5Ufnoj+mzhFixzdSbaRd0BAI=
Subject key identifier: F0:FF:5A:02:31:CC:0F:7F:60:88:71:D0:F8:9D:19:6B:59:81:AB:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867A1C8F6253CC7E17BFD2FCE1B5BBCE90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8P9aAjHMD39giHHQ-J0Za1mBqzg.roa
Signing time: Wed 22 Feb 2023 17:12:17 +0000
ROA not before: Wed 22 Feb 2023 17:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:1c:8f:62:53:cc:7e:17:bf:d2:fc:e1:b5:bb:ce:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 17:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0ff5a0231cc0f7f608871d0f89d196b5981ab38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:61:13:ad:fb:9b:0d:4a:4a:6a:e5:5c:0b:
c9:ea:3b:db:a8:31:3a:35:a4:6e:b4:19:ed:2b:9b:
93:7d:81:eb:b7:30:45:0a:94:d5:72:bb:83:18:50:
12:bb:c5:6f:1c:af:54:41:8b:38:76:4a:1d:5b:17:
be:8c:0c:be:89:cf:09:51:80:5f:f5:59:a0:82:1d:
8b:cd:30:4f:67:ac:54:49:c5:3d:e3:28:50:f0:0c:
ea:01:43:59:ae:c8:49:85:76:f7:39:35:37:76:c0:
37:19:8e:63:be:2b:17:07:9c:e4:d5:82:32:61:04:
7a:22:72:ba:aa:c5:ef:5b:ae:24:cb:9e:dd:49:ba:
34:2e:39:a6:44:30:62:6a:1c:73:cc:12:95:4c:bd:
68:fb:ba:e2:5e:63:54:8f:4a:30:a0:cc:23:7a:71:
b7:72:7c:25:8a:8a:18:e9:a1:bc:9f:7e:50:ed:e8:
b1:1e:b1:a9:57:85:e1:16:42:11:f3:0f:c6:f6:ee:
99:a9:61:84:29:49:f1:9a:bc:00:d1:44:8e:7d:16:
98:1f:b3:aa:05:b3:1b:d0:19:42:70:ad:03:1f:43:
4f:d1:92:52:a5:73:79:21:11:2e:31:2c:8c:af:8b:
35:d2:94:26:49:0f:92:0e:97:19:3b:5c:9b:3d:e3:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:5A:02:31:CC:0F:7F:60:88:71:D0:F8:9D:19:6B:59:81:AB:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8P9aAjHMD39giHHQ-J0Za1mBqzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:3a:55:d0:b9:04:5c:8d:f5:e8:f5:b2:b3:e1:6f:e8:36:07:
89:f1:49:64:e6:c6:dc:79:6b:12:8a:83:fa:96:82:4d:49:d2:
07:c3:06:5d:b8:e4:cb:23:f7:25:d0:85:90:e8:8d:ab:8e:ec:
2c:5a:6b:8a:6f:8d:0f:14:e9:31:27:d4:56:0b:59:77:8b:6e:
2a:c1:93:2e:46:bf:ba:02:6b:0c:44:05:15:b2:16:75:aa:12:
87:e3:5b:ee:cb:22:f7:fe:4f:44:5e:98:53:54:74:68:21:f5:
5a:f0:c8:d8:b7:1b:20:c0:57:ff:7e:9c:ed:b4:17:bb:54:4d:
67:65:a7:32:27:10:49:9d:34:cc:75:5d:60:97:e3:b2:04:8d:
2b:16:3b:62:14:44:f9:43:4b:66:5d:19:00:ee:a2:22:39:32:
42:c0:85:fd:53:9a:87:03:d3:41:79:cd:a8:24:50:49:e7:7f:
e3:d1:a3:59:6b:44:06:24:61:31:26:12:9d:54:5f:97:77:bc:
2f:e5:eb:d4:2b:07:b8:3b:fc:0c:38:34:a6:a4:f6:31:5e:b8:
bc:2f:83:a7:d6:43:25:13:c9:83:23:8a:ce:9e:57:9d:26:e7:
01:6f:d1:da:6a:ac:65:12:00:fa:41:4a:fa:b3:cc:df:c3:53:
cc:c9:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:55 2025 by rpki-client