Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8QoYz5Ja0a2N4bmqchdciLCMnyU.roa
File: 8QoYz5Ja0a2N4bmqchdciLCMnyU.roa (raw, json)
Hash identifier: Qghq/6kI8cehKfcBxm9Ab5ApDFWTuxJq6OKDa2QpESo=
Subject key identifier: F1:0A:18:CF:92:5A:D1:AD:8D:E1:B9:AA:72:17:5C:88:B0:8C:9F:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186640386002AA71F6E89C9D16B8DC0EF39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8QoYz5Ja0a2N4bmqchdciLCMnyU.roa
Signing time: Sat 18 Feb 2023 10:13:17 +0000
ROA not before: Sat 18 Feb 2023 10:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:64:03:86:00:2a:a7:1f:6e:89:c9:d1:6b:8d:c0:ef:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 10:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f10a18cf925ad1ad8de1b9aa72175c88b08c9f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:92:b6:67:c0:51:c6:99:c6:08:8e:d5:a6:
07:fb:35:e1:3c:9f:57:25:fb:31:2d:f0:b3:15:ac:
70:88:fd:38:86:db:23:67:b2:50:5a:6e:60:59:90:
c7:26:95:e3:3a:a5:81:05:0e:35:26:a2:2b:76:5c:
2d:3c:b3:ec:9d:eb:a3:62:39:c7:63:db:cb:76:bd:
6d:ab:d5:d1:4f:bd:17:22:26:59:9b:dd:5d:58:5f:
9c:c3:4d:eb:7c:94:7d:3e:35:df:58:ea:fe:98:d6:
32:e1:de:93:1e:9c:65:21:ee:46:02:54:3c:08:49:
29:ed:1d:52:01:10:18:2f:d0:6d:fc:03:66:d8:54:
f5:17:a0:bc:09:df:7e:c6:73:9f:0b:1d:2c:58:13:
54:8e:4e:24:6a:5f:d7:7c:d3:45:a8:ee:82:b2:b2:
89:ed:f7:5f:48:9d:59:d3:97:d4:a8:e4:8e:ba:6b:
d8:d5:0b:66:12:d4:8f:43:c0:e7:cc:61:66:21:64:
28:f4:25:73:0a:2a:e7:82:fe:4f:bc:52:d9:e7:1f:
eb:81:23:19:7b:b0:ef:a8:cb:60:b5:db:fa:06:91:
1c:8d:b9:4c:15:7f:89:00:de:a9:45:2a:8f:91:1d:
d4:e1:70:76:f7:7e:ea:81:44:2a:d6:29:36:90:3c:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0A:18:CF:92:5A:D1:AD:8D:E1:B9:AA:72:17:5C:88:B0:8C:9F:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8QoYz5Ja0a2N4bmqchdciLCMnyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:77:b9:b5:4e:8a:51:8f:ba:1c:4a:8e:6c:74:a3:37:8d:13:
d5:7a:ca:17:ff:87:45:a2:3e:3a:1c:f6:d8:88:3d:78:89:8e:
88:65:52:c9:da:e6:85:3f:e2:42:af:a9:21:57:8f:00:f7:7a:
5b:4f:12:f9:99:45:29:6b:3a:cc:2e:e7:df:92:46:67:36:e4:
16:4d:67:20:06:c8:62:4a:bd:71:a7:18:49:70:40:b0:d5:94:
fc:c9:d8:d3:9c:76:62:c9:9a:a9:08:4d:ed:b0:0e:b7:f6:26:
4c:58:71:9f:b5:3b:8c:22:1b:92:6f:9c:9c:51:9e:fe:1f:73:
a4:3c:03:b7:60:5d:1d:45:72:c5:73:64:5d:d4:72:4b:bd:27:
99:32:e8:61:97:40:51:3d:f2:86:14:7a:ae:f0:82:6d:b8:c4:
9a:69:5a:2d:1b:08:5f:7e:5c:11:bd:03:59:ce:6a:51:f6:6e:
d1:4b:71:b7:da:e7:51:5b:fe:29:66:0a:c9:3b:df:22:e4:40:
f2:08:df:dc:19:85:40:bf:c0:66:37:05:fb:11:70:d5:81:b2:
0f:5c:1f:d5:3c:b1:71:65:27:ab:a5:15:c4:a2:1f:f7:34:dd:
ad:3f:75:23:9a:22:c3:89:21:71:aa:55:49:d4:3d:e7:0c:56:
64:82:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:51:38 2025 by rpki-client