Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8QvKnZWPFlzEA_NRVfYHlRhWd70.roa
File: 8QvKnZWPFlzEA_NRVfYHlRhWd70.roa (raw, json)
Hash identifier: FBmtlyUhYt5me9rwA71E1G++2CSbqpwy/F9alzUJO4w=
Subject key identifier: F1:0B:CA:9D:95:8F:16:5C:C4:03:F3:51:55:F6:07:95:18:56:77:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C8D8754C4CA591E1D7371385A541D034
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8QvKnZWPFlzEA_NRVfYHlRhWd70.roa
Signing time: Fri 28 Apr 2023 17:10:41 +0000
ROA not before: Fri 28 Apr 2023 17:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:d8:75:4c:4c:a5:91:e1:d7:37:13:85:a5:41:d0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 17:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f10bca9d958f165cc403f35155f60795185677bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:60:66:af:63:da:b0:53:07:9f:f2:54:ba:7c:
bc:b7:ec:bb:f0:10:ef:76:5a:96:6f:26:e7:e3:25:
35:1e:cc:61:fa:8c:f0:ea:55:46:a8:f6:db:75:0e:
c7:df:02:06:6d:43:8c:51:d3:80:bd:d2:be:33:d8:
0a:14:fc:54:33:b5:70:2d:bd:54:76:fd:40:3e:20:
c8:91:52:0e:2d:fc:1e:7f:6c:69:4f:19:82:f4:cc:
25:45:d4:40:f2:a2:cb:aa:24:dc:f5:e9:69:76:0d:
44:7d:8c:41:82:e2:e1:38:96:cb:19:2f:df:c8:2f:
5e:1e:89:c7:f3:ea:4f:6e:98:c8:74:fa:ec:ac:2b:
63:38:ae:a0:64:65:d6:fa:f1:28:1f:02:7d:1a:7b:
80:66:40:a0:0d:bc:7d:93:3f:b8:16:3b:01:2b:a4:
60:f8:a0:0e:64:51:20:7f:96:b3:73:20:75:be:b3:
f9:65:a9:49:38:67:04:44:b8:26:f9:41:5a:cb:40:
6c:f6:83:ff:72:8e:08:37:32:1e:88:f1:62:3c:3a:
b6:a4:78:c4:62:ed:72:72:ad:de:c4:b4:ca:3d:72:
d8:17:1f:56:cb:64:97:34:c4:ea:a6:ee:49:f6:b6:
09:12:2c:f1:3c:56:ce:59:44:92:ce:7e:61:80:bc:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0B:CA:9D:95:8F:16:5C:C4:03:F3:51:55:F6:07:95:18:56:77:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8QvKnZWPFlzEA_NRVfYHlRhWd70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:63:3d:7c:63:0a:1a:55:d3:2b:ba:2c:a6:90:fb:f8:5d:a2:
df:6f:d4:bc:30:e3:e1:eb:41:c5:26:df:75:5c:1b:d2:cd:2f:
f5:06:f9:73:5b:f0:ee:b3:86:32:bb:e8:2f:f1:0b:3f:c2:bc:
8f:2d:c4:4a:da:67:4a:3d:de:86:20:92:ef:fe:d4:08:30:86:
bd:3f:67:47:cf:e6:fe:9b:64:45:59:57:36:3f:27:5d:44:1a:
b9:c7:50:00:c8:d7:38:e5:f7:4c:43:3e:66:d9:da:57:81:95:
57:14:6f:6e:d6:41:9a:c1:a4:1b:a3:b2:19:3a:77:0a:96:45:
1c:a4:29:ce:af:73:4a:4f:2f:fd:ab:4e:27:91:56:46:91:47:
9d:74:6c:e0:ae:a1:74:66:1c:7d:88:7d:ce:bb:ba:5c:db:e9:
21:ae:a3:ea:87:69:ed:a9:f9:18:c1:96:4b:fc:17:cf:02:40:
87:9a:fd:8d:5f:46:fa:c8:14:56:59:f7:00:b4:3b:05:95:a2:
a6:06:72:c2:5b:22:65:3c:0e:12:5c:64:5d:e0:8b:b4:2b:20:
4f:0e:64:aa:1b:a4:34:d8:02:8a:f5:3e:fc:92:be:a3:99:9b:
7f:70:89:fe:79:05:03:a6:7b:d1:74:0f:38:b4:c0:12:31:d7:
8d:52:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:03:39 2025 by rpki-client