Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RQHVCwTsBoET9QLYsv7-QTsZLI.roa
File: 8RQHVCwTsBoET9QLYsv7-QTsZLI.roa (raw, json)
Hash identifier: XvmMwUzwDYXXtFBY5MhMew4vbyD1LeH9tJzqeJuBwxU=
Subject key identifier: F1:14:07:54:2C:13:B0:1A:04:4F:D4:0B:62:CB:FB:F9:04:EC:64:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F2B503069E94E7225BD7BAB796350884
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RQHVCwTsBoET9QLYsv7-QTsZLI.roa
Signing time: Thu 20 Oct 2022 00:04:52 +0000
ROA not before: Thu 20 Oct 2022 00:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:f2b4:d355/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f2:b5:03:06:9e:94:e7:22:5b:d7:ba:b7:96:35:08:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 20 00:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f11407542c13b01a044fd40b62cbfbf904ec64b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:f5:c1:be:a4:57:24:fc:ad:18:58:1a:9c:
0d:86:1c:1c:3d:9c:b1:34:c9:d3:2c:e7:d1:17:52:
8a:ea:3e:c1:51:01:15:73:c8:f7:64:db:f5:5c:ef:
c0:e2:f7:9d:d8:7c:51:f1:81:ce:ea:b6:01:cb:48:
04:63:47:5e:f8:27:fc:96:1e:18:9c:42:a4:ff:7f:
9e:a6:95:4b:3d:c4:96:da:30:a0:a8:87:69:4f:8b:
50:a7:c1:ed:be:0e:64:82:f6:7e:1d:f0:46:fe:b2:
16:65:3a:85:38:a0:17:fe:a6:93:8c:de:2a:20:cd:
cd:f1:6c:8d:f0:fe:5f:99:32:89:03:5a:51:3c:78:
d0:96:98:57:7c:eb:5a:b4:08:a5:8d:f6:17:3c:97:
90:a0:d9:9e:94:fe:6b:f5:13:b4:7e:08:1d:60:a9:
fa:da:5b:2a:fa:89:70:7d:6f:07:e9:20:21:9c:6c:
af:6a:48:bb:0c:c5:9f:34:b5:7b:f4:ab:a6:d4:60:
1c:08:5f:5a:d4:b0:b0:9c:65:38:ea:8f:98:1f:8d:
cf:d3:0a:67:dc:e7:bb:c5:0c:b5:13:15:2b:04:f8:
8a:38:58:53:b3:29:ad:c9:30:8f:07:01:73:08:6d:
78:86:51:5d:d0:4f:ba:b0:c5:40:99:c9:d1:2b:6c:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:14:07:54:2C:13:B0:1A:04:4F:D4:0B:62:CB:FB:F9:04:EC:64:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RQHVCwTsBoET9QLYsv7-QTsZLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:6d:83:90:84:cf:03:12:b7:62:1b:f4:19:98:d4:3b:10:4d:
81:e0:6a:a4:f6:ae:1f:91:de:3c:f6:db:43:87:3b:ae:0b:a2:
6c:ce:ea:3c:b9:27:f1:18:b6:f9:50:99:7c:8f:c5:ab:f3:d0:
6a:10:4b:c8:58:ed:d1:5e:d5:2c:ef:02:db:2d:90:9f:d2:77:
e3:6f:12:70:cd:1a:3f:24:31:cd:29:53:b2:80:95:50:3f:0e:
06:81:c2:0e:8c:51:1d:12:06:d0:ad:07:bb:82:40:44:33:27:
90:76:cb:2d:0e:67:cc:c8:58:22:a8:a6:d8:df:fb:de:68:70:
17:19:6d:83:ec:17:0a:37:11:4b:82:81:ca:e8:2e:3d:3b:a5:
6f:d1:e0:2a:d3:41:03:7f:87:a5:e4:3a:7f:71:4d:d7:79:6c:
d3:00:0a:56:3d:ad:46:0b:18:a1:20:4f:be:3a:82:ce:ac:4e:
5e:df:ed:17:9c:f5:a1:fb:b3:3d:2e:09:62:16:26:50:85:df:
26:90:a9:07:4c:a0:8f:54:7f:54:a1:23:bc:32:26:b6:4c:94:
ab:f1:da:56:e9:b4:16:3d:41:7f:85:d7:ce:d3:c0:61:2b:ed:
3f:3b:54:11:eb:ad:c6:ed:77:21:96:90:57:fd:b4:33:a7:42:
e8:3d:d7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:34 2025 by rpki-client