Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RksPbd5nlkAD99Jp9O2Oujq3uk.roa
File: 8RksPbd5nlkAD99Jp9O2Oujq3uk.roa (raw, json)
Hash identifier: lfRrDwEZReWde3Ec+JYucAiZd1jtrkud5wpvBjv0gxk=
Subject key identifier: F1:19:2C:3D:B7:79:9E:59:00:0F:DF:49:A7:D3:B6:3A:E8:EA:DE:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867ECEA635A5BF2A5E2BB0895327766643
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RksPbd5nlkAD99Jp9O2Oujq3uk.roa
Signing time: Thu 23 Feb 2023 15:05:17 +0000
ROA not before: Thu 23 Feb 2023 15:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:ce:a6:35:a5:bf:2a:5e:2b:b0:89:53:27:76:66:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 15:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1192c3db7799e59000fdf49a7d3b63ae8eadee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:8c:62:1d:12:99:11:a7:3f:e8:9a:bc:74:
e1:61:7f:bd:ad:f6:58:7b:f2:fd:47:ae:39:ec:a1:
d8:46:0e:b7:3d:d2:9f:e8:44:be:82:a0:97:9c:3c:
97:68:b4:7c:4e:0a:f1:eb:ab:d4:78:af:4c:de:3b:
8f:b9:81:a6:7a:05:7a:75:48:48:9d:71:c9:d1:6a:
62:fb:a3:7a:0b:f6:4e:f5:5e:ae:0b:f2:50:12:69:
7a:a5:9d:f9:d9:6e:fd:94:c3:23:5f:d8:3b:88:64:
e1:2a:4a:f4:3d:3e:f7:99:db:1c:ff:da:e8:5b:0f:
d2:52:c8:f9:66:a6:f8:1a:42:7e:cf:f8:0d:21:3c:
1f:c0:0d:5d:c5:74:36:2d:51:2c:5e:21:c3:2b:9e:
ad:10:73:4b:33:2d:d1:50:de:3c:75:02:11:a7:09:
32:cd:6e:26:aa:43:fd:9e:8c:d1:65:3a:f3:94:11:
39:1f:55:b7:78:fa:87:4b:91:49:eb:8d:36:28:43:
c4:14:cb:85:a1:27:bc:a3:35:c2:17:d6:7a:91:c7:
74:42:70:84:8a:8d:27:22:b6:cc:31:47:63:b8:db:
70:84:93:16:cf:0b:97:6e:ba:cc:19:0a:52:0d:19:
97:cf:c3:6c:5a:fb:fa:f3:03:23:c6:c6:34:c5:ab:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:2C:3D:B7:79:9E:59:00:0F:DF:49:A7:D3:B6:3A:E8:EA:DE:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RksPbd5nlkAD99Jp9O2Oujq3uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:36:2c:d9:a8:10:cf:79:ee:9d:c9:56:2f:c8:53:b9:64:6c:
96:14:22:35:ca:18:5b:ef:54:01:9a:fe:6d:2e:ea:e1:38:6a:
e4:08:d7:ed:36:48:54:a7:7e:fd:7c:98:bb:c4:b8:b9:ad:b4:
b2:03:75:1d:72:64:d5:b9:2b:97:3c:db:6c:71:72:5b:30:62:
cb:70:9b:80:cd:f4:fb:24:8a:40:3a:06:06:57:8d:82:bf:e7:
3d:80:90:b3:03:94:95:1e:dd:e3:db:f9:b1:3e:f3:f3:7d:00:
22:c6:95:b1:0d:99:a2:cb:a4:75:40:5b:ec:77:42:26:79:2f:
cc:94:69:5c:56:cf:be:c0:22:2b:f9:fd:52:e6:7c:eb:b0:4d:
c9:43:b4:21:56:09:be:f5:f4:2a:10:d6:75:fa:ab:33:e5:8a:
df:98:5d:03:c8:02:d0:c0:bf:b3:8d:44:c7:db:17:97:c0:5f:
ac:77:7a:21:ed:44:ee:03:52:71:d8:bc:3d:91:b9:74:89:62:
a9:27:ff:4d:fd:bc:4c:63:a2:70:f8:49:a5:9a:e9:30:4f:f8:
24:47:7c:51:ed:f1:2d:2c:e0:97:18:09:e4:a3:e2:f7:4b:9f:
9c:ed:65:46:02:ba:ae:0e:a5:23:8f:f6:d8:4f:db:55:42:12:
39:6c:e6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:41:55 2025 by rpki-client