Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8UPg8NriKeuYfEWTV96s6PJanGc.roa
File: 8UPg8NriKeuYfEWTV96s6PJanGc.roa (raw, json)
Hash identifier: 9feSaoK5xUDVkVe7TQgGM7dtR4kgDTaUcNIMv/ImL9o=
Subject key identifier: F1:43:E0:F0:DA:E2:29:EB:98:7C:45:93:57:DE:AC:E8:F2:5A:9C:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183037DD93164B6A8E88509CB8E5D7F236B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8UPg8NriKeuYfEWTV96s6PJanGc.roa
Signing time: Sat 03 Sep 2022 13:15:22 +0000
ROA not before: Sat 03 Sep 2022 13:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:03:7d:d9:31:64:b6:a8:e8:85:09:cb:8e:5d:7f:23:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 3 13:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f143e0f0dae229eb987c459357deace8f25a9c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7d:62:81:a3:fb:c1:ce:d8:9a:3e:09:51:64:
3a:d7:9e:40:81:24:47:ae:45:91:9a:5e:e1:10:2a:
88:fc:97:fd:9b:3b:b8:65:05:99:bb:b4:d5:5f:61:
82:a8:d9:d2:32:f9:dc:71:9f:3e:32:49:4c:25:70:
df:5e:ec:20:e7:f2:a6:ba:65:e5:c0:98:39:eb:2b:
d2:69:91:df:a1:af:87:a0:3b:2d:ef:18:3b:ae:ee:
73:4d:2f:80:ad:f3:76:df:59:f1:9e:25:33:d7:89:
d4:f7:a4:8e:5c:cf:0e:55:b6:6e:51:2e:e7:e8:cd:
1c:8a:37:a8:53:19:1e:1d:53:47:18:b2:4c:47:c6:
0a:6b:20:aa:6a:a3:06:cd:7f:c5:27:0c:f4:2c:89:
b6:8f:75:6b:8f:62:cb:f0:21:07:7c:1a:c1:fe:33:
2a:65:65:88:f9:c7:bc:c1:01:77:27:25:05:e8:01:
f2:8d:88:f5:01:56:98:85:61:71:e1:ac:e5:59:86:
99:96:c9:ed:6d:4b:c8:19:ca:c3:9f:5b:ca:0e:e4:
c9:31:fc:df:62:93:9b:bc:3f:c8:2d:ac:8e:2d:5c:
c3:5d:a1:a6:c7:12:3f:20:5f:0a:f3:45:a3:6a:2a:
5d:4d:db:ce:d3:eb:a6:6c:13:c3:ed:45:bc:d0:90:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:E0:F0:DA:E2:29:EB:98:7C:45:93:57:DE:AC:E8:F2:5A:9C:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8UPg8NriKeuYfEWTV96s6PJanGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:eb:de:64:cd:d2:2e:91:cb:48:a9:35:ea:e9:fc:01:64:48:
06:0e:e0:46:b7:70:a4:ce:05:9e:a1:6b:22:e9:63:ae:9e:70:
0f:b9:22:84:5e:fd:9a:4d:4d:a1:1a:5f:5f:a4:83:7e:d9:08:
12:5a:8a:5b:90:b9:3f:d6:93:27:20:4d:07:82:eb:b5:8d:65:
d1:07:5d:94:2c:41:7f:21:94:5e:02:a0:d0:05:17:08:e2:77:
dc:b6:4e:b2:a3:e6:ad:1e:1c:c6:ad:c5:db:34:03:fd:93:bf:
d0:88:68:d3:a5:ea:e9:32:ba:87:70:b9:b6:9d:47:35:9e:98:
e0:11:73:41:57:26:f0:47:a1:34:81:54:e7:f2:03:df:6f:5f:
d1:a8:f4:06:12:a9:b9:b9:93:89:6d:e5:69:1b:6b:f8:ea:6a:
2b:72:f6:d1:7f:aa:01:17:e7:8e:ce:23:67:d8:7e:7b:0d:be:
67:84:04:fc:01:0a:1c:e7:c7:5f:4e:83:b4:39:d6:ae:5d:63:
f2:e9:e3:03:6e:6e:a1:5f:90:30:be:92:fe:1c:bf:64:30:c1:
32:e1:a4:17:ec:67:72:80:f0:45:4c:04:0a:f0:2e:1d:1d:6d:
9f:df:59:f8:3f:25:4a:8d:9d:d0:98:3f:ea:15:29:e3:b9:d7:
d4:6f:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:13:42 2025 by rpki-client