Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8XK7_CqKEqUKm_IeX1AmM6te498.roa
File: 8XK7_CqKEqUKm_IeX1AmM6te498.roa (raw, json)
Hash identifier: HK8xLKo6IiEhx4YONfMfoWV9DZ+BzNG0+CqCASz0ebo=
Subject key identifier: F1:72:BB:FC:2A:8A:12:A5:0A:9B:F2:1E:5F:50:26:33:AB:5E:E3:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CA17B3B29A06BE67C3C3F0DB7C99A79B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8XK7_CqKEqUKm_IeX1AmM6te498.roa
Signing time: Sun 06 Aug 2023 09:04:58 +0000
ROA not before: Sun 06 Aug 2023 09:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:ca17:1da8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:17:b3:b2:9a:06:be:67:c3:c3:f0:db:7c:99:a7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 09:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f172bbfc2a8a12a50a9bf21e5f502633ab5ee3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:61:13:5e:50:45:c3:c9:5e:2c:5e:9b:bd:
e8:23:54:35:6a:0f:a2:78:3f:ca:3d:04:c3:5e:20:
09:07:46:3a:83:d3:81:b4:cd:48:5b:2c:35:e9:7c:
ec:96:c6:75:5f:00:a0:57:51:56:10:b0:b1:8f:07:
96:13:4d:4e:93:ea:d7:56:66:74:8f:27:0c:c5:cd:
10:18:8d:b9:d9:1c:e1:2d:f8:d9:f5:0e:10:8f:8f:
e2:85:e8:91:1d:50:39:06:ed:f5:f9:46:4f:1f:cf:
86:ad:f0:2e:4b:cd:1c:06:76:b6:39:05:b9:eb:ef:
f0:3c:67:d8:52:9a:7f:f2:d9:6e:54:04:f3:c0:32:
e9:38:67:fd:b6:d0:2a:a8:0a:db:97:f1:19:33:7d:
78:5b:cf:8b:d5:b1:e7:cb:eb:97:20:dc:ac:ba:af:
57:69:ce:39:a6:00:02:04:59:53:c8:86:83:e2:0f:
c1:bb:ae:60:e2:59:40:7f:5b:d1:4d:a5:60:b2:d1:
f8:70:f0:6b:da:fb:2e:17:5b:a7:55:87:ca:36:46:
c1:19:a2:97:05:7a:23:5a:a3:47:de:4c:dd:92:f9:
05:e9:14:8d:2f:e2:f7:7c:a8:4f:54:84:80:35:35:
30:50:76:3d:83:60:74:4b:ed:27:8d:b2:73:4f:08:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:72:BB:FC:2A:8A:12:A5:0A:9B:F2:1E:5F:50:26:33:AB:5E:E3:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8XK7_CqKEqUKm_IeX1AmM6te498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:c9:bc:cf:e2:6f:43:96:3e:8e:0a:92:c8:f3:c1:2a:32:af:
67:85:d4:e8:c4:48:81:2c:a3:89:07:7f:2c:6b:b5:58:e3:ca:
b5:87:8d:8e:2a:fb:69:07:f2:49:af:70:98:50:25:f6:0b:0f:
f0:ed:54:1c:d9:87:63:c3:89:5f:96:a5:e8:6c:98:90:37:01:
8e:c0:54:d8:5f:ad:a0:8e:38:1b:42:c3:3f:8c:49:e4:4f:4e:
01:f5:64:60:f8:c4:47:3a:d7:a2:37:e5:6d:e1:f8:7d:b8:37:
e2:86:dd:c2:ee:4f:91:d0:1e:63:ef:93:c2:b8:38:7d:69:74:
33:33:dc:9d:27:30:7d:4f:98:0d:7c:6b:69:47:5e:87:e3:f9:
e0:bc:30:ed:19:bb:73:e7:13:a5:8d:07:fc:5e:db:2c:b6:ec:
8a:0d:ed:3c:06:c9:4f:e2:d3:f6:72:81:6c:f3:74:82:dd:1e:
cc:0b:48:9b:0f:1c:99:a3:0f:83:5a:a2:63:64:23:d6:9a:89:
cf:35:30:52:95:c8:fc:22:77:40:53:d5:8b:6f:42:53:e8:b3:
7c:78:c1:92:5a:09:7c:99:65:1a:13:09:01:d6:13:02:3b:aa:
f1:14:70:7b:d2:0e:d3:da:74:8c:cf:5b:3d:38:f9:55:6e:bf:
28:bd:0c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:30:48 2025 by rpki-client