Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Ze2d2Pa5l4VaertEgahTDFjIOI.roa
File: 8Ze2d2Pa5l4VaertEgahTDFjIOI.roa (raw, json)
Hash identifier: ITr4fv4n+W6XOKm9iLYPUTkZlHa1TtK4oWQFE5bgpD4=
Subject key identifier: F1:97:B6:77:63:DA:E6:5E:15:69:EA:ED:12:06:A1:4C:31:63:20:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185AFF42113D563AC595D063FA8BFAC3AD1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Ze2d2Pa5l4VaertEgahTDFjIOI.roa
Signing time: Sat 14 Jan 2023 11:04:50 +0000
ROA not before: Sat 14 Jan 2023 11:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:aff3:8ef2/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:af:f4:21:13:d5:63:ac:59:5d:06:3f:a8:bf:ac:3a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 14 11:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f197b67763dae65e1569eaed1206a14c316320e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ef:0c:04:78:ba:8d:b3:9f:4b:d9:70:d2:2e:
72:71:58:96:53:58:05:59:93:0b:29:e2:5c:76:e0:
00:b4:d1:85:82:77:4e:1f:da:8d:bc:6f:ec:7f:0d:
93:9a:5b:58:cc:c8:a7:b2:14:9c:b7:b9:a6:69:aa:
3a:a3:7e:48:b9:0e:10:cc:06:dc:6e:7f:c8:65:7b:
04:63:b0:61:dd:ca:5f:3b:8c:81:dd:a5:39:55:db:
61:82:62:f9:f4:99:cf:4f:0a:b9:39:3f:2b:cf:91:
35:cd:d6:f4:e6:18:a5:dc:23:8b:a4:b7:9e:bd:4c:
9c:a4:e6:28:1e:f5:c4:cc:3d:45:70:cb:9b:12:45:
a3:f0:42:f0:9a:ce:6f:d0:1c:d3:8f:26:87:f3:de:
40:de:42:25:d6:85:03:39:09:03:13:c5:64:d4:d7:
3a:fa:83:48:1b:20:4d:82:f4:31:de:9e:de:ef:9e:
76:a9:8f:b9:6b:a6:2d:cf:e2:72:9b:3b:97:a8:24:
bd:e2:8e:2f:5f:23:79:c4:08:6c:9b:b8:c0:86:75:
f7:a9:fe:36:3a:0d:d8:22:76:87:65:a4:68:b9:4e:
e8:d5:75:33:98:8b:26:48:e2:ae:3a:90:6c:ae:53:
a0:86:99:b2:61:bd:94:aa:46:ea:14:24:9e:c5:28:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:97:B6:77:63:DA:E6:5E:15:69:EA:ED:12:06:A1:4C:31:63:20:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Ze2d2Pa5l4VaertEgahTDFjIOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:9d:6b:53:54:26:33:64:5e:60:ce:29:3a:78:1e:17:81:7e:
1b:63:07:29:6a:70:38:fb:73:5f:92:f1:6a:37:12:28:aa:85:
44:6e:db:89:37:f0:7c:ff:37:3b:f8:dd:7a:78:80:cd:6f:92:
24:a2:66:ba:36:47:e9:91:6b:9e:15:4f:e9:8b:ac:aa:a4:07:
f4:e2:c3:b6:12:ae:ad:bd:8f:25:43:0b:93:65:6f:cb:68:57:
ec:e5:70:04:fb:26:87:2b:c6:b4:c8:2c:cb:15:07:f3:95:d5:
59:cb:e5:24:57:d1:ba:cd:1c:3d:96:3a:ae:b7:45:88:e9:6a:
83:c2:b0:0e:59:86:90:fe:8f:c1:62:fe:31:a3:7f:8f:88:da:
95:54:2a:96:15:ef:da:28:bd:7a:cd:11:dd:dd:3b:08:f2:96:
03:fc:3b:2c:35:a0:cd:e9:29:0c:be:b3:9a:c6:17:a3:6a:bf:
7b:28:10:15:9d:28:e9:72:c4:8a:7b:6a:49:9b:06:68:e4:a3:
b6:d0:b8:e5:22:a6:c0:25:be:ca:e5:7f:55:63:3a:81:30:3e:
87:b0:36:ac:38:d4:92:b3:44:16:8d:2f:97:b4:cf:ad:6f:9c:
b0:2f:28:5e:15:82:de:c2:c0:72:44:18:9a:d2:48:5f:ff:f6:
50:92:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:20 2025 by rpki-client