Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Zg1O5Cf3tJsj2AsV023_oYKK64.roa
File: 8Zg1O5Cf3tJsj2AsV023_oYKK64.roa (raw, json)
Hash identifier: W5GZeifD00NTAK+U6YDmSk5Yo7AMz5pzGm9hpLlGuzE=
Subject key identifier: F1:98:35:3B:90:9F:DE:D2:6C:8F:60:2C:57:4D:B7:FE:86:0A:2B:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831C2B515EFDCE176478D1C91EF40271E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Zg1O5Cf3tJsj2AsV023_oYKK64.roa
Signing time: Thu 08 Sep 2022 08:15:44 +0000
ROA not before: Thu 08 Sep 2022 08:15:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:2b:51:5e:fd:ce:17:64:78:d1:c9:1e:f4:02:71:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 8 08:15:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f198353b909fded26c8f602c574db7fe860a2bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d3:33:de:c8:0e:81:15:c2:a0:08:1c:6c:0c:
ec:b0:56:a9:5f:66:20:9f:9f:49:16:3f:be:0a:65:
82:f6:99:1f:0e:c9:3b:49:ca:4e:b0:63:e0:d5:62:
e9:ad:b4:34:f7:fe:5f:3d:fc:49:cf:b4:38:a6:2b:
84:cb:24:96:5c:3b:bb:2b:33:d0:65:d1:19:4c:c5:
f2:81:8a:1b:21:e3:bb:9c:88:c6:da:27:1c:6b:2b:
db:21:5f:4d:3b:af:ef:d3:4e:08:e9:41:41:4d:a8:
17:f2:e8:c1:be:a1:16:87:c2:57:7d:d8:75:47:36:
81:ac:bd:96:ce:fd:5e:b6:09:6e:99:f1:90:a5:71:
a0:b6:b6:40:1c:26:a1:39:71:f6:54:28:44:cc:04:
68:21:33:e0:78:48:c4:a6:18:e1:09:27:5b:7f:8d:
c1:bb:c6:1f:5c:77:8b:93:74:59:24:f3:e2:d2:65:
d2:07:cc:2b:20:b9:14:d2:ba:e4:2e:34:86:55:06:
c0:40:d1:3a:b5:f6:82:46:59:d5:ba:a2:da:72:d3:
d8:da:98:94:f0:de:51:a1:9c:bb:9a:07:08:07:7a:
f6:02:c5:89:be:b7:bb:44:db:bc:fc:2e:8c:c9:eb:
86:91:ea:92:49:cf:28:f2:d5:31:a8:2f:46:b9:fa:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:98:35:3B:90:9F:DE:D2:6C:8F:60:2C:57:4D:B7:FE:86:0A:2B:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Zg1O5Cf3tJsj2AsV023_oYKK64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:12:08:31:e4:3f:e1:3a:68:2d:01:b7:2b:44:d6:f2:49:0c:
9c:f4:57:09:85:50:c8:42:b7:14:42:7a:e1:6c:be:aa:7d:41:
cf:c4:8d:f0:c0:f0:a9:31:ea:a4:fd:a2:e1:87:4b:0c:67:15:
77:59:72:5f:99:10:d9:59:68:14:ff:5a:13:e8:2e:95:43:ac:
47:d5:0b:99:54:a5:c8:40:b2:ee:96:00:b5:6f:e4:b3:99:c8:
44:54:6a:b1:8d:93:ce:fd:a3:43:52:d4:7f:6b:6a:71:5d:93:
02:15:a5:ff:ff:cf:8b:2a:5e:90:b7:42:3d:95:bf:27:dc:9f:
38:28:b3:0f:32:0f:bf:9f:18:d3:47:6d:4f:5b:f5:72:d5:d8:
51:43:c6:0c:c9:88:c4:7b:cc:5a:d9:3b:d8:67:64:7f:96:1c:
49:be:bb:f5:0d:4a:ac:29:24:59:c6:37:c2:f1:62:1e:df:ff:
68:9c:ca:42:f2:74:5d:a2:1c:c3:63:0e:e6:2e:17:bc:7f:d9:
9f:6a:fd:46:5d:7d:fc:08:0d:15:06:f7:10:f9:61:9a:b8:e2:
0b:c7:6d:95:52:87:38:cb:34:61:df:4d:7b:63:b5:28:5c:26:
0e:ef:4c:ce:90:90:b8:18:47:cd:b9:b6:99:d7:59:3c:dd:84:
70:20:77:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:55:39 2025 by rpki-client