Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8_zYh4PkhRHoFyM3zAKySX5Rl90.roa
File: 8_zYh4PkhRHoFyM3zAKySX5Rl90.roa (raw, json)
Hash identifier: //ici7M0aeyq9M8cZq6X5iEnfI1F9zwGcuPvl40410U=
Subject key identifier: F3:FC:D8:87:83:E4:85:11:E8:17:23:37:CC:02:B2:49:7E:51:97:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018670B025A81A131D31ABEB0EF7133B7FAE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8_zYh4PkhRHoFyM3zAKySX5Rl90.roa
Signing time: Mon 20 Feb 2023 21:17:17 +0000
ROA not before: Mon 20 Feb 2023 21:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:b0:25:a8:1a:13:1d:31:ab:eb:0e:f7:13:3b:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 21:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3fcd88783e48511e8172337cc02b2497e5197dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:04:a9:a3:0d:f7:41:8f:59:fa:22:fb:33:
87:fd:36:d8:04:09:b3:05:77:2c:25:f3:af:b1:38:
ef:9e:6a:6f:a6:95:66:51:68:4e:f5:be:85:42:5a:
da:3b:81:8c:6b:54:fc:86:93:33:7d:39:ac:b0:18:
c0:85:3d:d1:18:07:ae:51:1b:e7:df:c1:1b:d6:d2:
89:cb:34:7f:74:3e:53:63:b4:79:1a:3a:66:97:43:
03:d8:a6:50:48:9a:9c:e2:f7:6e:3c:d7:ea:fb:67:
da:22:fa:8c:3f:49:3e:37:a6:07:c4:ba:95:fd:87:
33:cb:21:8c:5a:e2:a7:3a:25:69:b7:39:a0:de:a0:
be:dd:37:23:90:38:f8:ce:d3:df:55:3e:1f:24:35:
53:70:15:9c:86:11:53:83:a7:95:b7:99:23:71:a8:
a0:29:b8:9f:bd:1e:f7:eb:bd:6f:de:0e:96:46:6e:
79:6b:60:41:cd:01:2e:ee:11:fd:1b:0b:1d:e1:b5:
82:43:41:d0:96:75:97:8e:04:90:16:de:3d:90:1f:
97:d4:2e:b7:dd:d7:48:a2:52:da:f3:3d:6c:2e:07:
6a:69:a8:48:b1:e5:8e:2c:73:ca:7a:2a:08:ec:e4:
1d:b1:9f:71:ec:ee:b1:bb:7c:0e:36:18:05:71:02:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FC:D8:87:83:E4:85:11:E8:17:23:37:CC:02:B2:49:7E:51:97:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8_zYh4PkhRHoFyM3zAKySX5Rl90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:aa:03:c9:85:be:2f:20:43:31:be:59:2b:02:3e:68:53:a9:
ae:9a:89:00:ea:0d:7d:41:fa:a5:ae:92:ce:32:b2:4f:ef:00:
08:0c:11:3e:79:2e:be:68:93:92:d3:33:cc:2c:4f:3f:13:c3:
bb:d7:3c:c4:8a:80:4c:1f:8b:50:3e:c3:1e:31:20:43:b9:11:
82:f5:4c:0d:8a:59:b6:e6:6d:8a:31:f6:e5:9f:b6:ce:e5:b1:
c5:66:7e:07:d0:b5:f0:c1:f7:12:cf:fc:ad:be:b8:c7:35:0c:
bb:35:33:99:91:9b:2d:97:86:4e:ae:51:ea:1b:d3:79:47:03:
a5:f6:55:62:fa:2c:15:ce:af:3e:f6:35:bb:fb:18:02:06:17:
b8:4b:e3:36:81:74:78:71:cb:f3:83:9d:57:95:db:c4:e7:1f:
bc:6c:ad:f7:af:72:a0:8c:81:90:f7:cb:45:25:eb:2e:07:33:
35:df:c4:6c:2b:65:33:7b:b5:ed:b8:e4:20:8a:95:2a:7c:e8:
da:04:b2:d1:ad:f9:ea:a0:c8:c0:d2:80:be:18:d7:f4:62:75:
60:04:68:97:cc:47:e9:ee:45:d2:52:63:96:cd:95:03:fc:b2:
30:eb:f1:81:08:19:f1:a4:9d:2f:18:8c:75:2f:e6:56:77:d9:
69:7a:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:27:59 2025 by rpki-client