Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8ardu6ih46iNCViGhHdyKWBBx8g.roa
File: 8ardu6ih46iNCViGhHdyKWBBx8g.roa (raw, json)
Hash identifier: GUa3eQwktlfxOB4+2ptZQ2Ezp6g/tLtf7wrzXllzI/o=
Subject key identifier: F1:AA:DD:BB:A8:A1:E3:A8:8D:09:58:86:84:77:72:29:60:41:C7:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A6C32E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8ardu6ih46iNCViGhHdyKWBBx8g.roa
Signing time: Mon 14 Feb 2022 02:14:24 +0000
ROA not before: Mon 14 Feb 2022 02:14:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785475810 (0x6a6c32e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 02:14:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1aaddbba8a1e3a88d095886847772296041c7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:f5:a2:cd:77:7d:7e:55:2c:1b:0b:31:d0:
2a:73:ea:59:0c:b1:c7:c1:63:f7:42:e1:3c:4d:7a:
9d:80:d9:91:08:61:aa:01:2b:bb:3b:89:2b:86:1d:
d3:95:b2:09:b1:2d:5a:32:e8:b0:a5:fc:90:f4:39:
69:7e:cf:d2:b1:36:9e:a8:45:69:dc:f7:1e:16:cc:
42:b4:14:70:99:82:75:4c:3b:fa:75:bd:df:29:fa:
25:9a:dd:1d:40:3e:45:38:9c:bc:60:c6:e4:3a:18:
c9:12:a8:8b:d8:05:6b:33:7d:4c:0a:7f:e2:0d:fc:
c0:2c:d0:18:04:e0:f2:8e:d9:2c:65:57:31:0a:50:
81:88:c7:7c:61:ae:f1:01:e8:27:83:62:f1:67:55:
61:d4:15:55:37:71:39:b9:33:4c:e7:81:33:1a:49:
69:4d:bf:60:bb:3b:1a:39:af:90:4f:e3:8c:f2:11:
64:cf:08:24:20:36:2f:0f:28:f7:4b:3f:81:74:32:
5a:23:5b:8d:1b:64:ce:8f:cd:90:a2:b9:17:e2:b6:
12:3a:7d:f7:18:00:10:61:34:7d:50:89:d1:41:44:
2f:9d:4c:da:44:b6:0b:47:cf:a5:7f:69:2a:55:36:
5e:4a:35:65:73:ea:ba:8c:e7:b4:c9:89:76:d4:79:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AA:DD:BB:A8:A1:E3:A8:8D:09:58:86:84:77:72:29:60:41:C7:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8ardu6ih46iNCViGhHdyKWBBx8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:b3:a1:bb:c1:b7:23:f4:37:5f:8a:58:b2:fe:70:05:ab:ea:
98:e7:11:9f:c3:44:8e:d6:b9:ef:f8:b5:f4:da:13:ae:73:39:
6f:07:e6:c9:1e:f1:54:1e:b3:1c:99:d5:c5:68:7a:c3:b7:d0:
47:f0:b7:2b:40:d8:bc:74:1e:a1:f1:d1:0c:31:80:17:65:05:
f3:cf:df:27:92:76:e8:56:db:74:3f:96:c6:4d:9e:f4:01:9d:
06:bc:b3:8c:7a:07:46:15:45:26:41:29:b3:d0:0b:e1:78:f5:
71:ab:8c:a8:92:a7:7d:3d:f0:df:15:6d:99:d8:12:5a:03:ac:
4c:6c:e5:d8:56:64:c4:d0:6c:47:f4:63:e3:66:e0:3b:35:a6:
48:8b:fb:f0:10:d1:d5:6c:a6:73:bb:b9:b8:a5:3e:f7:41:a6:
aa:37:48:d6:3f:f1:61:c6:0b:70:69:65:2d:b9:dc:77:ef:21:
d4:75:04:0a:c6:c0:11:85:ae:41:6d:6f:eb:90:36:96:fa:45:
b2:a5:2c:a5:8f:6d:2a:d6:76:0b:93:86:b7:d8:c1:2d:44:70:
ce:f0:57:22:80:1e:51:97:46:f2:dd:9d:1b:76:d9:68:69:f1:
63:c1:bc:67:8e:22:24:cc:dc:84:7c:7d:77:5d:47:d9:6b:c6:
e6:56:fc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:56:51 2025 by rpki-client