Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8bmdO-FziYIio4bAhn90YYoxhwE.roa
File: 8bmdO-FziYIio4bAhn90YYoxhwE.roa (raw, json)
Hash identifier: KKsRGk/5y82fl8RPTgEEsaoE9FsX5s+x9ecX11xOeHo=
Subject key identifier: F1:B9:9D:3B:E1:73:89:82:22:A3:86:C0:86:7F:74:61:8A:31:87:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F432FB28EE0FAD10761E4C74CEC06C19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8bmdO-FziYIio4bAhn90YYoxhwE.roa
Signing time: Sat 18 Mar 2023 10:10:27 +0000
ROA not before: Sat 18 Mar 2023 10:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f4:32:fb:28:ee:0f:ad:10:76:1e:4c:74:ce:c0:6c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 10:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1b99d3be173898222a386c0867f74618a318701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:ed:9e:31:04:e4:7d:cd:c7:05:d6:6f:68:
8a:f7:db:c9:72:59:46:2b:c6:f8:2f:96:5f:7d:c7:
9d:30:3c:8c:11:aa:8a:ae:e8:01:27:a7:2c:48:ee:
ad:92:b9:99:2f:b8:5c:54:eb:9d:9e:50:ec:a2:8f:
c6:4a:bb:fa:62:3c:0e:e1:4e:17:24:49:2a:55:9f:
0a:c4:03:1e:e6:83:e3:67:5d:99:71:a8:21:89:fb:
aa:d7:8b:5a:68:41:d8:97:86:ea:ba:69:c5:ad:85:
12:3c:10:3b:6e:6e:a4:ab:e9:f8:f7:49:98:7e:b2:
a0:a8:3f:25:fb:bb:50:b9:64:23:35:38:1c:cb:eb:
a4:4c:e8:52:77:d5:95:2b:c7:5f:ee:fd:7c:0a:d5:
0d:f4:7d:de:7c:29:f1:d1:9d:66:cc:fe:ff:fb:1d:
91:9b:d8:2e:40:61:d1:3c:18:22:ec:7d:a0:da:5f:
a4:b1:30:e0:16:50:a2:8b:d8:26:b7:83:4d:c8:3a:
8f:ed:5c:f8:88:c0:70:34:7b:23:8e:d2:db:2e:fe:
08:33:fa:ad:ec:72:9e:ca:c9:00:9a:4e:4c:fc:ec:
70:9b:7d:9e:0f:b2:c9:47:44:9d:bd:0d:f4:96:fb:
06:5b:bd:d8:e2:2c:4a:d8:38:ce:08:d9:e2:84:48:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:9D:3B:E1:73:89:82:22:A3:86:C0:86:7F:74:61:8A:31:87:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8bmdO-FziYIio4bAhn90YYoxhwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:72:9d:06:a1:5d:c5:d3:a9:05:18:5b:6c:ff:24:f4:da:57:
81:a1:c1:c7:bd:a6:56:13:59:8e:d8:c7:b8:cc:cf:55:b2:46:
e8:b0:24:4b:08:71:af:dd:fe:30:d2:3e:50:e2:0f:de:7c:18:
cf:98:a0:20:41:b6:88:20:7c:63:a6:1d:bb:da:86:f9:d0:57:
26:e2:e3:4c:a7:f3:17:44:f6:10:32:b3:06:fb:fe:33:10:10:
13:e5:f8:ef:cd:c8:ec:00:29:66:ed:cb:97:ed:9a:2f:7c:07:
d4:80:02:52:5c:54:5c:53:4f:fd:9b:f3:48:b8:b1:d8:a7:e9:
09:d2:11:29:03:bc:6c:ce:65:4f:0f:65:21:c0:22:cd:55:28:
66:e3:69:86:cc:e8:2c:e8:3e:6e:3b:15:b1:46:45:1b:a3:8d:
51:91:6f:9e:24:04:2a:ad:52:b1:90:7e:0c:c8:0d:b7:2b:3f:
e9:db:68:0d:14:c2:74:2a:a1:b8:b0:6f:56:ae:b1:2d:d6:7a:
d5:a4:31:ce:2e:ed:d9:6f:97:6c:ad:0c:3f:48:18:54:cb:e6:
ef:ee:2f:c5:b3:86:8e:fc:34:65:9b:3d:dc:dc:6d:2e:2a:0a:
3c:eb:d1:79:e1:04:e6:f1:e9:f0:a5:78:9f:dc:1e:9f:56:d3:
74:7b:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:15:16 2025 by rpki-client