Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cOeC8O9AJ4OlnrxpuEsLIGLT94.roa
File: 8cOeC8O9AJ4OlnrxpuEsLIGLT94.roa (raw, json)
Hash identifier: OolP+TBEx4ui+s4DXY6NuCa4jM6PbpEIBKJf/HVTU/c=
Subject key identifier: F1:C3:9E:0B:C3:BD:00:9E:0E:96:7A:F1:A6:E1:2C:2C:81:8B:4F:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831EBAD240F57DB7C46C2453D87701EB12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cOeC8O9AJ4OlnrxpuEsLIGLT94.roa
Signing time: Thu 08 Sep 2022 20:11:43 +0000
ROA not before: Thu 08 Sep 2022 20:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1e:ba:d2:40:f5:7d:b7:c4:6c:24:53:d8:77:01:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 8 20:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1c39e0bc3bd009e0e967af1a6e12c2c818b4fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:59:a4:e0:fd:4e:c7:d7:9d:95:82:1f:55:
ca:bf:05:49:ac:54:4c:de:7d:36:7f:23:6b:b9:d0:
8f:45:eb:b1:6c:b6:9f:1e:dc:84:bc:fb:7e:4b:4b:
bb:02:70:c7:e9:5b:ac:8d:a6:25:b8:a4:c4:b0:47:
e2:70:21:3f:4c:89:7f:84:4e:86:39:8e:62:bb:aa:
9d:ff:60:95:2c:05:4f:36:3e:18:db:cf:28:dc:b1:
88:d5:07:40:e8:6f:9d:a3:9a:eb:6d:bf:ef:c1:33:
1b:d7:87:93:f4:ff:e5:39:dd:16:bb:0f:82:e3:ec:
e1:ab:1c:58:07:fb:90:9d:4b:bf:5b:9c:e0:af:9e:
37:27:15:78:88:ed:00:cf:ab:9a:7c:ed:80:51:ef:
cc:e8:86:93:ef:ad:13:de:63:72:91:6d:96:97:45:
04:af:7c:97:18:8f:a1:40:88:36:d7:43:0f:86:f4:
14:0e:99:9c:6b:c7:2c:56:33:2f:3e:fa:0f:d8:98:
ed:a1:e0:36:7a:07:86:bb:a2:39:04:5f:23:ee:5b:
8e:cb:1c:73:71:f8:4a:09:cc:47:97:6d:6c:e8:09:
a2:ef:ec:ee:4e:ea:1f:46:20:3a:dd:a0:ed:4c:2a:
f3:5b:1d:c2:dd:08:92:9c:27:20:32:f0:46:d5:87:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C3:9E:0B:C3:BD:00:9E:0E:96:7A:F1:A6:E1:2C:2C:81:8B:4F:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cOeC8O9AJ4OlnrxpuEsLIGLT94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:f1:d8:57:d6:a1:4f:7f:93:61:23:b3:97:82:3d:53:54:f1:
69:f3:57:63:54:7d:2e:3b:02:89:05:54:84:80:cb:3e:13:77:
dc:69:84:6d:dc:2b:7a:b9:6b:1c:3b:a5:98:20:fe:b7:17:f1:
8e:3b:3b:24:37:fb:98:c8:3c:1f:be:29:0a:1c:60:1f:e0:e8:
66:55:d0:d5:e1:2a:6c:6d:31:e1:b9:88:5c:2c:30:58:18:a8:
cc:b5:85:f9:75:a0:ee:92:fc:ef:c2:5d:c7:8b:71:21:c8:e2:
67:85:00:fe:30:fb:e3:01:4e:f2:fa:8e:b7:30:43:09:a6:27:
7c:18:1c:96:57:3c:fd:bf:fd:20:b9:a4:7c:9c:b9:03:9e:52:
d3:61:7a:4d:49:fb:6f:9d:e1:c0:51:8d:8c:7e:af:44:df:1b:
a3:fe:a3:ed:97:48:e5:ac:24:6c:73:43:33:db:21:72:9f:2f:
cd:a4:67:48:ae:9f:e6:84:5e:f2:c3:61:1b:ce:d9:d7:1c:9a:
6d:4c:63:49:d2:3b:fb:3b:d1:6c:ee:8f:35:f3:e3:15:79:2d:
df:63:54:87:d8:74:60:2f:93:53:ea:a0:a1:cb:0f:95:d6:a9:
33:6a:6f:c3:92:08:7c:1d:db:15:3b:c7:b9:cd:49:2a:06:2d:
85:d1:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:02 2025 by rpki-client