Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8dSGzcQNQNJN7Fb15MrejjdvPbs.roa
File: 8dSGzcQNQNJN7Fb15MrejjdvPbs.roa (raw, json)
Hash identifier: 7RMrfaPwpo1tKDxq1sbmR8ShWJrQnS0NIOhhF1XFKEM=
Subject key identifier: F1:D4:86:CD:C4:0D:40:D2:4D:EC:56:F5:E4:CA:DE:8E:37:6F:3D:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850B2FB23FF9A178144AEFD4BAFE31B890
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8dSGzcQNQNJN7Fb15MrejjdvPbs.roa
Signing time: Tue 13 Dec 2022 11:12:33 +0000
ROA not before: Tue 13 Dec 2022 11:12:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:2f:b2:3f:f9:a1:78:14:4a:ef:d4:ba:fe:31:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 11:12:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1d486cdc40d40d24dec56f5e4cade8e376f3dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:cd:9b:62:6e:bc:25:e3:32:e5:15:aa:af:
bf:42:3a:78:1f:4e:4c:8d:ee:39:ab:9b:16:ea:4d:
68:60:cf:45:4c:27:68:66:62:5f:25:a4:60:30:e2:
39:19:7a:81:67:4d:3a:ee:62:a0:58:ff:47:9f:c3:
09:cc:ca:8b:eb:0e:8f:1e:8f:30:5c:a9:d3:83:9d:
b8:dd:51:47:aa:09:a8:80:56:53:35:e2:d2:4a:da:
a5:f3:67:ea:9d:00:3a:92:22:6a:e5:b8:a3:56:8c:
b5:55:8a:e2:7c:ba:86:ab:35:c6:e3:c7:24:3f:93:
48:60:fd:cf:c9:90:bb:f7:a3:6c:3e:bf:28:b6:4a:
33:cb:80:97:3a:9a:10:61:c5:d5:cd:ab:33:34:1f:
f2:30:88:7c:a2:19:34:8d:0c:fb:01:8d:1b:ef:4c:
b0:f9:27:52:10:70:74:ba:fa:0d:05:40:9c:5c:78:
28:fc:80:36:6a:df:83:b5:a2:66:be:c4:16:4b:5d:
9e:21:af:54:af:fa:8b:d0:f3:17:be:64:3b:cf:8d:
dd:68:ef:2a:84:d6:72:15:72:53:a0:89:b7:de:b0:
d7:f1:a4:a1:ea:9f:63:ee:3e:86:e7:7b:95:77:92:
6c:76:01:7b:2c:3e:f5:c1:22:be:a1:01:09:6f:e8:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:86:CD:C4:0D:40:D2:4D:EC:56:F5:E4:CA:DE:8E:37:6F:3D:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8dSGzcQNQNJN7Fb15MrejjdvPbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:a7:19:bc:67:3a:02:3b:ca:f3:9c:ad:34:4b:a2:93:c1:3a:
88:a7:3a:36:5d:5c:6b:5d:88:a2:3a:7c:17:83:12:74:a9:2d:
2b:67:e2:12:c7:d0:37:50:14:ff:f8:93:92:45:eb:69:35:a8:
32:b3:8e:39:33:d0:1b:91:99:20:76:07:a9:f6:54:af:06:da:
ec:2a:9a:bb:dc:60:f5:dc:6f:fd:5d:4e:d3:fc:bd:bc:5a:34:
ff:40:fd:92:ef:fc:41:73:93:cf:54:ea:21:bd:3c:cc:dd:08:
c7:bc:84:69:28:64:77:8c:bc:84:65:c2:19:a5:43:07:4a:d2:
c6:d1:fd:a2:88:c7:ba:f0:de:77:2c:2b:ac:31:b2:23:96:c4:
61:72:0b:83:be:9c:43:db:f8:81:72:b4:6c:8e:b2:60:47:fe:
01:ca:d7:d3:d2:82:28:61:7b:83:59:13:49:bc:85:1d:81:81:
d0:f7:85:f3:a5:b8:6a:19:f8:30:11:04:e5:c9:b7:cf:3b:9b:
bf:b1:6e:3b:35:d6:d7:30:e1:ea:8e:1a:aa:a9:50:b2:75:a8:
ec:25:63:d6:06:d8:98:8f:02:dd:fe:34:b1:5b:cf:1e:44:8a:
fb:4c:59:57:9b:f3:61:e7:77:69:c5:f1:b8:ff:7b:79:a1:ad:
63:10:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:13:48 2025 by rpki-client