Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8gf74ghq3lp23ddJ0WpLSOjyAqo.roa
File: 8gf74ghq3lp23ddJ0WpLSOjyAqo.roa (raw, json)
Hash identifier: Chv/zoHAs/bHxmliSJQ4GP3lkbHMNgW+73qhUf8KFyc=
Subject key identifier: F2:07:FB:E2:08:6A:DE:5A:76:DD:D7:49:D1:6A:4B:48:E8:F2:02:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7CBF3FA4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8gf74ghq3lp23ddJ0WpLSOjyAqo.roa
Signing time: Tue 19 Apr 2022 18:10:58 +0000
ROA not before: Tue 19 Apr 2022 18:10:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092908452 (0x7cbf3fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 18:10:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f207fbe2086ade5a76ddd749d16a4b48e8f202aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:81:ef:b1:96:0a:cb:a2:70:ec:e8:bb:65:63:
90:72:e0:77:3f:a9:f7:a5:14:52:4d:52:0b:d2:ec:
00:cc:83:11:c8:4e:a6:4f:31:2f:b8:ed:9e:cc:ee:
93:96:2b:47:58:59:2b:50:fc:99:00:d3:df:28:a9:
af:44:68:d3:09:c1:3e:90:ab:e2:83:77:d7:ef:f4:
1d:9b:32:7d:1e:62:15:3d:51:62:e9:56:78:65:7a:
42:cc:7f:14:ef:ea:01:fe:d0:aa:4c:f9:51:4a:5c:
22:45:af:b0:53:ef:c4:55:82:6b:07:2e:8e:2c:01:
ce:12:b7:fd:fb:59:0e:58:32:b3:75:41:47:ca:f3:
9a:5e:79:53:cc:8f:35:49:65:54:fc:f3:6c:52:f6:
f4:7d:f9:8f:a7:53:8a:1a:00:7c:aa:df:8e:8b:a5:
52:6e:04:60:a8:07:b0:b2:4a:55:7e:3d:e3:38:a8:
76:19:5c:cd:a2:2e:d4:0d:79:4a:66:56:58:fc:6b:
3d:49:2f:d8:a0:0b:99:97:39:75:bf:7a:e0:1d:6b:
10:f9:f7:40:88:2b:1a:05:3e:c4:38:d6:83:e0:18:
ba:ac:f1:55:20:71:c7:cc:75:5f:5e:92:54:6b:48:
ea:3e:32:4d:6c:07:f0:52:54:d7:07:81:9d:77:69:
97:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:07:FB:E2:08:6A:DE:5A:76:DD:D7:49:D1:6A:4B:48:E8:F2:02:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8gf74ghq3lp23ddJ0WpLSOjyAqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:9c:a3:3a:8c:07:01:86:2d:0f:1b:83:a7:77:0b:91:b4:d7:
c8:93:01:76:17:e2:a4:ca:6d:6a:ed:16:54:9b:9f:61:52:6f:
e5:3e:e0:3d:b0:61:d7:f9:71:b8:4a:83:26:19:4c:dd:14:2a:
90:23:2b:a9:9d:5f:55:5c:1d:7f:8e:b6:86:70:dc:f9:c8:50:
7e:d8:97:15:95:67:d8:4f:d2:d7:5e:31:fe:04:40:b8:64:75:
da:0b:98:40:bd:e6:fe:2a:42:81:71:6f:51:fc:da:94:98:d6:
bf:57:c3:0f:bf:92:7d:30:8e:82:01:b5:3f:51:15:bf:70:ff:
35:94:31:4c:03:1f:cf:56:1f:55:9d:cd:dc:88:2c:ed:42:6b:
54:3e:4a:d3:40:08:aa:48:c0:fd:61:42:15:ff:4c:3b:1b:9c:
e6:d4:c6:a9:10:1e:a8:37:fe:a9:c4:c6:92:c1:bb:ad:69:d4:
d2:8a:8c:63:59:09:09:1c:7b:fe:fa:92:0a:8e:28:85:e0:ce:
49:23:b9:90:1b:eb:29:6b:0e:a4:0a:70:6d:67:95:30:d7:83:
8a:43:a8:93:09:84:b7:53:26:66:2a:4e:9f:0c:de:1c:71:8f:
7e:b3:7b:6e:56:d2:20:b9:cb:42:cf:98:34:e5:d1:d3:c3:c0:
2f:75:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:11:04 2025 by rpki-client