Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8h4NzXi9O9gfqnhx5SmbDR2Vc50.roa
File: 8h4NzXi9O9gfqnhx5SmbDR2Vc50.roa (raw, json)
Hash identifier: A3zc26pgeZxQvmmklzE7uo8Hg1PEd8mNLLirPMo84RI=
Subject key identifier: F2:1E:0D:CD:78:BD:3B:D8:1F:AA:78:71:E5:29:9B:0D:1D:95:73:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A0BB8A2F338C2691A81B354ECEAE03F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8h4NzXi9O9gfqnhx5SmbDR2Vc50.roa
Signing time: Thu 02 Mar 2023 05:11:30 +0000
ROA not before: Thu 02 Mar 2023 05:11:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:bb:8a:2f:33:8c:26:91:a8:1b:35:4e:ce:ae:03:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 05:11:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f21e0dcd78bd3bd81faa7871e5299b0d1d95739d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:34:72:2d:c4:1f:cd:09:ad:70:40:80:cf:
2a:48:d0:db:cd:b9:58:43:11:6f:ce:72:e6:2a:32:
95:88:ae:d8:03:68:c2:87:1f:7b:fb:b8:02:70:a4:
42:d9:f8:6e:51:b2:1a:21:67:45:30:65:23:14:5b:
98:f0:35:f1:4c:14:7c:c8:3e:5d:d5:37:cf:a0:68:
39:e5:35:96:ca:ea:7f:3e:d6:00:06:c6:3f:b3:42:
69:ea:ba:af:26:97:b7:30:dc:0b:b4:5d:97:89:0f:
fb:94:4b:45:bc:c2:85:4b:96:07:3a:b1:24:a9:b0:
01:9f:f2:4f:9b:af:d3:27:2b:04:1e:25:47:97:9e:
19:7e:f6:1c:9c:c8:86:57:85:e0:35:60:72:dc:09:
1e:49:74:32:97:f1:45:63:4a:36:a9:e1:8f:bb:7a:
f5:80:31:3c:ec:fd:73:4f:a0:e6:c0:33:8c:3e:b8:
ff:21:c8:02:79:99:06:88:7e:f5:9b:48:4d:70:2e:
7a:ce:c7:aa:98:6f:de:a9:8c:73:f2:61:43:6d:12:
c2:5c:13:75:aa:4c:e2:7d:e3:14:57:cd:e3:45:5c:
a7:40:0a:62:89:b1:21:ca:e4:76:f1:c9:ce:96:3a:
01:3f:1c:7e:59:46:fb:e6:be:47:fb:31:c9:7f:e2:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:0D:CD:78:BD:3B:D8:1F:AA:78:71:E5:29:9B:0D:1D:95:73:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8h4NzXi9O9gfqnhx5SmbDR2Vc50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:9d:1b:5e:24:20:01:1b:99:4e:df:ad:98:ed:20:ce:bf:63:
50:79:c4:6e:92:93:0f:cd:cc:7b:1c:7a:ae:04:99:e6:2c:15:
7b:a0:3a:bf:0c:57:47:5c:85:27:2e:5d:db:e5:0c:b7:32:6c:
de:40:0d:10:0c:a7:6f:2e:cd:4f:37:a3:53:a8:7b:ad:ff:a2:
be:67:7a:43:f6:b4:4d:8a:f5:22:3e:85:f3:9c:1e:71:44:ad:
a8:ef:33:de:37:e2:64:01:54:34:4d:5d:c0:2e:24:b9:f2:a4:
55:d5:3a:4e:42:55:d6:4b:48:3c:3b:28:d2:ee:d3:b9:0a:65:
cd:0c:ee:ca:9c:03:98:76:67:92:b9:f5:da:0c:33:d5:b8:05:
aa:44:1b:e4:bd:4f:21:6f:41:8b:8c:2c:ec:ba:a8:8c:6d:ca:
7e:52:76:7a:be:13:d7:4a:85:02:93:3e:4e:8c:8b:e4:74:38:
66:8d:b4:98:90:85:33:3f:9a:3c:dd:10:fb:9d:2b:a3:93:60:
80:5d:74:85:8a:91:8e:25:a6:3f:b5:7a:07:ad:5c:db:08:e7:
97:94:b8:a2:8d:9d:49:d5:69:b0:8c:2e:c6:58:18:4e:ac:cd:
6c:18:fc:d6:e2:a8:b4:e3:9c:aa:7b:a8:99:8e:82:b6:74:9e:
15:0e:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:33:38 2025 by rpki-client