Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8hkstu0DNeQnq0-A4qkV7b5jq2E.roa
File: 8hkstu0DNeQnq0-A4qkV7b5jq2E.roa (raw, json)
Hash identifier: g4RTY8ZC+YtdyyopDmIpNGO5P0u8iTDOP0hdcMLrvHM=
Subject key identifier: F2:19:2C:B6:ED:03:35:E4:27:AB:4F:80:E2:A9:15:ED:BE:63:AB:61
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182CAD16132A82C59F211302433BDBF1982
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8hkstu0DNeQnq0-A4qkV7b5jq2E.roa
Signing time: Tue 23 Aug 2022 13:08:15 +0000
ROA not before: Tue 23 Aug 2022 13:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:cad0:7971/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:d1:61:32:a8:2c:59:f2:11:30:24:33:bd:bf:19:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 13:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2192cb6ed0335e427ab4f80e2a915edbe63ab61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:3c:61:56:63:b2:95:e9:1f:12:96:05:f4:
c2:ca:ac:ca:39:05:11:b4:6e:c0:e6:f7:bb:00:7e:
2c:cf:bc:81:81:0f:d3:0f:28:43:e7:e8:ae:ba:18:
56:43:19:d3:8a:61:11:52:f8:3d:60:ce:e0:00:cb:
09:c6:00:10:88:fd:03:7f:b2:c4:da:1a:8e:ab:c1:
cd:c4:49:c9:cf:0a:df:34:cb:0a:90:e3:ce:5e:dd:
73:c7:fe:84:7e:90:33:85:28:04:dc:b0:f5:28:7d:
a1:98:b6:9f:ec:9c:ec:cc:17:2d:7e:9c:8d:a3:33:
5a:51:50:11:5f:5d:d2:08:5e:95:f1:1f:f2:51:39:
bb:4c:19:7f:af:00:2e:d3:41:d3:48:fd:15:86:bc:
ce:ba:7b:0d:02:2a:2c:6c:fb:76:e1:a6:95:71:3c:
34:10:b5:fa:b8:9b:25:f1:35:ae:7e:cf:ca:f7:5a:
2c:c0:a2:08:23:c4:0d:14:e3:29:d4:16:d1:ac:6e:
0e:0b:65:27:8b:3f:24:52:46:98:47:ab:68:1e:20:
bf:a2:6d:4c:5f:45:25:e9:5b:a7:d8:04:d9:fe:d2:
78:9f:04:27:87:a1:26:0b:a7:d6:4c:8e:76:a1:7a:
fe:36:39:49:ea:da:38:d8:45:0b:a9:ae:f7:cf:64:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:19:2C:B6:ED:03:35:E4:27:AB:4F:80:E2:A9:15:ED:BE:63:AB:61
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8hkstu0DNeQnq0-A4qkV7b5jq2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:92:5b:fb:1a:62:92:62:4d:e2:44:9a:bc:c8:de:8f:5f:d1:
3e:4c:75:5d:f4:3b:9e:f7:f9:3b:48:40:e4:31:d4:55:f1:13:
78:cc:a4:c1:d9:53:17:44:f0:fb:67:93:af:5a:d1:41:03:05:
4c:3d:6d:69:06:28:e7:31:0c:90:1f:bb:fd:e0:81:c8:f6:53:
aa:6a:f5:e4:87:b2:84:38:cd:9d:96:fb:6e:88:e5:63:a6:75:
b7:9a:55:90:24:f1:33:82:03:e4:1c:87:79:53:71:93:8c:4e:
da:73:86:87:e1:85:5a:f9:53:f5:a8:7f:eb:73:83:3f:97:6e:
00:11:74:ba:f6:7a:3f:26:14:92:25:85:56:a0:16:75:dc:60:
98:ff:2f:85:0a:0e:ca:4b:e7:0a:26:ad:e4:95:7a:af:26:00:
7f:a6:0e:3e:e1:f6:12:0e:92:08:61:dc:b5:c8:cd:f1:8b:d5:
f7:9c:7e:8c:62:01:e7:b6:2e:a0:eb:e3:f6:b4:82:74:c5:ff:
59:c5:82:14:75:11:7f:4f:70:30:f5:52:05:21:9e:6d:0e:c6:
50:55:b4:4f:bb:c6:6e:b7:da:d1:f2:3f:83:1d:60:dd:11:c1:
3b:dd:a2:c7:4a:63:fd:15:2d:d5:6f:45:ea:1b:ea:33:c7:6c:
20:64:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:42 2025 by rpki-client