Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8koQvWH2QDTRhmA5R04q1r7n23o.roa
File: 8koQvWH2QDTRhmA5R04q1r7n23o.roa (raw, json)
Hash identifier: XzDe9xRosppSVcwTf/HalrpG09v+P/fDteCZjAywEws=
Subject key identifier: F2:4A:10:BD:61:F6:40:34:D1:86:60:39:47:4E:2A:D6:BE:E7:DB:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894B8800E31931D2FA4BF7D0270C77DFFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8koQvWH2QDTRhmA5R04q1r7n23o.roa
Signing time: Wed 12 Jul 2023 19:15:51 +0000
ROA not before: Wed 12 Jul 2023 19:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:88:00:e3:19:31:d2:fa:4b:f7:d0:27:0c:77:df:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 19:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f24a10bd61f64034d1866039474e2ad6bee7db7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:c0:fe:6d:3d:74:31:97:3b:b1:78:10:d2:
a3:83:e3:61:f9:62:8b:15:38:78:fd:35:90:0f:f0:
84:ac:f3:5e:4e:aa:c4:d5:12:00:3f:54:07:71:3c:
7d:93:65:71:f7:f1:57:82:53:37:50:18:af:78:bd:
4c:88:17:e7:85:cf:83:3a:3d:db:47:7d:3f:38:d1:
5e:7f:c7:cc:b8:c4:af:8e:38:3f:66:02:18:59:fd:
3a:fd:a4:78:70:1d:83:05:86:7b:da:38:f5:e4:6c:
00:04:42:29:b3:58:18:4b:da:e9:e3:64:51:ff:99:
f0:3b:56:f3:f2:15:97:de:2a:59:9f:b8:64:99:9d:
81:d6:74:86:3e:f0:5e:bd:f5:e6:67:51:5a:40:2b:
ea:dc:1c:18:a4:4e:ec:54:50:6f:e1:64:ce:d3:ff:
45:a7:43:9d:45:4b:3f:80:d3:15:ba:d4:f5:99:10:
9b:02:03:59:ea:60:ef:d7:1c:d8:d0:db:5f:91:3c:
6e:c1:08:db:ea:eb:f9:67:e3:8b:f4:a1:72:d3:e7:
93:b4:88:39:fa:22:c7:ca:54:cf:2a:52:2a:68:49:
19:3e:b5:c3:7f:6e:17:ad:ba:e2:89:b8:30:a2:cb:
ac:48:ad:e2:94:22:00:d9:34:1c:4e:b9:04:3e:d5:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4A:10:BD:61:F6:40:34:D1:86:60:39:47:4E:2A:D6:BE:E7:DB:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8koQvWH2QDTRhmA5R04q1r7n23o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:97:d2:84:48:d8:79:d5:41:93:68:78:2c:ab:b7:35:df:b5:
16:98:62:c5:92:7e:d6:db:0f:b7:20:f0:0b:d9:f3:6f:bd:9c:
1a:67:64:53:96:07:88:19:e6:2c:4c:62:62:7d:bd:f3:1b:7d:
2d:0c:99:ca:db:23:cf:e7:15:9f:57:a0:d3:1e:66:7c:3c:f0:
01:dd:ed:5c:95:b9:dc:a8:ba:a3:50:3b:3e:ff:30:8e:79:5f:
a5:08:6d:be:22:a4:fe:c3:e6:36:59:31:e5:4b:c5:44:ae:49:
7a:d3:f3:76:21:9c:98:74:5d:75:80:bb:a5:5b:81:31:18:0d:
d7:36:59:0d:ba:10:3e:88:22:0c:7d:fd:c2:50:58:ae:a1:e0:
9d:fb:ba:ad:44:78:5d:1c:5e:b4:7c:f0:8c:b2:4f:1d:20:e0:
ca:73:b8:c8:34:e1:6e:b6:15:d2:b3:49:c1:44:27:5d:b3:11:
19:6b:d0:82:ee:6f:6a:12:3b:48:4f:52:0c:65:48:57:46:ba:
b1:95:44:ea:f5:8f:91:33:dc:5f:f9:b5:f2:ad:0a:b4:0d:d8:
6b:28:03:a6:05:0b:3c:42:86:7f:83:af:79:6e:da:db:bc:4c:
d3:e4:37:61:51:26:70:8b:7e:5c:9f:1d:40:31:f7:8b:f6:68:
21:ad:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:00:30 2025 by rpki-client