Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8m9yPdopXwJE_OKpV7BiVrMGPg8.roa
File: 8m9yPdopXwJE_OKpV7BiVrMGPg8.roa (raw, json)
Hash identifier: UyqktbMG8grproxdnV5G3X0Fg5rhgOfYTk2IPzaJ+0c=
Subject key identifier: F2:6F:72:3D:DA:29:5F:02:44:FC:E2:A9:57:B0:62:56:B3:06:3E:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CB01BCF5D89B7B972801DE9211C67290
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8m9yPdopXwJE_OKpV7BiVrMGPg8.roa
Signing time: Fri 10 Mar 2023 10:12:14 +0000
ROA not before: Fri 10 Mar 2023 10:12:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:01:bc:f5:d8:9b:7b:97:28:01:de:92:11:c6:72:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 10:12:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f26f723dda295f0244fce2a957b06256b3063e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:be:bd:2f:d5:ca:4f:a1:88:54:5e:41:fb:
a3:34:34:3c:0b:cb:aa:06:ff:1d:f4:b8:b6:0a:35:
fd:78:5e:1c:d9:40:9e:8b:86:12:91:aa:b1:f6:71:
26:3f:fa:60:8e:69:a6:29:3a:f4:74:2e:97:6d:fe:
6e:29:d8:f1:9a:bc:a4:17:f0:a5:a8:7c:25:62:d0:
bb:36:af:0f:63:23:eb:c1:e3:f8:c3:f6:1e:c2:27:
f0:a8:9e:6c:71:3f:9a:c8:c8:59:a7:61:ed:f1:13:
cb:a2:3b:05:4b:af:90:54:d6:72:a3:bf:d2:92:6c:
be:63:22:83:2a:c3:d5:74:26:fd:0f:b0:0e:dd:67:
9e:ab:fd:05:90:6f:c3:3b:dc:2b:b2:4d:43:b0:47:
42:60:7c:d0:1b:37:a6:f4:c5:47:45:95:c9:5e:d5:
c9:7c:96:a4:2a:85:9c:b9:8b:2d:37:6a:10:a0:33:
57:39:57:f6:13:50:3a:18:6a:74:a9:6b:97:6b:ac:
68:b2:b4:d9:d2:e8:54:bd:24:7e:89:49:30:2a:47:
f3:68:e8:f0:7a:2b:14:43:c1:39:69:2e:ea:0d:fc:
65:55:f3:77:69:d5:2f:59:5a:3b:04:1c:42:08:04:
89:a3:fc:94:24:c6:35:c4:e2:f4:8a:60:47:4f:f3:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:72:3D:DA:29:5F:02:44:FC:E2:A9:57:B0:62:56:B3:06:3E:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8m9yPdopXwJE_OKpV7BiVrMGPg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:2d:b2:7e:df:6e:da:ca:b2:dd:7b:57:4b:20:7b:cf:ad:ac:
39:eb:50:c8:e1:42:dc:00:3a:c4:67:a6:a7:f2:42:69:05:3b:
bc:87:ad:16:d8:04:7e:06:42:6b:c0:6c:af:60:6f:ea:b6:76:
26:cf:14:90:dd:a0:3e:4c:44:05:d6:f4:f8:e0:d7:61:ee:b0:
81:61:f0:82:fa:b3:50:6d:79:bf:e1:6c:4d:9e:fd:1e:b4:44:
cd:65:22:b0:04:e0:28:02:ff:1a:98:e9:3d:4d:7e:df:38:dc:
4c:55:94:e1:d9:3c:20:a5:f7:69:21:d2:3b:38:ef:75:a8:c9:
2e:02:9d:a5:57:e1:1a:5a:da:64:63:01:4d:f2:83:85:d8:4d:
36:cf:d0:2a:4d:b6:36:60:ab:00:1d:1a:7c:36:90:d3:04:2c:
cf:83:c0:20:48:22:ba:f5:64:9c:ec:42:22:c2:30:0a:43:8d:
3d:32:c7:b1:a7:94:aa:44:56:04:6a:af:3e:3d:da:b0:22:26:
10:0e:f1:be:d9:d2:ea:51:24:f0:bb:d7:c6:75:eb:5d:eb:ea:
44:a7:35:30:27:a2:ef:56:7c:7d:26:19:01:b5:30:29:eb:0d:
9a:ec:c0:0f:a5:e0:10:82:b5:32:47:9b:57:14:cd:41:d7:19:
43:bc:25:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:55:46 2025 by rpki-client