Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8ngvuB--griMRxzfybek7esvnUQ.roa
File: 8ngvuB--griMRxzfybek7esvnUQ.roa (raw, json)
Hash identifier: CGDJFK7fc3twg59f7dcopyhAU1/+0oDqzyl8/bB+uaU=
Subject key identifier: F2:78:2F:B8:1F:BE:82:B8:8C:47:1C:DF:C9:B7:A4:ED:EB:2F:9D:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70493EEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8ngvuB--griMRxzfybek7esvnUQ.roa
Signing time: Sun 06 Mar 2022 20:10:42 +0000
ROA not before: Sun 06 Mar 2022 20:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883848431 (0x70493eef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 20:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2782fb81fbe82b88c471cdfc9b7a4edeb2f9d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:8c:f4:f9:6e:48:8d:2d:e6:fa:c6:c6:30:
f8:69:e1:93:7b:b3:c2:f6:8a:4c:9d:73:f2:70:d4:
24:1f:74:13:bb:7b:64:bf:e9:11:8f:b0:25:87:ab:
64:c6:34:5c:e2:06:56:96:7c:d5:ba:34:86:8a:cd:
be:d0:6d:fc:e7:01:51:ff:7a:a5:a9:fc:34:1a:c2:
21:47:75:ff:a0:18:b7:44:c1:14:1e:bb:92:62:66:
81:06:ca:d7:20:5f:4a:b7:f2:b1:6b:66:89:88:6b:
30:02:2e:78:08:87:56:e1:46:44:10:8d:2d:e5:9f:
3e:8d:d3:dc:12:f7:72:27:b8:6e:d6:24:ea:6f:0b:
5c:74:74:95:f4:97:76:0b:a0:b4:c2:f9:45:c7:35:
d9:51:8c:47:30:12:e8:9f:52:db:ee:b4:32:7d:d7:
04:4f:80:03:a2:a5:1a:c7:79:20:36:9d:c8:55:3e:
80:40:18:46:c1:be:9e:0e:3d:08:6e:0f:bb:1b:81:
d6:8c:e8:78:28:2b:41:2c:36:ed:64:14:66:59:42:
14:b8:7e:31:8d:5f:65:1e:8c:68:98:02:f3:af:cb:
be:7c:54:80:c0:3f:b2:d7:b4:1d:ea:6b:76:fb:54:
c0:1d:ce:ab:18:1d:9c:76:99:5d:fc:77:61:85:44:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:78:2F:B8:1F:BE:82:B8:8C:47:1C:DF:C9:B7:A4:ED:EB:2F:9D:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8ngvuB--griMRxzfybek7esvnUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:00:dc:b3:4f:8e:21:8c:80:80:33:07:9b:24:83:8b:40:fb:
5e:53:f1:78:e7:62:b6:64:fc:fc:cf:89:10:47:8b:ca:da:00:
5f:0b:21:c8:bc:0a:b0:5d:b5:cc:82:26:2c:62:26:67:b0:a8:
d0:91:3e:bd:51:0f:c7:c3:06:0b:05:10:bc:4e:d7:98:c9:41:
01:c3:50:38:b1:26:88:c6:a1:75:8b:a8:37:e8:ae:c7:bf:5f:
15:a5:54:99:3a:00:76:80:45:2a:1e:88:72:57:96:df:38:11:
67:5d:43:b1:2a:d5:e3:ea:53:20:9a:72:2a:c2:ab:87:9d:7a:
2d:12:b7:85:8e:09:60:65:87:06:6f:c3:dc:57:9c:46:e4:25:
49:71:4b:d6:54:6d:a4:19:bf:6b:d6:e9:00:a6:65:ae:f0:62:
2a:77:c3:84:b6:22:f5:f2:d1:3c:2d:c9:d5:54:43:7b:e1:2a:
82:55:15:76:cd:40:d2:0d:c9:59:b9:50:16:c2:84:dc:bc:d0:
14:8c:f8:25:4f:fb:9a:64:5e:7c:58:2c:cc:84:c9:16:08:cb:
a7:59:ef:71:60:c0:e4:9e:77:2c:f2:87:41:cb:85:ec:81:71:
b1:63:c9:db:b6:7e:fa:97:96:5a:ba:0e:21:37:69:f2:d0:a8:
7d:e0:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:44:00 2025 by rpki-client