Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8p3OJMy4bsYnMlxgmyg3wQPW6NE.roa
File: 8p3OJMy4bsYnMlxgmyg3wQPW6NE.roa (raw, json)
Hash identifier: j088fGKR5mCgNBYT0SDUO5E4CFDtatYRlvS9lQjQJjs=
Subject key identifier: F2:9D:CE:24:CC:B8:6E:C6:27:32:5C:60:9B:28:37:C1:03:D6:E8:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184376B59671207678EB8BB622785DE68B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8p3OJMy4bsYnMlxgmyg3wQPW6NE.roa
Signing time: Wed 02 Nov 2022 08:18:12 +0000
ROA not before: Wed 02 Nov 2022 08:18:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:6b:59:67:12:07:67:8e:b8:bb:62:27:85:de:68:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 2 08:18:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f29dce24ccb86ec627325c609b2837c103d6e8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fe:15:43:06:77:85:c4:6a:07:0e:b7:cc:54:
ce:c9:d4:7b:8d:32:20:f5:03:ba:86:46:ce:9b:67:
ca:66:3d:b7:b9:12:69:7f:07:89:80:6c:ae:1a:da:
e3:6b:1e:01:a0:3f:c3:c1:5d:d3:14:c6:ba:6b:2a:
cf:34:ab:25:09:60:60:18:96:bb:d3:e1:e8:b6:ff:
35:c6:60:42:2d:a1:c2:ce:81:ce:c2:9a:55:98:68:
03:84:c5:3a:e2:38:a4:94:77:4a:5b:76:61:af:e7:
61:19:76:7c:30:e6:60:ae:7d:1a:e8:08:2d:2d:9d:
f5:62:aa:48:9e:ac:37:30:49:2e:0e:f8:5a:9f:13:
af:dc:1f:19:1d:5c:00:d1:e9:7c:41:26:58:29:70:
65:17:9c:23:50:14:f5:a1:ab:32:7f:d0:8d:f2:61:
ac:ad:fc:1d:aa:48:71:c8:d5:12:d5:4b:f7:60:e6:
5a:59:d6:57:3d:36:78:4f:a9:bf:4d:57:89:b8:b0:
31:49:9e:e4:95:18:f4:c9:a0:0c:de:5b:29:e1:c1:
fe:3b:bb:8d:da:ad:fb:42:95:b3:38:91:f0:48:38:
ec:14:a8:eb:fe:29:53:fc:57:30:fe:ee:51:d0:c9:
96:2c:10:15:a3:2b:b0:b8:bc:85:b0:91:01:24:48:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9D:CE:24:CC:B8:6E:C6:27:32:5C:60:9B:28:37:C1:03:D6:E8:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8p3OJMy4bsYnMlxgmyg3wQPW6NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:50:47:dc:fc:0a:b4:fe:25:ca:cb:b0:27:34:01:3d:73:40:
fa:60:22:35:31:de:a8:3c:01:3c:7f:c4:6e:9b:61:45:b3:f0:
d5:d1:37:3f:1a:5d:87:c6:83:bd:c3:17:bb:11:2f:c4:2e:c8:
c0:45:5c:8c:d0:1e:5f:ab:3f:77:bb:37:48:5e:49:66:ee:3b:
fd:61:cf:bc:eb:dc:79:38:98:48:3a:05:4e:3d:a3:af:15:95:
5e:8e:14:13:b0:3d:83:df:2e:60:81:c5:38:5e:d8:a9:07:c2:
b5:d6:4a:2e:2b:67:a2:07:24:c8:ae:28:d6:de:56:4d:fd:cb:
e7:59:73:9c:4a:12:ae:a9:0e:8a:d8:14:93:f4:82:9a:a8:ce:
a1:2a:9c:7b:7c:dc:ca:d5:e3:44:97:b3:98:38:ab:ae:d6:f0:
88:82:aa:27:44:af:c0:b1:17:55:44:b2:41:ad:1f:92:ef:06:
44:3a:24:1a:65:4a:a5:9e:a2:eb:52:65:bc:0b:3d:f8:26:02:
66:f4:db:d2:c6:63:e7:19:40:43:47:e9:37:ad:bc:c5:80:19:
7e:b6:1b:67:a1:32:0a:21:4f:d3:d3:7a:6a:d2:d4:f7:4b:fb:
cf:a6:9f:5c:80:78:ee:75:34:e4:af:70:90:e9:0f:69:8a:5c:
d1:f9:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:36:13 2025 by rpki-client