Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8pWwripRByAEMluiCnUToJgfuBc.roa
File: 8pWwripRByAEMluiCnUToJgfuBc.roa (raw, json)
Hash identifier: c6W1MHFWVavQ7wkS6rM2TVSLiqmiFFyvO9A9WmLaTsI=
Subject key identifier: F2:95:B0:AE:2A:51:07:20:04:32:5B:A2:0A:75:13:A0:98:1F:B8:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B175F041B9B74124DB9E8508BAC9AF2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8pWwripRByAEMluiCnUToJgfuBc.roa
Signing time: Mon 24 Apr 2023 04:11:48 +0000
ROA not before: Mon 24 Apr 2023 04:11:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:75:f0:41:b9:b7:41:24:db:9e:85:08:ba:c9:af:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 04:11:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f295b0ae2a51072004325ba20a7513a0981fb817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1c:fd:07:dd:09:f8:bf:bd:5e:1e:97:b5:ab:
8a:d5:2d:cb:65:9c:61:1a:82:f7:e3:a9:d6:06:71:
e0:d7:7d:5b:26:85:47:4b:66:f4:b0:ac:e1:4c:c3:
fb:25:67:9b:1e:4c:d5:88:41:84:3a:d4:80:ed:34:
35:f5:84:37:00:25:d9:7e:fb:bf:a9:76:0b:bf:2d:
48:de:f6:74:23:a1:fc:72:5b:b4:9f:9c:02:a0:54:
9c:ac:78:0f:10:1d:df:b6:11:84:0d:dd:22:e4:3a:
c7:65:45:8a:47:fa:65:55:90:5d:96:14:2e:2d:06:
82:dc:1e:e0:c3:bc:5c:7b:71:38:82:fb:a4:64:26:
97:6a:c4:99:db:cc:9f:4f:7f:b3:54:e1:9d:4c:c7:
c4:b5:d7:19:9c:91:63:a8:27:4f:2e:b4:f5:d7:83:
4d:ca:5a:c9:60:f5:8b:ae:24:bb:fb:e7:4e:a8:62:
0d:8a:14:5d:9e:6e:2a:c3:44:06:25:9e:ad:46:64:
df:f1:98:78:31:f5:33:8e:68:20:8b:76:c9:af:cd:
c4:60:1a:9c:40:f1:7b:59:9b:48:48:da:30:6e:d3:
39:3f:50:17:b5:62:51:8a:45:8e:fd:6f:a9:5e:d8:
8f:63:9c:96:06:ff:fe:f5:a9:9f:da:aa:f5:39:17:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:B0:AE:2A:51:07:20:04:32:5B:A2:0A:75:13:A0:98:1F:B8:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8pWwripRByAEMluiCnUToJgfuBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:72:61:64:ae:4f:fe:97:a2:aa:98:99:33:49:48:b9:41:15:
21:46:c2:39:4b:63:7b:19:3b:26:18:c6:10:8e:ed:16:52:3d:
d1:ff:6e:ee:4e:56:a9:aa:e1:0f:23:94:c5:43:ed:6e:22:59:
77:98:c2:da:d6:60:a6:c6:77:4e:3d:fb:e8:c1:39:54:b3:df:
4b:73:f4:f1:60:c0:10:0f:a8:ca:02:ca:e0:c6:92:7c:c1:ad:
2f:6e:78:67:1b:88:c6:0a:d3:62:18:17:d4:bd:c5:4b:4a:52:
4f:15:30:8d:51:ec:16:c3:97:ae:8c:67:97:36:23:c9:cc:79:
04:cc:13:31:bc:64:f3:23:40:9b:f3:35:42:11:78:3b:00:57:
7f:a6:90:27:41:61:d8:91:fe:fc:3e:22:0e:9f:10:d1:13:98:
75:62:e3:8f:7d:84:71:dc:f7:1c:f3:70:2a:29:01:d7:23:09:
0b:bf:36:3f:e9:37:12:79:4f:7e:5e:5a:bc:28:8f:48:dd:6b:
21:f5:be:70:5e:a5:d8:cd:b7:9c:a9:65:85:6d:98:e3:56:91:
95:b4:a5:48:13:ff:94:e7:11:f7:19:9e:88:e5:34:ee:dd:32:
4b:b7:d3:62:bd:ce:b8:9b:24:11:01:f1:1c:a5:2f:59:05:fc:
cb:1e:21:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:11:14 2025 by rpki-client