Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8uIgV7rMVlb1HEx_PBOVKBKKPf0.roa
File: 8uIgV7rMVlb1HEx_PBOVKBKKPf0.roa (raw, json)
Hash identifier: NxSuxdDwtQl3Sa9bi4IY0XjQrA5XB7jTOh1E/BRSEdQ=
Subject key identifier: F2:E2:20:57:BA:CC:56:56:F5:1C:4C:7F:3C:13:95:28:12:8A:3D:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01828C9B4C2B37C9ED70DEE2984A7BDCD712
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8uIgV7rMVlb1HEx_PBOVKBKKPf0.roa
Signing time: Thu 11 Aug 2022 11:12:43 +0000
ROA not before: Thu 11 Aug 2022 11:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:9b:4c:2b:37:c9:ed:70:de:e2:98:4a:7b:dc:d7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 11:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2e22057bacc5656f51c4c7f3c139528128a3dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:44:de:23:cf:64:07:81:dd:52:71:ec:00:
7e:53:a2:de:b4:b2:3c:8f:d3:2d:2d:eb:99:48:0b:
fe:21:49:4c:ef:30:7a:ad:f5:26:e6:f9:93:67:ee:
f6:73:e6:a1:fc:eb:a5:a3:f6:6d:0a:be:8d:93:ff:
9f:61:60:68:bd:af:51:39:cf:c8:e7:63:fb:fb:a8:
3d:57:1f:5a:75:4e:d8:cc:d2:fd:da:57:ea:72:f6:
a1:0b:31:da:81:d3:92:ab:e2:19:3d:04:c7:04:34:
bf:a5:28:a0:a8:4d:28:05:b0:fb:e5:c7:e6:7f:ad:
f1:27:d7:05:07:16:a8:ab:a8:bc:94:fd:fb:b7:08:
cd:44:b6:14:fe:47:31:82:1c:5c:d9:a8:ef:3f:74:
11:0c:0b:7a:cd:cf:b6:fc:c7:8e:89:19:72:f3:2c:
d3:f2:d4:4b:c4:25:1a:c3:23:79:cf:ac:c6:d4:9e:
0b:84:b3:51:be:c0:22:38:5a:c7:e4:54:6e:7c:0a:
08:cb:c8:ad:b1:3b:99:8e:64:2a:55:72:fa:fd:af:
9e:ef:dc:e8:db:4b:20:57:8a:5c:fb:e3:b8:c0:e4:
89:60:a8:96:d1:11:c5:73:b8:7f:a4:d3:7c:6f:6f:
2f:d6:a0:32:28:82:f7:c6:60:15:c1:1c:be:62:d9:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E2:20:57:BA:CC:56:56:F5:1C:4C:7F:3C:13:95:28:12:8A:3D:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8uIgV7rMVlb1HEx_PBOVKBKKPf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:34:0d:7d:1d:99:9f:3e:3f:36:81:0c:18:e0:ed:1a:d3:43:
6d:85:d5:81:1e:e2:8b:20:2f:74:a8:d6:ea:f4:ac:78:2d:ab:
e8:fd:4b:af:b3:b7:84:4b:49:99:37:74:fc:1d:78:17:c2:7a:
59:e2:8c:d2:78:b2:5f:22:11:35:92:43:ab:ce:6a:25:24:3f:
77:49:3a:32:5c:e6:5f:3c:53:70:8c:de:a9:21:8c:66:5c:59:
69:3d:4a:23:31:90:a7:c0:45:30:c0:49:72:1c:b2:cb:44:bd:
33:b7:07:f3:0a:ae:63:c0:74:47:61:eb:3c:5c:c7:44:e7:de:
c9:34:d1:83:6b:a1:6e:1a:b2:6c:f7:ad:00:8c:ae:06:76:24:
d1:cf:a0:05:86:30:25:72:b6:e7:ac:01:9c:18:d5:94:41:8a:
8c:47:9f:5f:e6:22:c6:b6:8e:89:b7:e2:4b:38:60:80:4c:33:
af:cf:ec:6e:68:de:29:3c:63:4e:03:ec:f2:af:ff:69:67:24:
77:dc:dd:2f:fd:49:86:bb:d0:0f:12:a6:b2:02:46:f1:d2:7c:
1a:8d:f0:da:2a:c6:7f:6e:9a:e4:e4:a3:1f:83:bd:4d:3b:27:
80:64:fa:d4:ec:36:14:08:28:09:6f:e2:dc:da:96:cd:57:51:
f6:ac:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:33 2025 by rpki-client