Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8wSl-2m_2Dv1CO3zwBSNMToUDrM.roa
File: 8wSl-2m_2Dv1CO3zwBSNMToUDrM.roa (raw, json)
Hash identifier: +NXIRl4Z8hSuB5VoV2QDD0iyjeVbGgRMpNCYaXR10VY=
Subject key identifier: F3:04:A5:FB:69:BF:D8:3B:F5:08:ED:F3:C0:14:8D:31:3A:14:0E:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182AB4DC88761FDA10BB4A365EABF36278C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8wSl-2m_2Dv1CO3zwBSNMToUDrM.roa
Signing time: Wed 17 Aug 2022 10:16:17 +0000
ROA not before: Wed 17 Aug 2022 10:16:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:4d:c8:87:61:fd:a1:0b:b4:a3:65:ea:bf:36:27:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 10:16:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f304a5fb69bfd83bf508edf3c0148d313a140eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:bd:b7:89:65:48:07:c4:36:68:a1:3d:a0:
03:0a:f9:d1:8a:49:13:0d:21:01:c7:e2:ed:4a:86:
98:27:f7:ab:74:be:6b:9c:30:24:42:b5:89:83:ef:
2b:c0:2e:44:40:a1:57:eb:1c:66:33:4a:a1:93:c3:
8e:6b:53:10:c9:71:97:e6:0f:9d:b1:3f:11:69:b6:
bb:bb:f7:01:6c:93:16:5d:63:61:ad:ca:ad:85:8e:
ae:46:32:42:89:ee:f1:cf:69:2b:c5:79:e6:79:11:
91:a8:e6:bc:41:7e:cf:a1:5c:cc:3c:9b:e7:1e:e9:
9a:74:0d:a7:89:12:c9:e2:ed:52:ac:22:de:81:a8:
81:30:91:a4:32:52:f4:b1:22:76:56:53:2e:76:ea:
ef:17:db:46:5d:a8:20:d8:b9:df:99:92:36:09:25:
1a:63:4d:e0:8b:f4:5a:59:18:08:a3:c2:e2:ad:f6:
1d:25:d8:e8:75:59:45:aa:47:a7:93:64:04:fd:74:
59:90:82:45:58:d1:b9:12:2a:f7:4b:d3:bc:7e:c5:
53:10:49:ce:50:cd:ad:4a:e7:ff:ac:61:72:30:8a:
47:35:e4:66:04:34:ff:12:7f:5e:50:22:6c:07:85:
46:63:c0:24:e6:b8:da:d5:4f:96:96:14:9f:81:bc:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:A5:FB:69:BF:D8:3B:F5:08:ED:F3:C0:14:8D:31:3A:14:0E:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8wSl-2m_2Dv1CO3zwBSNMToUDrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:6f:ea:0b:9e:47:14:c4:67:1c:7b:05:5f:53:73:de:77:b8:
97:7e:14:05:26:b5:06:69:35:0e:99:d7:89:12:71:eb:63:46:
12:03:16:dc:e1:a6:e0:0e:66:2e:82:21:c8:ef:a5:2b:11:5b:
56:70:50:8a:65:66:b4:ba:1e:dd:d4:dc:21:24:11:32:0b:3e:
73:b1:8f:2a:21:b5:37:6f:47:69:89:63:c6:ed:aa:62:bf:bf:
24:e8:78:21:b3:a6:05:9b:68:bf:b0:43:6d:06:8e:6a:12:fa:
7e:b7:0b:39:05:ca:fb:d5:42:ac:0a:d6:ed:0f:71:52:bb:93:
b2:7c:e4:18:df:b3:ca:4b:38:c6:3e:7b:66:88:e4:4c:67:d5:
56:11:01:da:d8:f1:b7:44:4b:96:f2:a8:f6:ba:90:c9:7e:8e:
77:17:71:c2:22:5b:05:03:82:f8:48:08:0c:e4:49:e9:8c:03:
53:98:03:bd:e0:68:74:c4:6e:45:a6:a4:46:d5:75:11:11:0b:
c3:41:58:46:94:0f:45:50:c9:6d:11:a8:0a:2b:ed:f1:89:58:
3b:79:b3:83:58:b8:58:86:66:3f:a2:72:5a:66:df:54:3c:15:
fe:71:e4:30:81:60:4c:fe:64:4c:34:7d:41:09:d5:93:f6:8e:
23:1c:8e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:50 2025 by rpki-client