Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8x3so2w8Td5Q03T_vopu91Hy-VE.roa
File: 8x3so2w8Td5Q03T_vopu91Hy-VE.roa (raw, json)
Hash identifier: Smnx/pY1EdHhAap2+TMB09kLA/undnnz0nPcmTfibHE=
Subject key identifier: F3:1D:EC:A3:6C:3C:4D:DE:50:D3:74:FF:BE:8A:6E:F7:51:F2:F9:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018809385FBD6BB5FBA595291887F155921D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8x3so2w8Td5Q03T_vopu91Hy-VE.roa
Signing time: Thu 11 May 2023 05:11:09 +0000
ROA not before: Thu 11 May 2023 05:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:38:5f:bd:6b:b5:fb:a5:95:29:18:87:f1:55:92:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 05:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f31deca36c3c4dde50d374ffbe8a6ef751f2f951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:ce:fc:92:57:59:06:0b:49:af:3a:82:e0:
67:93:19:a9:98:48:7b:24:dc:3a:3c:11:f0:30:a5:
db:9d:19:38:3b:2f:cb:4f:3f:11:10:76:52:d2:9b:
a4:74:bf:e0:35:37:e5:7e:4b:e2:b4:f7:ca:f2:3d:
8f:f4:ee:49:8a:4c:c9:91:c0:e5:3c:d8:59:4c:c8:
99:a5:61:21:f5:99:d4:ec:dc:42:31:2f:a7:63:ef:
4f:11:06:fe:98:bf:c1:13:54:1b:d6:16:5f:72:68:
21:42:03:76:2a:88:06:1f:a6:13:2f:bb:98:21:0c:
a1:7f:4c:cf:47:f6:c3:20:2a:d5:ce:9d:df:bc:e5:
d8:e0:c8:cf:4d:22:18:b2:22:72:62:44:f9:23:ea:
5b:85:4f:21:ba:ef:e1:25:2c:cf:4c:84:6e:ba:cb:
9d:bb:a1:e7:aa:1b:5f:ba:be:00:18:cd:c4:fe:86:
0d:da:a4:10:0b:5f:23:fe:86:89:c6:c7:dd:97:a4:
72:98:49:09:20:34:95:d9:4a:9e:25:19:7a:f2:2f:
af:c5:3a:b8:25:e8:1c:aa:78:d2:fd:04:55:0f:b9:
46:ac:f7:41:28:13:50:46:fa:3b:78:08:30:be:b4:
a7:43:b3:de:16:03:64:5b:dd:f2:a2:61:64:5d:42:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:EC:A3:6C:3C:4D:DE:50:D3:74:FF:BE:8A:6E:F7:51:F2:F9:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8x3so2w8Td5Q03T_vopu91Hy-VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:c8:89:43:b1:e6:4e:ef:55:03:81:b9:46:49:9e:d9:d0:a6:
a7:ad:13:4b:b7:88:4b:e1:d5:d0:57:8b:bc:01:95:d0:98:78:
f1:94:6b:af:cf:78:14:0c:88:f1:d7:e3:85:37:44:ea:ca:a1:
88:08:9d:44:2c:fa:f6:fd:22:7f:ef:b7:39:b6:2b:59:0f:66:
2a:b2:a5:eb:f1:98:3d:4f:2a:2e:e2:46:ab:c1:48:0c:f4:4d:
aa:39:2d:ec:0f:e7:06:71:f3:f1:e5:18:e2:8c:f5:1b:89:3f:
34:51:d6:47:8f:45:e5:d5:48:80:2d:dd:50:81:f9:64:25:3d:
3a:39:0d:24:2a:ff:e4:9e:54:eb:e4:ff:e1:24:89:b8:49:c1:
da:0c:67:72:7c:2c:5f:7d:81:eb:f4:00:ab:74:f5:79:99:b3:
9b:99:af:d1:e9:5a:f6:a7:a3:93:9f:d2:42:7b:23:82:9b:ec:
f2:b7:f3:14:2a:5e:ff:43:05:01:ad:21:54:55:00:20:70:d6:
24:8f:cb:3b:46:4b:3b:ea:79:9f:59:95:07:a5:1a:ff:26:11:
1e:e4:28:3d:72:ff:0c:ee:ab:01:f5:7d:ca:73:27:5e:b0:9d:
80:0c:76:e7:d3:c1:f6:31:60:19:5d:4e:17:cf:be:b0:c3:40:
3d:55:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:59:16 2025 by rpki-client