Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8xkyWIgbV2wFJwiOMA99ZqJVJB8.roa
File: 8xkyWIgbV2wFJwiOMA99ZqJVJB8.roa (raw, json)
Hash identifier: aJ4K8De3vlknzQbTeHNXsSlqkK0F6QaEfglvnVfIxn0=
Subject key identifier: F3:19:32:58:88:1B:57:6C:05:27:08:8E:30:0F:7D:66:A2:55:24:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875866756965F5C593DA8BFBE9EECF625A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8xkyWIgbV2wFJwiOMA99ZqJVJB8.roa
Signing time: Thu 06 Apr 2023 21:08:42 +0000
ROA not before: Thu 06 Apr 2023 21:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:58:66:75:69:65:f5:c5:93:da:8b:fb:e9:ee:cf:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 21:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3193258881b576c0527088e300f7d66a255241f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:b9:20:b2:e7:fc:b8:32:b3:ee:49:b4:31:
cd:8e:1e:32:11:49:ec:87:45:03:61:fa:a9:dc:c7:
3f:21:83:fa:dd:64:a5:df:c7:f7:01:a7:bf:09:92:
28:4d:78:59:78:86:e4:a8:a2:82:ad:69:10:8c:4d:
ec:4d:90:90:2a:cf:10:b7:01:db:9b:a4:3f:e7:fc:
35:a5:82:2a:4c:6a:8b:a7:7d:c0:e8:ab:c9:68:9b:
64:3e:13:16:08:3e:ed:8a:68:8d:6b:9d:bc:cd:6b:
6e:22:fc:8d:b2:2b:54:48:26:03:28:e2:c0:22:eb:
fb:6c:1d:e0:a5:e2:b3:3c:3b:61:c7:53:71:61:0b:
86:e5:6a:a3:11:21:75:e5:7f:0e:f3:ff:b0:7a:0d:
29:ba:1d:48:8c:e9:ab:9a:1d:66:51:39:bf:fe:6a:
47:b4:af:47:e4:af:fc:21:01:e0:91:a9:71:55:54:
4d:48:d3:e1:cb:1c:12:97:c8:32:13:2a:c6:e2:13:
ec:dd:75:cd:bb:53:9b:3b:da:96:76:15:63:1d:23:
8c:3b:b4:7d:b7:9c:52:17:8d:ba:5e:b6:87:0a:88:
5c:9d:8b:51:de:fa:6a:5d:d2:e6:9d:a1:c7:6b:0d:
d5:4c:43:b2:3a:21:60:c4:84:67:a3:c5:12:d2:1f:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:19:32:58:88:1B:57:6C:05:27:08:8E:30:0F:7D:66:A2:55:24:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8xkyWIgbV2wFJwiOMA99ZqJVJB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:39:89:de:96:f4:51:4e:3a:fe:a4:e3:37:1d:cd:4b:61:6a:
1f:00:2f:1f:f5:d3:b8:b7:46:73:78:bf:77:1b:f0:31:fc:b7:
3b:f3:2c:61:6a:6c:c3:be:52:8f:1e:bb:85:93:05:92:17:4c:
fc:0d:c3:bd:16:39:42:59:60:50:b5:68:e6:2c:fd:16:e5:5b:
77:7e:0c:5d:a8:f9:59:df:87:63:18:12:c5:94:88:de:37:28:
35:b9:68:aa:f1:e3:97:ee:26:56:1d:33:e9:b9:88:d7:e7:43:
a2:9f:7c:77:cc:b3:e3:87:f9:69:77:5d:ca:04:49:75:88:9f:
69:c6:4f:98:cf:5a:26:58:de:4c:8b:bb:bc:62:f9:db:77:41:
e8:a3:cc:f0:23:cb:83:21:41:b6:af:7b:bc:d6:93:a5:1e:63:
93:7f:5d:d7:dc:f4:95:51:28:d2:49:d4:4e:2b:67:0f:24:69:
6d:01:90:56:7f:f1:15:2d:d8:f8:b8:e1:29:f1:04:17:a6:6f:
74:b1:c6:83:ea:f6:57:93:e8:0d:2a:0b:2a:a0:78:7f:d9:95:
31:73:68:9e:0a:c0:99:86:43:ab:c5:50:ff:63:c7:0c:c3:22:
32:10:78:0e:8e:c0:f4:23:72:a0:50:b7:fe:ed:79:6c:06:d1:
43:5b:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:07:06 2025 by rpki-client