Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8j8IcyCkf58d-hEVIu45pl0tgc.roa
File: C8j8IcyCkf58d-hEVIu45pl0tgc.roa (raw, json)
Hash identifier: JVWUx5e7NPSKHwDWoCIOWi4OBZXNfkoPOb4wf4lH3dM=
Subject key identifier: 0B:C8:FC:21:CC:82:91:FE:7C:77:E8:44:54:8B:B8:E6:99:74:B6:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A31393170AD73DBD4D0BD33ECED978B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8j8IcyCkf58d-hEVIu45pl0tgc.roa
Signing time: Fri 21 Apr 2023 09:09:41 +0000
ROA not before: Fri 21 Apr 2023 09:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:13:93:17:0a:d7:3d:bd:4d:0b:d3:3e:ce:d9:78:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 09:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bc8fc21cc8291fe7c77e844548bb8e69974b607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:d8:65:e3:b7:12:76:4a:79:d1:b7:f2:e6:
51:98:c0:d4:aa:44:56:97:70:d7:56:c6:35:7b:4a:
54:e4:77:9f:2a:b2:b4:c0:8c:6c:6a:8f:bf:b1:83:
52:30:6b:06:94:56:cc:7b:72:64:a9:13:29:6e:d5:
94:db:32:ed:21:2e:8b:d5:1a:57:c0:96:a7:ad:42:
61:f3:eb:7f:ea:62:fd:7d:0c:11:fa:29:d5:ee:2b:
67:c9:33:4b:b0:0e:97:55:57:88:3b:55:b9:9a:6e:
43:94:2c:b4:56:a3:b4:d6:fa:21:2b:4b:c5:4a:14:
bf:d2:56:17:17:4b:f4:a6:5b:c3:28:05:7a:36:da:
07:87:e5:98:35:97:b9:9f:70:84:0a:aa:89:b5:0e:
5f:05:a8:d8:d9:88:21:99:8f:ee:59:80:a2:c0:fa:
44:2a:20:80:c8:66:2a:b8:9c:7a:bb:f1:90:d2:d8:
4b:c9:0c:96:77:9f:46:b2:4c:a7:70:8e:4f:64:55:
2c:3c:02:5b:7c:e3:84:c7:60:f4:74:66:6a:f5:41:
c9:e1:c1:23:48:8d:0a:a3:56:9c:f9:29:e7:75:68:
e6:1a:de:56:3a:c3:6a:ed:41:89:fc:02:cc:1a:41:
db:9f:a4:3b:bc:ab:11:af:2d:69:99:5b:73:d6:6d:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:FC:21:CC:82:91:FE:7C:77:E8:44:54:8B:B8:E6:99:74:B6:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8j8IcyCkf58d-hEVIu45pl0tgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:2f:73:0b:0f:5b:6f:7d:d5:10:f6:48:10:65:8d:7d:b4:f4:
f5:0f:b6:88:be:4f:3d:b4:0c:4d:f3:fc:fa:d1:b8:f2:25:7f:
ab:37:60:5e:cd:42:aa:02:8d:78:15:bc:57:e3:c5:0e:35:fe:
60:f5:00:27:fd:b5:e8:75:69:81:aa:5c:23:87:aa:1f:04:1e:
a3:3e:5b:2f:e5:72:4d:a9:77:22:11:56:cd:65:7d:ff:e8:57:
02:5b:81:03:dd:5f:dd:36:b4:4c:7d:00:25:9e:4f:56:30:76:
17:06:63:aa:f4:83:10:68:7e:b3:e1:02:1d:c0:12:25:d1:c5:
92:0b:f6:c2:8e:5c:1a:82:d9:35:0a:78:44:6a:1b:63:01:58:
43:42:f2:1d:14:8b:84:a7:13:a8:7e:90:72:4d:90:53:b5:cb:
f4:82:f9:3c:dd:3e:29:6f:88:b5:97:ab:08:0e:48:2b:73:44:
d1:c7:af:11:56:33:48:57:7c:d6:dc:e6:7b:77:60:92:98:f7:
79:40:ed:7b:eb:a1:87:b5:34:aa:17:dd:8d:09:76:8d:9d:5e:
fd:5b:af:33:38:53:89:77:9d:24:ab:ad:75:bd:c8:d6:4a:f4:
1c:eb:83:32:2e:74:70:02:94:0f:84:fb:68:9c:18:d9:42:bf:
6b:ae:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:32:59 2025 by rpki-client