Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ERR8Viz5TH3NAsTlmAFcD7N8_rw.roa
File: ERR8Viz5TH3NAsTlmAFcD7N8_rw.roa (raw, json)
Hash identifier: 8vdgiHDBKQM3XQXS2oAKFVJmbJfVADu8gdErGxYrSDc=
Subject key identifier: 11:14:7C:56:2C:F9:4C:7D:CD:02:C4:E5:98:01:5C:0F:B3:7C:FE:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B94A753
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ERR8Viz5TH3NAsTlmAFcD7N8_rw.roa
Signing time: Fri 18 Feb 2022 06:09:06 +0000
ROA not before: Fri 18 Feb 2022 06:09:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804904275 (0x6b94a753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 06:09:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11147c562cf94c7dcd02c4e598015c0fb37cfebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:66:6d:41:df:e5:a2:3f:70:d2:94:04:a0:
a9:26:1e:06:20:c1:83:f1:77:f6:63:c5:dc:da:52:
69:1b:c6:5c:8e:f3:98:26:16:33:de:1d:37:c5:7c:
e9:93:15:20:b4:c5:27:b1:2f:b1:c9:07:b6:73:a3:
bc:d3:77:06:c9:9d:6f:72:26:6c:07:70:bf:2a:16:
ec:33:82:7b:c2:84:bc:20:70:45:c0:84:f3:49:31:
72:68:7f:c0:88:1b:30:86:b9:ed:f6:75:c6:4d:97:
a9:d9:b8:eb:3d:50:06:ec:07:db:b3:1c:11:2f:0b:
96:3c:fc:ed:e6:ec:48:57:f6:4b:d4:b9:9f:23:85:
a2:e5:26:42:34:a8:f7:20:4e:14:ce:33:41:d5:40:
53:c3:6e:7e:53:eb:69:7f:21:c8:69:80:5f:96:58:
18:b9:71:76:4d:26:31:86:8a:f4:d0:3b:cd:d5:80:
69:49:d8:16:a0:b3:e0:83:5e:d6:e1:19:fc:34:85:
29:75:e5:52:b9:2b:5c:d4:54:82:70:3a:5b:a0:cb:
e4:ca:ba:2f:53:f5:3b:c3:74:66:55:7f:23:04:ad:
c7:b3:25:36:3a:c8:b7:71:e3:3b:c8:c0:e5:a0:6b:
8d:bc:c8:09:a1:32:26:ef:bc:25:85:7e:6a:24:7e:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:7C:56:2C:F9:4C:7D:CD:02:C4:E5:98:01:5C:0F:B3:7C:FE:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ERR8Viz5TH3NAsTlmAFcD7N8_rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:0a:6d:cc:70:b1:a5:19:a8:2c:48:f9:f5:f4:cf:87:7e:b9:
54:0a:4c:bb:5c:2f:be:89:28:39:44:79:c6:3d:a0:84:29:bc:
5c:57:8e:72:07:ff:f9:1d:c9:8e:2a:fd:47:d0:38:4b:4b:e6:
02:c7:22:66:3d:e0:46:4b:9f:af:ba:72:e2:83:bb:fb:2d:57:
74:ea:bb:5e:4e:eb:4d:5f:86:9d:82:08:fa:f3:a2:c4:70:2f:
55:08:0f:33:4e:1d:15:4a:43:bf:fb:29:d6:31:b6:f1:e4:b9:
53:16:12:f3:28:a2:fd:70:41:9b:d2:bd:83:b4:7e:06:8e:15:
ea:86:ab:78:9e:7c:e5:02:a0:af:1f:39:6a:21:4b:98:df:46:
fc:72:4a:81:a5:f3:8e:cf:93:68:96:1c:58:3f:32:f8:9e:44:
4c:29:be:a2:7d:ca:89:80:6a:48:96:70:64:c4:07:8b:f8:ca:
e9:2a:27:c6:ae:96:13:da:99:01:b4:3d:4c:b5:61:28:e4:c6:
fe:0a:3e:b5:e9:36:2d:6a:cb:bd:5b:53:a3:e5:b6:04:39:57:
2a:2e:ef:d5:ea:06:f7:68:35:48:4b:83:e3:c4:aa:7a:19:d9:
40:0f:18:c4:55:a9:91:48:25:23:c9:8f:a6:53:51:38:86:61:
a2:7a:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:08:05 2025 by rpki-client