Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H8BCtzNtoQzhi0Q3UCkv6KrLvWs.roa
File: H8BCtzNtoQzhi0Q3UCkv6KrLvWs.roa (raw, json)
Hash identifier: WtwfSNanpKLYMTRljjS9XBlk0npwt5f3yzizzL9zeQY=
Subject key identifier: 1F:C0:42:B7:33:6D:A1:0C:E1:8B:44:37:50:29:2F:E8:AA:CB:BD:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6AEFCB20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H8BCtzNtoQzhi0Q3UCkv6KrLvWs.roa
Signing time: Tue 15 Feb 2022 23:19:31 +0000
ROA not before: Tue 15 Feb 2022 23:19:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794100000 (0x6aefcb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 23:19:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fc042b7336da10ce18b443750292fe8aacbbd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:e9:a1:ec:c3:30:ba:9a:a6:ea:0b:93:b8:
40:26:0b:5d:69:d4:7d:49:bf:03:b5:63:85:e4:dc:
6a:dd:07:be:4b:44:63:23:c4:e9:1e:ab:fc:85:a3:
ea:6c:30:9c:c0:cc:23:d8:7e:d5:1c:9a:2d:d2:51:
ad:6d:b9:ab:b4:15:a2:55:0e:07:7d:cd:f8:2f:1a:
d0:bc:91:37:ed:df:c3:57:e0:fd:73:5c:2b:16:b4:
bf:6c:81:82:1c:1d:4e:54:83:fc:d7:b1:1d:47:69:
93:e7:86:94:b3:83:a6:41:66:56:fc:88:26:90:63:
e7:ee:9a:2c:29:11:03:94:58:75:a9:fe:92:6b:25:
45:65:93:26:48:dd:52:4c:12:a0:14:8c:be:b1:4e:
9f:ec:72:ab:2b:1f:26:59:e3:f7:53:a1:1b:3c:61:
1d:94:fc:bb:80:75:c2:01:27:e3:38:36:b0:fc:96:
e1:6b:23:29:5a:a7:ab:4e:c9:b7:fd:00:ec:6f:da:
e1:1b:03:20:88:56:cb:7f:20:80:e5:15:c7:cc:1c:
7a:6f:37:c9:e0:03:63:e1:cf:2f:5a:2a:a6:06:15:
88:d1:f4:72:cb:9c:2d:85:0b:56:d4:8b:07:0d:e6:
9a:55:04:8d:d3:17:81:6f:f0:91:bb:dc:7d:a8:a4:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C0:42:B7:33:6D:A1:0C:E1:8B:44:37:50:29:2F:E8:AA:CB:BD:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H8BCtzNtoQzhi0Q3UCkv6KrLvWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:79:12:fc:0e:37:39:37:46:55:c9:16:98:78:ad:b7:bb:c3:
90:dc:16:d7:39:5d:7d:02:e0:42:b7:1d:a3:bd:58:aa:56:80:
a7:d3:1c:51:25:6c:4f:97:d8:b3:6f:ae:36:3a:8a:f4:13:a0:
f2:4b:de:34:06:39:52:80:e1:46:2a:ed:28:2b:aa:49:38:0a:
87:57:15:88:bf:08:cc:c1:59:b0:51:5d:06:d6:4b:c2:a6:e0:
02:37:58:3b:8d:d8:94:5b:03:63:fa:2b:d2:32:47:5d:71:25:
a1:f1:09:8c:3c:2d:9c:31:84:f1:f6:d9:94:a0:97:8a:d8:a5:
5f:9f:0d:20:e3:50:00:a2:25:0d:e2:2c:88:8a:ea:0c:d3:70:
3a:b1:67:58:32:b6:15:b0:79:38:61:4c:aa:0d:01:80:3c:ed:
50:b1:f5:2d:4f:de:20:00:73:99:ae:cb:86:6d:cc:4b:78:5b:
bd:90:75:9b:97:40:6c:5b:b7:41:0f:c3:49:d6:21:fd:5a:26:
d2:09:75:29:b6:8f:02:d2:20:c9:0b:e6:15:93:93:a5:a8:34:
65:c5:c5:76:bc:be:bf:2d:05:ef:ab:0e:b9:d9:fd:65:d6:58:
86:ae:7e:de:ae:7d:29:cd:e6:2a:58:4c:18:a8:7b:1e:f2:b5:
82:7f:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:32:36 2025 by rpki-client