Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L8PyZgjqHW5Grk2VFi03Wja4Agg.roa
File: L8PyZgjqHW5Grk2VFi03Wja4Agg.roa (raw, json)
Hash identifier: Fvr1YVEOE/sQ8gp+JVTRUjoU62Wf/FGuNQNdBw6rDfA=
Subject key identifier: 2F:C3:F2:66:08:EA:1D:6E:46:AE:4D:95:16:2D:37:5A:36:B8:02:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E75A86F7475BABCD3232F4DB697A68B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L8PyZgjqHW5Grk2VFi03Wja4Agg.roa
Signing time: Tue 06 Dec 2022 12:13:00 +0000
ROA not before: Tue 06 Dec 2022 12:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:5a:86:f7:47:5b:ab:cd:32:32:f4:db:69:7a:68:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 12:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fc3f26608ea1d6e46ae4d95162d375a36b80208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:49:b2:8b:09:e6:fa:34:7c:e9:b8:e6:e6:
58:0b:be:07:62:69:52:10:61:ed:5b:31:88:c9:13:
e4:9a:07:6e:ed:55:90:a9:76:2c:bd:06:e7:0f:c0:
d3:b8:6e:ae:9b:71:a7:9d:72:f6:0c:fa:aa:73:5f:
da:b9:b9:28:9b:fe:28:9f:f8:d7:7e:a3:7c:a8:5b:
8a:c0:b4:80:dc:c5:39:77:ab:1d:fe:bd:2a:f9:6b:
99:eb:05:d3:e6:44:94:f3:54:00:ff:b2:e0:b3:89:
4f:50:29:36:64:77:8f:be:a0:c0:35:32:e7:c4:58:
43:e3:9d:dc:6e:0a:bb:34:b8:eb:ac:ec:6a:15:18:
8d:f0:08:2f:eb:10:0f:47:7b:1f:7a:09:49:32:d2:
82:4d:a1:83:49:da:a2:36:66:62:70:bc:1b:c2:6f:
bd:37:0c:bb:42:c4:f4:ba:61:46:a2:c9:87:e1:ab:
fe:5f:33:e4:6e:31:b2:1d:dd:83:92:08:20:3d:95:
1b:e3:87:52:de:fa:cf:99:4f:e4:c4:6d:7d:d6:e1:
6b:63:6c:b5:b7:2a:91:a2:6b:0b:f8:d2:8d:b9:b3:
ab:f8:b0:ee:78:9d:de:88:9b:41:92:60:a0:80:de:
65:46:b6:1f:2a:bc:7a:b8:5b:48:94:ca:d2:22:d5:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C3:F2:66:08:EA:1D:6E:46:AE:4D:95:16:2D:37:5A:36:B8:02:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L8PyZgjqHW5Grk2VFi03Wja4Agg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:c1:bc:1c:1d:12:cf:c7:1f:f1:24:e2:87:5a:20:7c:2b:1a:
8a:b1:a9:e9:75:83:a7:c3:1e:2e:1d:2d:a4:05:29:13:a8:b6:
10:6f:e3:f8:2c:de:26:15:a2:b5:f0:e8:e2:fd:a4:fd:20:6b:
9a:db:c4:08:00:78:c2:b4:0a:30:3e:35:55:ef:a5:73:91:f5:
1e:1a:24:a6:27:53:da:93:7a:94:51:6d:58:8a:05:0b:1b:b3:
57:e1:2e:dc:fc:6b:d3:4e:65:0e:b2:87:4a:12:db:89:30:8a:
fe:10:bd:de:67:6b:a6:2f:50:b6:f9:21:c7:cd:e1:0e:a0:97:
63:24:e2:43:02:e4:2a:c3:c3:f0:f0:f3:45:64:5f:6b:75:02:
dd:d6:48:57:f6:d3:d3:cc:56:22:59:bd:34:f3:b8:3e:c0:0d:
ce:1f:42:af:63:d3:51:8f:ec:ca:6b:6b:4d:a9:f2:b7:b3:ec:
0b:f8:67:6b:95:9e:5d:71:34:59:90:9e:7f:01:e2:9c:9f:42:
70:7a:10:ab:70:60:eb:02:39:de:b7:bc:75:a5:fc:16:9a:23:
22:4b:d0:5b:1f:4d:72:a5:be:e6:19:ec:70:6b:63:cb:3e:14:
2f:f2:eb:79:0c:ba:9d:1a:b3:66:0a:d8:65:9f:eb:4c:d4:92:
ff:e1:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:14 2025 by rpki-client