Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P8qIOanKx9_gw44Kf7qpe-jMNro.roa
File: P8qIOanKx9_gw44Kf7qpe-jMNro.roa (raw, json)
Hash identifier: U2TvVBvFmvyMzY/RnaGEuN3sEJQzhA9O3Lant2yEOow=
Subject key identifier: 3F:CA:88:39:A9:CA:C7:DF:E0:C3:8E:0A:7F:BA:A9:7B:E8:CC:36:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018935688868511BCF251E3341C7E14BE221
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P8qIOanKx9_gw44Kf7qpe-jMNro.roa
Signing time: Sat 08 Jul 2023 12:09:50 +0000
ROA not before: Sat 08 Jul 2023 12:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:35:68:88:68:51:1b:cf:25:1e:33:41:c7:e1:4b:e2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 12:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fca8839a9cac7dfe0c38e0a7fbaa97be8cc36ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:53:ca:0b:df:71:d3:2c:d6:ed:d9:9d:cb:
15:ef:25:69:2b:f9:8b:e4:37:94:7f:b7:e6:d6:14:
e0:b3:77:cf:6e:96:a8:7d:00:d6:5b:fa:76:29:7d:
10:3b:bc:19:22:c1:23:f1:dd:ff:0c:ed:b9:e9:88:
86:9a:e5:c8:96:c7:db:2b:e7:72:e5:6d:9f:be:d4:
79:24:5d:42:ac:25:3d:76:fb:60:9a:53:19:28:f9:
3f:e0:bb:15:3e:c1:e1:ad:bb:b0:a0:9f:f5:67:96:
78:c6:fc:ef:91:b3:bb:02:0a:fd:be:f2:3c:6a:32:
52:f7:a4:21:49:36:c8:7e:49:10:e4:c9:a0:94:85:
3c:9e:f1:ad:0e:c7:c0:8e:70:7b:48:3b:69:37:dd:
a2:13:4d:5a:f6:3b:a0:36:5d:ce:b1:4d:50:b7:fb:
65:68:15:a3:a0:94:3b:38:56:e1:ee:cd:7b:02:fb:
fb:94:c7:6f:f1:32:a6:47:b9:0a:32:c4:6b:2e:5b:
82:97:89:ae:b8:98:b7:b1:03:2e:0d:67:14:41:8e:
ad:0c:12:03:82:30:42:25:64:9f:22:ad:be:02:b9:
a3:d8:75:51:d6:93:9e:1b:61:d5:dd:de:6d:72:b3:
82:8b:83:f3:2a:05:ec:6a:6d:d2:05:81:9d:fc:92:
dd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CA:88:39:A9:CA:C7:DF:E0:C3:8E:0A:7F:BA:A9:7B:E8:CC:36:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P8qIOanKx9_gw44Kf7qpe-jMNro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:d1:9d:5b:07:2d:6f:37:48:97:d4:f3:46:35:83:8f:9d:68:
55:d1:6e:6a:f7:71:37:b3:ef:4e:8a:57:78:c8:a9:e0:30:44:
64:99:5b:96:d8:fe:eb:7f:f7:7c:84:e6:84:78:25:2d:2c:ef:
fd:fe:f1:70:bf:02:9a:a3:e3:cd:77:7a:7e:f0:5f:e2:87:ff:
a4:17:80:47:25:b4:c2:4e:b8:ca:ef:9e:fb:dd:f7:3c:25:81:
31:3a:51:45:ee:b7:65:8d:a7:67:e2:49:8b:16:b4:6b:d7:20:
46:be:01:62:93:08:56:2e:22:88:91:a9:0c:bf:92:14:8f:2c:
bb:3b:86:ea:bd:05:c3:4e:1c:21:35:07:12:1c:7b:26:76:80:
ab:ac:20:cc:29:d7:4c:86:ea:ba:6f:05:58:f7:e4:f0:7c:a6:
e2:70:73:c6:a0:aa:ea:92:c9:57:a0:b3:b0:11:73:87:16:97:
53:4d:d2:b4:b4:08:1e:08:18:11:50:6a:ff:1b:65:e0:d0:2d:
d7:c4:86:e6:0a:03:70:ba:f3:7c:1f:12:3e:14:9d:7c:7c:4e:
8b:af:34:4b:16:42:85:65:89:3c:bf:cf:76:8f:0f:fa:1c:49:
d8:d5:fc:ec:1f:34:56:b3:ba:55:6e:46:a6:6b:1c:e7:4e:a4:
4c:73:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:12 2025 by rpki-client