Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S8ZVE5I8FJ1-_HTSheQd7ELggCU.roa
File: S8ZVE5I8FJ1-_HTSheQd7ELggCU.roa (raw, json)
Hash identifier: CYAKdqKc7KuDba+/ONvzToCnE/2De7jsfr5pfrSzGZU=
Subject key identifier: 4B:C6:55:13:92:3C:14:9D:7E:FC:74:D2:85:E4:1D:EC:42:E0:80:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879F01B3FE776AD7FDD7AEFA3D8260BFDC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S8ZVE5I8FJ1-_HTSheQd7ELggCU.roa
Signing time: Thu 20 Apr 2023 14:11:41 +0000
ROA not before: Thu 20 Apr 2023 14:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:01:b3:fe:77:6a:d7:fd:d7:ae:fa:3d:82:60:bf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 14:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bc65513923c149d7efc74d285e41dec42e08025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:37:63:47:7a:89:3d:f3:3e:32:70:93:ee:
e2:de:90:7e:8b:05:71:41:39:27:dd:89:cc:4f:82:
93:76:f5:f5:67:52:67:84:6d:34:09:63:54:05:e8:
44:35:3e:a1:94:ff:6e:44:47:aa:75:7b:24:01:33:
b8:f8:4d:e8:ce:65:f5:ff:13:c8:6c:cd:e6:45:cd:
54:6f:a9:8d:05:30:83:5b:3a:b6:19:63:e8:55:69:
b4:e2:74:8e:42:a3:38:6a:d8:4e:4b:1e:00:d4:8a:
76:b7:9c:4f:5d:42:1f:df:42:2b:12:80:bb:24:ea:
bd:cc:be:34:db:23:d6:8d:e6:98:bd:43:b6:f6:f2:
bb:b0:e2:eb:bc:7c:59:60:34:0d:4f:7b:52:88:ac:
e2:cf:62:a6:90:57:fd:0d:ac:97:57:53:a1:35:a6:
7a:a7:17:6d:bf:8b:7b:35:ca:6e:b1:c8:eb:5b:b1:
15:96:80:59:60:b6:d5:b5:9f:7b:2c:5d:7d:2e:31:
a5:23:f8:e8:68:1c:27:b3:3d:07:d5:ef:7d:d2:69:
27:d5:f2:88:0c:df:15:60:34:5a:19:ea:b7:c0:a7:
78:0e:ea:61:0b:20:3a:80:ee:a6:4e:2f:02:14:f6:
48:95:a8:3a:96:f3:37:16:42:2a:8d:f0:99:c2:d6:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C6:55:13:92:3C:14:9D:7E:FC:74:D2:85:E4:1D:EC:42:E0:80:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S8ZVE5I8FJ1-_HTSheQd7ELggCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:1f:43:b9:d3:ed:aa:97:54:6d:5b:0a:43:24:4c:ce:be:80:
4b:04:e5:b1:3d:a6:db:f8:57:76:59:83:cb:37:28:80:c8:51:
3b:e5:92:ff:2e:8b:6b:37:b2:33:85:4a:2c:ef:cd:6d:64:62:
b1:0f:62:2f:a6:08:01:29:42:20:01:0e:dc:80:63:18:35:3e:
82:86:ea:4b:c7:d7:f1:0e:35:c6:47:ab:6b:68:1e:26:c9:07:
ab:79:64:54:07:50:e5:10:35:30:8a:28:dd:ad:53:cb:98:10:
d9:f7:25:0f:56:87:83:0f:57:a9:23:62:d5:d9:11:6e:87:e5:
f7:e3:e5:f2:ef:d4:3f:7d:21:87:e3:55:b1:3e:c1:01:10:11:
f1:a9:45:21:e2:1c:27:3a:ee:68:32:2b:11:10:ce:3c:67:2b:
08:c2:16:e7:2d:6b:07:a9:61:4c:93:9f:a4:76:f6:a4:b5:78:
66:17:ee:d4:50:5a:ef:f2:a1:2d:15:59:9d:69:46:de:c1:48:
ff:82:40:ff:69:b2:38:3d:a9:01:c6:66:f3:e4:b0:3d:ec:c2:
b7:76:75:17:b3:86:43:8e:9d:79:09:fa:98:2b:55:ea:f2:16:
2a:31:40:5e:3d:36:57:0a:0d:10:09:9d:16:7f:47:b5:d3:c1:
89:f2:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:33 2025 by rpki-client