Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_8--u3oC8qsKeIrfxZI2nlKn7wQ.roa
File: _8--u3oC8qsKeIrfxZI2nlKn7wQ.roa (raw, json)
Hash identifier: hOK7oopGwlYj46d9C+77JkGh4ge1S8/B2gfMdjS27/E=
Subject key identifier: FF:CF:BE:BB:7A:02:F2:AB:0A:78:8A:DF:C5:92:36:9E:52:A7:EF:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018565834D834140854AB143328B10DD7BCF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_8--u3oC8qsKeIrfxZI2nlKn7wQ.roa
Signing time: Sat 31 Dec 2022 00:09:41 +0000
ROA not before: Sat 31 Dec 2022 00:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:65:83:4d:83:41:40:85:4a:b1:43:32:8b:10:dd:7b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 00:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffcfbebb7a02f2ab0a788adfc592369e52a7ef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:4c:b8:ad:b5:53:d6:fb:d5:a1:5d:af:eb:
75:08:b7:0d:45:0b:cd:c0:15:2b:2d:91:39:58:a4:
28:3c:b0:97:41:d4:e8:89:2c:1c:40:76:44:1d:9c:
4f:0e:4c:a3:e6:df:dd:49:43:4d:51:9c:ea:3f:fc:
49:40:cc:5b:14:3a:e5:47:07:7b:1b:09:92:3a:46:
56:74:3a:ae:e8:5b:9d:f5:fe:0b:8f:c6:c2:d3:20:
4f:38:fb:c8:62:d1:35:44:51:a9:c8:c1:e2:31:91:
fc:55:b8:34:d9:0d:ef:23:94:5e:b6:9a:ae:7a:b5:
75:9a:dd:e0:6d:ef:82:51:04:d3:d9:53:46:71:57:
18:44:9a:9d:cf:57:e3:6a:2a:76:57:50:46:5e:ec:
d4:6f:84:66:cf:c2:24:0a:2c:d0:b0:9d:97:9d:d8:
aa:4d:bd:f9:57:5e:72:e7:e4:bc:d3:80:71:04:94:
fb:08:ed:5b:ea:84:77:98:24:16:e9:4a:cc:d7:a2:
d4:28:c3:c7:56:94:ab:cc:00:79:30:0f:91:25:32:
7c:e6:9a:ba:e2:f5:f5:25:58:60:23:61:d4:10:df:
4b:90:1d:b7:02:6f:8b:d2:5c:9b:0e:7a:18:4f:db:
86:98:0e:1d:2e:7a:3d:89:a1:e2:01:64:18:43:70:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CF:BE:BB:7A:02:F2:AB:0A:78:8A:DF:C5:92:36:9E:52:A7:EF:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_8--u3oC8qsKeIrfxZI2nlKn7wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:bb:35:d7:0a:e1:2f:97:75:84:c9:a8:b3:99:f3:d7:2f:8d:
da:da:84:f8:4d:da:dc:ea:63:dd:61:ee:06:12:5d:51:72:59:
e7:06:6d:12:34:e1:33:e2:44:4d:cf:b2:8b:28:14:92:05:87:
e1:27:8e:37:51:7e:0f:5a:aa:31:d7:0d:d2:ab:f9:af:d6:db:
cf:18:13:18:a5:65:66:fc:75:e2:f1:18:72:40:97:a9:ab:2a:
e3:5b:c3:c1:d4:25:59:0f:12:12:4b:b7:4a:7b:46:d5:36:f6:
26:ae:60:f3:e6:95:80:16:ec:8b:2d:0b:1c:4f:49:35:30:e1:
34:85:91:18:ac:76:a4:70:04:dc:32:7a:71:23:f9:56:61:d8:
ff:ef:3f:2b:16:67:22:d5:0d:3d:14:44:ce:b1:7b:88:57:0f:
99:95:3a:fb:a6:e3:b3:b7:eb:ea:67:da:9e:95:fb:2e:2d:8e:
89:90:e8:66:99:a5:e7:cd:fa:46:5c:4e:1a:2d:51:ec:e8:50:
71:60:e1:39:4f:8b:f9:c6:8b:50:24:2f:d7:ab:12:86:21:7f:
53:66:a6:91:30:cd:15:78:a4:7e:3a:31:86:2d:78:17:88:ce:
0e:c5:af:da:de:54:17:78:75:e2:86:e6:80:2b:6c:4d:33:26:
a4:ee:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:53 2025 by rpki-client