Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_8ggJ8U-tWMoXHfEq75URhiG9PA.roa
File: _8ggJ8U-tWMoXHfEq75URhiG9PA.roa (raw, json)
Hash identifier: QrZgOAu49a1mDbM/R4onp+7bFnyb7PfOHLXCZlDJv4E=
Subject key identifier: FF:C8:20:27:C5:3E:B5:63:28:5C:77:C4:AB:BE:54:46:18:86:F4:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8F8C8DF5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_8ggJ8U-tWMoXHfEq75URhiG9PA.roa
Signing time: Fri 24 Jun 2022 23:11:35 +0000
ROA not before: Fri 24 Jun 2022 23:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408353269 (0x8f8c8df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 24 23:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffc82027c53eb563285c77c4abbe54461886f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:0d:f4:34:77:23:d2:3b:22:f9:e4:f6:b1:
bf:52:29:44:ac:d5:b2:de:3f:1d:fb:90:b4:b9:90:
56:22:ae:d7:9d:a7:d3:d4:de:6e:63:7c:21:da:73:
3b:ac:28:a1:12:3b:1d:7f:d0:75:21:f7:10:90:31:
23:c2:04:0d:7b:3d:3b:2a:3b:9e:83:7f:da:2e:ce:
8e:8d:f4:0d:7b:1c:43:29:19:16:b0:c7:40:c3:49:
41:f9:16:3a:11:d4:de:cf:77:29:de:13:b8:11:b1:
40:c5:6f:4e:06:b0:85:a3:f3:09:b4:56:ba:53:20:
c9:8b:1c:4f:b3:43:20:63:59:7b:b9:74:a4:20:af:
7f:d5:75:59:4e:36:8d:bf:5f:a6:ec:ad:10:b2:b4:
a6:43:88:9d:2d:f8:18:73:05:7f:f4:ad:bb:c4:7c:
bc:19:1a:9e:ff:d7:ae:3e:5e:23:35:0a:49:2e:cb:
e4:75:c1:4a:23:02:4a:41:c0:28:c9:0b:15:a6:c2:
33:d6:88:8f:e8:34:93:00:6c:86:c9:ed:42:b0:94:
f7:aa:94:9b:72:3f:4a:de:22:d4:91:d4:80:2f:d2:
31:a8:fd:16:87:c6:51:dd:16:12:47:02:f3:c8:6d:
f5:49:8e:12:6c:8b:a6:5d:68:fe:b8:c1:0e:f5:a9:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C8:20:27:C5:3E:B5:63:28:5C:77:C4:AB:BE:54:46:18:86:F4:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_8ggJ8U-tWMoXHfEq75URhiG9PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:0c:3e:d5:a9:cc:88:85:ac:01:a5:23:58:f5:86:52:1d:9f:
ab:43:48:24:1e:ce:6a:e5:34:e1:de:b0:c4:57:44:be:93:cf:
42:0c:a6:f8:2a:f4:57:0b:ba:a2:aa:7a:a2:98:33:f5:3d:9c:
02:45:2e:34:b3:51:b1:1d:54:f6:62:a4:02:51:91:f4:32:2d:
4d:71:41:53:5e:39:66:0e:31:0d:60:8e:3e:08:c6:59:64:f0:
4e:82:90:9e:75:5c:92:f1:d0:9b:0e:16:f9:98:a6:82:11:99:
c7:04:e1:90:ee:e7:c4:e4:aa:b1:4a:a0:30:8d:c4:d5:27:6e:
5f:a5:ee:76:5d:62:1f:5f:50:b3:5d:36:3d:67:63:bc:09:44:
a0:81:8f:79:72:d4:8a:eb:16:03:c4:f9:19:f2:71:78:c3:e0:
2a:3d:d4:6b:5a:90:a8:93:02:b3:55:0c:cb:d5:6c:99:04:1b:
8a:b5:36:d9:00:c6:46:52:41:b6:16:b1:fb:17:3e:e2:b3:4e:
fe:35:31:95:e3:1d:cc:19:56:54:7d:86:ad:ab:61:96:0e:ed:
36:a4:f7:95:b2:06:d1:4b:ad:bd:05:5b:24:cb:27:42:d9:38:
ce:6d:25:4d:c6:67:39:a1:c9:3c:74:92:c7:ae:08:5f:5d:08:
b8:c8:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:57 2025 by rpki-client