Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_8yPz3jmphFYkEdkzOtAvrVuk4w.roa
File: _8yPz3jmphFYkEdkzOtAvrVuk4w.roa (raw, json)
Hash identifier: yIcNe6GsbMzPXSmsDP6BeU9e7HRWIxymibMfT4V5IyI=
Subject key identifier: FF:CC:8F:CF:78:E6:A6:11:58:90:47:64:CC:EB:40:BE:B5:6E:93:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185695F27F895A5B51BD64FF14D670C429C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_8yPz3jmphFYkEdkzOtAvrVuk4w.roa
Signing time: Sat 31 Dec 2022 18:08:41 +0000
ROA not before: Sat 31 Dec 2022 18:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:69:5f:27:f8:95:a5:b5:1b:d6:4f:f1:4d:67:0c:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 18:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffcc8fcf78e6a61158904764cceb40beb56e938c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:ed:1b:af:3d:e6:bf:c7:38:eb:c4:85:b3:
80:ec:84:d3:39:13:41:3b:b1:ad:c9:00:52:f3:74:
88:27:03:15:7d:34:44:ea:38:3b:9d:00:13:2b:5a:
4a:0d:99:a8:65:2b:cd:f1:ce:9a:34:74:cf:89:f7:
a6:d6:50:02:40:4d:3c:9a:ff:d7:47:80:e6:09:79:
b5:62:48:93:77:2c:d3:c2:a4:ed:59:8f:27:f7:f7:
39:21:1d:66:c5:9d:74:87:5d:f6:65:72:01:23:ef:
6e:f7:ef:b4:64:a0:e2:29:bb:4c:60:26:49:26:c6:
cd:8a:83:45:1e:28:69:3b:1d:86:6a:4a:52:bf:fb:
ca:85:9e:52:7b:c2:7d:ad:fd:b2:02:fd:d1:a9:60:
69:44:17:17:d5:4b:23:8a:12:96:9d:e8:f3:d9:85:
a1:37:43:fc:ae:59:b5:45:1a:5a:b7:96:bd:ae:85:
59:b2:e6:d5:25:df:07:d7:e8:a8:ec:34:dd:3b:77:
83:bc:4c:81:45:1f:ef:8e:da:d1:19:0d:dc:85:bb:
2b:65:79:9b:b2:ab:40:2d:c0:c7:13:18:47:9f:bf:
84:7e:74:2c:76:2f:78:a6:07:da:b3:15:53:4f:40:
40:df:e3:03:0e:3f:ea:1a:ee:93:23:39:57:53:0f:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:8F:CF:78:E6:A6:11:58:90:47:64:CC:EB:40:BE:B5:6E:93:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_8yPz3jmphFYkEdkzOtAvrVuk4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:b2:09:f8:32:44:ad:d7:eb:5d:24:5b:90:a9:47:ae:b3:dd:
63:79:e0:08:23:ae:6e:2b:d4:bb:d5:86:ef:6c:58:25:59:00:
57:30:88:76:37:7c:f5:24:cd:39:29:8b:92:ee:31:eb:2d:ff:
3d:c7:a0:bc:b3:bd:b6:c4:6b:95:f2:1c:c3:6f:34:ae:b8:0d:
9e:68:ee:8f:af:7f:ec:39:ee:a7:21:70:e0:3d:c9:a8:30:73:
4f:59:87:54:7c:6f:e4:e5:dc:9e:c8:00:cf:06:23:35:a0:9f:
e3:b5:77:85:a4:bb:6e:46:a6:2c:bf:af:c5:be:f7:34:a8:fa:
89:5a:d8:89:da:6f:dc:91:b2:0e:ca:36:62:9f:62:da:9f:a9:
ba:85:7f:92:35:d2:02:b4:d6:11:e6:4f:30:59:26:7c:e6:c3:
af:55:32:c8:85:6d:27:e6:bf:a0:d4:1e:69:12:65:05:b9:30:
22:84:44:c1:23:0b:d5:c5:ae:1b:ec:c6:97:62:e2:6e:be:13:
a3:c0:d2:d6:99:7b:be:8b:d6:9a:25:57:44:e8:52:c2:e5:f4:
08:cd:e0:8d:d5:91:27:c4:d5:b5:43:1f:e0:e0:bc:47:7f:8b:
d2:d7:45:82:84:98:ad:c8:79:b2:54:4a:12:d2:45:9a:80:21:
44:99:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:13:17 2025 by rpki-client