Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_I8nncb_TYG3NPLomhyd39vMWGE.roa
File: _I8nncb_TYG3NPLomhyd39vMWGE.roa (raw, json)
Hash identifier: eAAvpv49C7Lpk6DQWYfGgTS2XW9fj93HCIB0ILwnNsY=
Subject key identifier: FC:8F:27:9D:C6:FF:4D:81:B7:34:F2:E8:9A:1C:9D:DF:DB:CC:58:61
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181FE562F58FB551FC99AE03188F1000480
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_I8nncb_TYG3NPLomhyd39vMWGE.roa
Signing time: Thu 14 Jul 2022 20:11:09 +0000
ROA not before: Thu 14 Jul 2022 20:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fe:56:2f:58:fb:55:1f:c9:9a:e0:31:88:f1:00:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 20:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc8f279dc6ff4d81b734f2e89a1c9ddfdbcc5861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:94:ca:bc:81:43:5b:71:15:04:52:d7:f2:2f:
83:e4:99:1e:20:3c:21:f6:35:ea:62:7a:6c:87:c1:
70:b6:5a:e8:f0:a8:c0:6b:7f:68:c2:7d:2a:cf:2e:
a1:bf:fb:39:2d:18:c4:e0:6b:cf:1e:ad:a7:98:a6:
e9:79:f3:4b:7e:46:bf:99:03:ae:46:4b:f6:47:a7:
cf:37:9f:6b:4b:3f:8f:ac:86:1a:34:aa:9f:ac:c1:
4c:d9:4c:1a:97:be:fb:14:7a:12:f9:7d:ca:d7:09:
17:13:a0:f3:e5:d7:0d:7b:74:5b:3e:30:5a:0c:3e:
27:dc:3e:43:c3:db:e8:9d:d6:24:ae:4d:a4:85:00:
24:45:c0:81:cd:d4:7d:68:53:4f:68:05:38:86:c9:
e5:0b:0a:84:ca:7d:af:18:07:86:df:1e:11:53:0c:
f0:85:dc:48:42:61:9f:d7:70:72:4e:4d:ff:a5:7f:
b9:4b:c7:78:d2:3e:a0:57:32:66:5f:c0:da:70:cf:
32:fb:a4:ec:ee:3f:cb:26:dd:47:f2:1f:da:76:41:
30:d0:d5:0e:b2:4f:ae:ed:03:fa:23:dd:ff:9a:cd:
08:46:2f:7a:e4:8b:18:8d:9d:fe:2b:63:48:29:dd:
bc:f3:d9:02:f0:ff:88:82:d9:8c:80:67:7d:2d:39:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:27:9D:C6:FF:4D:81:B7:34:F2:E8:9A:1C:9D:DF:DB:CC:58:61
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_I8nncb_TYG3NPLomhyd39vMWGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:04:28:53:e2:bf:02:d4:5b:45:f1:ad:d3:de:c1:c6:c2:c6:
de:3f:84:ee:53:9f:68:7b:2a:ae:c0:cc:ab:27:61:30:8c:45:
2d:1c:6c:6c:5c:1b:92:3f:c9:92:c9:bd:69:89:f8:5b:c0:5f:
6f:f5:2e:09:af:00:36:e9:96:2a:2b:ad:6b:ac:b8:2f:71:a5:
ab:d6:9f:d3:6b:fe:71:8e:6f:08:6c:83:6b:da:fa:3f:ba:69:
e4:53:d7:af:6d:73:8e:2f:a8:81:36:6c:62:7a:0e:1c:ee:19:
9a:6e:5a:92:d6:32:a7:a5:9a:09:6f:6c:27:bd:13:c4:97:32:
e8:90:fe:56:3b:48:19:77:e7:bd:49:b6:19:27:d9:fe:58:31:
a6:c7:e2:96:a6:97:52:51:58:fe:ad:88:8d:44:78:b5:6e:d2:
1f:8a:97:4f:99:bf:fd:8d:0d:a2:28:af:37:c3:e6:d8:e0:6d:
af:58:3b:4c:8d:31:72:13:57:5c:f8:c9:bc:e1:5d:75:db:9e:
31:46:2c:cf:5d:b1:7c:5f:f3:c3:f4:ce:13:70:0f:02:d7:d9:
0f:fd:4b:4f:e8:22:2a:d5:36:89:4f:ac:26:90:d6:08:d4:eb:
7a:21:d0:70:ef:0e:9f:50:db:e4:1f:64:0f:6b:85:b3:61:be:
8b:74:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:35 2025 by rpki-client