Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b8ZnMChTcTyeiOgIBVR2kymvU_Y.roa
File: b8ZnMChTcTyeiOgIBVR2kymvU_Y.roa (raw, json)
Hash identifier: 0prPEhmNOnra3XnZJF+H1431ZFfaW9sn8rReRL87V6A=
Subject key identifier: 6F:C6:67:30:28:53:71:3C:9E:88:E8:08:05:54:76:93:29:AF:53:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 923A175F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b8ZnMChTcTyeiOgIBVR2kymvU_Y.roa
Signing time: Mon 04 Jul 2022 04:10:25 +0000
ROA not before: Mon 04 Jul 2022 04:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2453280607 (0x923a175f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 4 04:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fc667302853713c9e88e8080554769329af53f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:ae:43:f8:4c:ee:1d:49:03:3f:6d:09:c4:
9d:f7:f3:ad:51:a1:5c:62:4f:d8:89:0b:b9:62:bb:
52:f4:19:b5:9b:a1:ee:cb:54:fd:ee:a9:d6:df:40:
8b:ab:df:62:66:21:1b:a1:4a:20:c6:1a:f8:56:48:
44:23:e3:89:ee:94:0c:65:81:6e:e6:42:fe:44:d2:
67:58:de:5e:18:89:82:fc:6e:98:68:26:04:84:20:
2f:48:73:05:e2:14:3b:c1:60:2a:93:a2:f7:d6:72:
a1:d0:80:ee:41:7e:16:5b:36:2a:8f:20:11:7d:a2:
c7:14:98:c2:a0:bb:10:14:3c:5a:9c:64:4f:0b:20:
d2:08:99:27:05:69:62:c9:63:37:24:96:bc:f9:66:
b2:14:b0:2a:a5:17:74:ec:ba:02:3c:87:ae:14:e1:
00:a9:6f:4e:98:66:a3:c7:84:fc:5c:d9:d3:68:54:
f9:bb:6b:ac:7e:bf:61:c9:01:89:1c:f4:74:03:74:
b1:ea:11:70:b9:51:eb:ec:05:98:04:4b:68:f2:d0:
c6:65:af:2f:03:b5:30:b6:30:d2:bd:45:aa:35:18:
e7:09:dc:79:b5:e1:9f:2d:31:14:b9:c9:fc:5c:15:
44:07:86:00:55:97:1f:41:66:48:0f:5e:30:90:b4:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:67:30:28:53:71:3C:9E:88:E8:08:05:54:76:93:29:AF:53:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b8ZnMChTcTyeiOgIBVR2kymvU_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:80:c1:12:2b:4c:3e:42:be:14:91:95:72:4e:b8:03:f1:17:
49:6b:17:3b:b2:a9:fd:97:d1:90:a6:cb:9d:d2:fa:67:86:0c:
eb:61:3a:f2:51:14:a3:25:df:b2:a8:03:54:81:4f:d3:61:8c:
8e:bb:0c:70:28:fe:ee:19:dc:36:bb:86:55:d8:04:13:b4:3a:
bd:14:8a:8a:cf:ec:25:13:88:db:ba:69:43:12:2e:b3:19:9a:
60:19:4f:26:26:5e:f4:6e:f7:27:09:19:55:b4:b0:da:4d:b5:
82:9b:75:6c:26:0d:fb:93:4c:3f:db:38:f5:6c:38:87:56:b0:
ba:e1:c7:ce:0e:94:1a:64:f3:14:db:00:0f:4e:cd:a6:d9:aa:
00:ce:71:b9:4b:28:85:18:3f:5f:c5:53:bf:6b:d7:8c:35:2c:
2a:46:5a:72:98:c4:bf:44:cc:8c:89:b7:8e:41:57:f9:8c:a5:
b4:41:33:6c:c1:ef:cb:2a:a5:fb:98:ba:91:b2:89:10:44:4c:
d0:d7:86:6c:e2:48:42:fe:4c:bd:b1:58:ca:51:d2:3a:b9:50:
99:82:96:6e:a7:b0:5b:23:9b:d5:77:dd:b3:81:4a:3e:81:c5:
5f:fb:ca:2e:bf:6b:11:b5:66:78:9a:ef:ca:79:f1:49:50:16:
7d:17:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:57 2025 by rpki-client