Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c8NFtXPqyY6ZrBdHNExEZjlfuCI.roa
File: c8NFtXPqyY6ZrBdHNExEZjlfuCI.roa (raw, json)
Hash identifier: Ne5CnLKwANuZ3gqSx3YCzQVDNLVpp9ZPTY7TGxpFWCk=
Subject key identifier: 73:C3:45:B5:73:EA:C9:8E:99:AC:17:47:34:4C:44:66:39:5F:B8:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899BC465193A108E8384E42740D073F05E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c8NFtXPqyY6ZrBdHNExEZjlfuCI.roa
Signing time: Fri 28 Jul 2023 09:11:26 +0000
ROA not before: Fri 28 Jul 2023 09:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:c4:65:19:3a:10:8e:83:84:e4:27:40:d0:73:f0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 09:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73c345b573eac98e99ac1747344c4466395fb822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:6f:76:cf:83:91:1e:e9:d6:69:70:a6:a2:
c2:3e:2d:5c:f1:81:8e:80:6c:84:df:ed:be:bf:b2:
3e:37:7b:30:93:67:9c:fc:eb:50:04:72:5c:ee:c4:
64:1c:0d:fb:48:b2:bb:94:fd:18:4f:7a:38:8c:83:
c8:a8:8e:7c:78:90:72:41:ee:12:b3:bd:dc:fd:24:
48:f4:49:9f:4c:08:ff:9c:bf:74:05:25:8f:7c:af:
90:eb:bb:dd:8a:79:42:27:45:67:40:dd:da:cd:71:
54:06:37:03:6b:b8:7a:bc:33:8e:5e:2b:8d:5b:39:
da:e8:f5:a8:b3:03:35:59:08:72:26:df:7d:2e:b5:
19:82:c4:41:75:9a:9e:42:c7:a2:da:7e:10:6a:fd:
d5:74:7e:2b:65:ca:4f:15:fc:ff:b4:ed:30:17:9e:
41:11:f8:1f:2e:67:f7:62:98:b3:0f:fb:cb:cf:de:
f9:d4:5f:4f:0c:f3:6c:34:4f:fd:d0:02:a1:4f:36:
eb:38:b7:29:06:02:f7:6e:6f:91:1c:b7:00:d6:58:
17:4f:c2:c5:17:9b:43:47:83:2a:05:46:5e:fa:cb:
7f:dd:bc:24:f6:0c:cd:83:bf:13:83:ff:d7:3a:3d:
79:63:7f:7f:46:50:2d:42:26:61:b5:e7:04:6b:9c:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C3:45:B5:73:EA:C9:8E:99:AC:17:47:34:4C:44:66:39:5F:B8:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c8NFtXPqyY6ZrBdHNExEZjlfuCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:e8:4f:5d:ac:0c:3f:71:01:4f:c2:91:9e:fd:e2:59:5e:fb:
7f:bf:18:e8:29:a0:fa:b0:23:af:48:a0:64:4f:cf:a8:08:80:
e7:c9:2d:8a:3b:4c:ca:e3:5d:62:29:a1:72:9d:01:97:78:8c:
d7:99:3f:79:34:a9:9c:fe:4d:07:70:d3:c0:82:60:42:d5:ae:
04:34:09:35:c2:65:f7:d2:0c:97:95:3a:25:e8:cd:2d:4b:9d:
26:7b:7a:6b:c0:6d:bb:94:61:5c:89:d5:d7:11:cd:7c:95:e4:
f0:0a:bc:c9:62:12:cb:4f:ef:67:f3:8d:ce:89:7d:12:18:2c:
d3:6f:1d:a3:b7:4c:35:f0:57:0e:37:e3:55:b3:ff:d6:91:4d:
de:64:b0:94:a2:a0:32:45:b9:f0:d4:78:e6:1f:5b:48:8b:c2:
78:78:9e:98:17:70:1c:40:1f:cc:58:ab:4f:fd:99:73:10:60:
a3:39:84:fd:66:f3:2f:ab:f4:bd:b4:02:c5:53:59:30:0d:f3:
9d:76:dd:cc:ce:39:02:21:20:bf:50:36:0a:c4:52:25:e0:ac:
26:6a:a8:fd:d2:a0:a8:06:b9:ad:8a:98:47:df:83:13:ea:0c:
01:86:8e:95:55:8b:ff:1f:26:06:ea:46:53:d9:0f:97:d5:ea:
67:6a:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:51:04 2025 by rpki-client