Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g8jQ_qkmidXGP-_5nuVRuIzw5Mc.roa
File: g8jQ_qkmidXGP-_5nuVRuIzw5Mc.roa (raw, json)
Hash identifier: eSa88DXKZN4xF0++K2yHz55pU/1U/vQDMZjeaEuA87s=
Subject key identifier: 83:C8:D0:FE:A9:26:89:D5:C6:3F:EF:F9:9E:E5:51:B8:8C:F0:E4:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018646288E32384787FE51AF5198A8280685
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g8jQ_qkmidXGP-_5nuVRuIzw5Mc.roa
Signing time: Sun 12 Feb 2023 15:05:08 +0000
ROA not before: Sun 12 Feb 2023 15:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:4627:c8b4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:46:28:8e:32:38:47:87:fe:51:af:51:98:a8:28:06:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 15:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83c8d0fea92689d5c63feff99ee551b88cf0e4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3d:20:5d:57:95:54:ef:16:a3:b2:3f:82:60:
cc:ce:4d:88:11:51:5e:e7:a3:ef:ec:ee:79:ce:f8:
df:cf:0f:90:a9:a5:f7:7a:d5:ec:8e:ca:03:d7:fe:
42:9e:88:c9:8b:eb:32:cb:a8:d3:b1:61:7a:22:86:
ba:b4:3d:d9:d5:f5:31:96:18:f1:c4:17:3a:64:24:
1f:5e:e2:b7:08:6d:55:f2:05:1c:98:a8:43:d0:8c:
a6:33:40:d4:48:8a:70:0d:f8:0c:4f:ba:7d:b0:f9:
a0:ad:3c:78:01:7a:b0:b1:83:49:8c:24:cd:be:0c:
e5:03:4a:dc:7d:76:5d:35:38:19:ed:c7:53:8b:17:
1e:3c:61:a7:79:af:0b:48:ef:ec:b1:cf:e7:ab:8b:
35:be:ec:bc:05:c8:59:11:6d:6a:ea:73:0f:ac:ef:
97:9c:95:b8:6c:1b:1a:d8:07:01:c1:c6:c1:d5:89:
9e:08:2f:53:39:95:be:93:ac:a0:4f:46:bc:fb:3b:
85:5f:c0:e5:8d:91:fd:18:bd:39:9a:ff:e6:d7:6d:
7a:f3:1c:65:eb:35:33:a6:54:0f:50:9a:5e:c6:4b:
fd:25:17:6b:ea:ce:b1:e2:8b:4c:06:07:70:e8:84:
dd:5d:34:f0:8e:10:7a:63:00:be:91:5b:41:c2:c2:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:D0:FE:A9:26:89:D5:C6:3F:EF:F9:9E:E5:51:B8:8C:F0:E4:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g8jQ_qkmidXGP-_5nuVRuIzw5Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:df:83:ff:3b:91:83:61:d3:24:3f:d8:fd:83:f1:f7:21:44:
60:7f:28:6e:61:bb:bc:62:a9:4c:55:f9:b5:aa:60:28:63:9d:
30:09:ba:ae:62:eb:99:a5:f5:cc:da:c0:72:cd:3a:78:db:ed:
11:12:ba:54:f8:85:f8:a2:9d:46:fc:88:9e:75:03:29:fb:d6:
e9:a2:45:30:21:7a:d2:0b:58:5a:1e:ba:bd:df:e9:8b:3e:8c:
d2:b9:b1:05:38:de:ce:45:84:6b:57:6b:c0:0a:08:4e:7c:fb:
08:14:89:7e:38:e3:be:a9:7f:56:4e:ed:ea:ef:d2:fe:37:4b:
2b:9c:76:82:b8:e0:a8:d3:8a:69:8c:81:83:f8:ec:c2:db:0c:
7b:e4:b1:60:15:a4:6b:ca:c9:b4:63:5c:83:4c:00:71:db:95:
c1:d2:23:e7:38:e9:4f:11:7d:a0:26:b6:55:72:85:b1:37:ed:
0b:1e:f3:53:24:56:86:47:80:dd:54:32:20:0f:24:66:b8:a4:
14:1d:1b:de:d8:32:00:c9:a3:be:2f:86:1e:7a:65:86:90:2d:
71:fa:18:a7:6b:4a:28:ba:19:d5:aa:11:7c:15:f6:6d:1e:56:
2b:98:d3:7b:70:fd:00:b1:91:ed:90:8e:7f:7e:a7:ff:d3:97:
6e:64:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:50:23 2025 by rpki-client