Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i8IuWDdF-7QhF1It6grOUZEiMUo.roa
File: i8IuWDdF-7QhF1It6grOUZEiMUo.roa (raw, json)
Hash identifier: jFGtwuSUSqklaHe4t+rZ1XnQzu0dspKWbWcImmFnU6A=
Subject key identifier: 8B:C2:2E:58:37:45:FB:B4:21:17:52:2D:EA:0A:CE:51:91:22:31:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859148725A30473B5DD35059619DCDE569
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i8IuWDdF-7QhF1It6grOUZEiMUo.roa
Signing time: Sun 08 Jan 2023 12:08:42 +0000
ROA not before: Sun 08 Jan 2023 12:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:91:48:72:5a:30:47:3b:5d:d3:50:59:61:9d:cd:e5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 8 12:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bc22e583745fbb42117522dea0ace519122314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:07:ae:16:68:a7:25:f8:3c:d6:e6:63:5a:
72:fd:c3:1d:1c:58:dd:b1:a1:6d:cc:6e:c5:9a:79:
9a:21:59:37:60:7c:48:a6:61:8d:73:be:e9:f8:90:
9e:6c:97:76:aa:3a:df:14:e3:90:c6:cf:2d:64:41:
c0:5e:31:2c:5e:68:ec:93:a8:36:5c:3e:8e:67:af:
db:b6:2f:40:c7:d0:bd:bb:6e:20:25:89:03:12:4b:
68:84:8e:16:6c:82:34:f9:8d:ed:4b:fc:48:c9:15:
31:79:ba:72:c3:e8:93:60:d0:d9:4d:09:52:a2:4f:
38:27:e9:53:11:09:4e:c5:d7:49:4d:63:26:96:0b:
74:d9:a1:03:22:65:bd:84:1f:21:ed:46:08:ff:6c:
23:a1:92:97:69:e4:33:04:b4:72:ac:00:db:3c:c6:
6f:3c:c9:25:66:4f:65:8c:1b:47:96:ba:09:01:96:
a4:b1:5a:8f:b6:9b:b9:9f:1f:92:50:c7:a0:08:80:
b3:5f:34:88:6f:d7:64:24:6d:9c:38:09:ac:be:d0:
fa:ae:84:92:12:d8:4b:be:e1:14:77:29:51:9b:e0:
46:a2:8f:05:dc:c0:d5:49:72:c4:05:4c:5b:8d:b2:
e3:a4:49:b1:1b:b4:e8:07:63:5f:ac:7a:5c:57:e7:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C2:2E:58:37:45:FB:B4:21:17:52:2D:EA:0A:CE:51:91:22:31:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i8IuWDdF-7QhF1It6grOUZEiMUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:50:25:b8:b2:ec:8d:01:b9:fe:a8:16:76:c3:72:10:67:90:
44:5c:9f:33:11:35:a8:0c:8d:43:6f:18:59:f5:e6:6f:de:73:
d0:30:78:e4:39:0c:ed:5f:4f:d5:59:93:9a:52:72:d6:af:b2:
a3:6f:74:94:bb:33:2d:f0:33:a6:4c:b1:4f:75:fa:b2:43:2b:
3f:2e:f2:cb:6b:80:27:7e:5f:b3:7f:26:94:3c:4f:1f:f0:13:
a0:0e:33:97:5a:c3:b6:a9:94:f3:a6:5f:b0:ab:f9:fd:0c:e5:
00:34:5d:3e:8a:0e:0c:b9:00:76:72:8c:0d:1c:f7:d4:54:9e:
0e:ce:43:46:11:4a:cc:63:10:10:40:b0:d5:a9:63:55:d8:b4:
a1:7a:a0:f0:ff:0f:03:3b:be:81:b3:7e:6a:ec:32:0a:f0:c8:
5f:56:a1:e9:0e:4b:eb:54:94:13:a3:27:0f:78:79:a9:e2:30:
c4:79:f6:23:0a:53:79:a3:99:cb:aa:d0:4b:d9:79:97:75:0e:
3d:c6:18:8e:a3:09:7c:96:8e:0e:3c:fc:54:19:d1:42:7a:f8:
95:57:ed:3f:e6:c7:6f:fb:3c:7c:fd:8e:79:4d:71:2f:5a:84:
9b:48:5a:c3:2e:d4:14:5d:8c:82:ae:7a:08:d7:b7:9f:e1:1e:
7a:b0:e1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:41:51 2025 by rpki-client