Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i8kXdTsBiQEkiQ_7FUObIsVfsgc.roa
File: i8kXdTsBiQEkiQ_7FUObIsVfsgc.roa (raw, json)
Hash identifier: Juc7X7E4Wz0ZQHKheTIvt8qsVzQKWZhwIS2/9yzS7hs=
Subject key identifier: 8B:C9:17:75:3B:01:89:01:24:89:0F:FB:15:43:9B:22:C5:5F:B2:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6AF6CE11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i8kXdTsBiQEkiQ_7FUObIsVfsgc.roa
Signing time: Wed 16 Feb 2022 01:24:19 +0000
ROA not before: Wed 16 Feb 2022 01:24:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794559505 (0x6af6ce11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 01:24:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bc917753b01890124890ffb15439b22c55fb207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:75:b5:c3:4c:3a:bf:45:63:cf:cf:63:f5:
78:a8:65:d1:9e:c5:41:01:44:51:a4:cd:99:81:e3:
5e:2d:22:de:b8:26:c9:ef:41:b5:3e:31:68:e5:8e:
fa:69:43:ca:b1:22:02:15:8d:7b:37:2b:36:56:a2:
b0:e8:d4:56:ee:44:fb:50:f0:81:76:76:3f:32:ac:
a8:f9:92:b0:62:d9:43:bc:6a:ee:4d:8c:71:5e:4b:
be:88:b6:82:c5:3c:4b:0a:ac:d9:ea:47:c9:a9:f4:
af:90:26:6b:60:c6:49:53:a2:9b:d4:22:1d:27:d5:
c3:56:11:6f:a0:85:8c:75:db:56:16:22:8f:0e:f4:
61:3c:b5:99:13:7a:9b:44:1c:94:ea:db:94:73:26:
bd:5d:3c:27:6c:06:b4:28:d5:07:7f:7e:8e:c9:3c:
d8:4f:a8:d8:44:97:83:ef:51:a5:a8:4c:38:8c:c0:
d3:e7:17:b3:28:2a:db:39:40:f3:1e:4f:44:73:41:
f0:75:30:0b:87:86:5b:53:f7:94:c3:0c:42:5c:12:
91:a8:84:73:0b:80:91:7c:5a:d4:7f:ce:5d:33:11:
34:8b:1b:78:0a:bd:da:b7:51:ab:42:af:a6:08:35:
f2:38:26:56:98:b7:db:0c:8e:bb:1c:cb:17:5c:74:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C9:17:75:3B:01:89:01:24:89:0F:FB:15:43:9B:22:C5:5F:B2:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i8kXdTsBiQEkiQ_7FUObIsVfsgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:f6:b5:eb:d1:c0:f9:03:53:0b:60:ee:1f:6f:92:e5:37:70:
33:b4:43:a6:66:49:f6:55:a2:16:ea:c2:43:fc:fa:fe:6f:e0:
4a:a1:df:0b:0a:c0:42:33:7f:3d:82:b7:2e:f2:59:85:e9:95:
6f:8d:2f:4b:db:4b:4a:8d:2e:d7:5c:e0:27:d4:fe:26:3f:87:
19:cc:66:a3:e3:66:70:87:b6:e4:aa:d7:ce:37:a8:0c:8b:98:
06:1c:a5:da:43:7a:9d:06:64:04:cb:77:10:28:00:1a:eb:d0:
1f:45:3d:4d:ed:00:9a:ce:30:61:2b:8b:0d:d6:83:8c:5e:fa:
9d:29:c9:35:58:cd:02:4f:ea:c5:b0:01:87:84:df:3a:06:a5:
4b:0d:bb:8c:b5:b5:43:e9:13:33:de:db:4b:b7:43:16:07:7d:
f9:65:f9:09:42:6c:53:f1:c8:3e:4e:4b:05:38:11:86:20:f3:
21:88:dc:de:57:4b:8b:d7:67:c0:41:41:82:b2:6d:de:4a:a6:
2a:45:24:54:9e:4b:7a:29:82:3e:39:9b:c1:1d:90:8c:6b:00:
cf:61:f8:fc:ad:50:d0:96:c5:23:7a:8a:7c:54:19:01:30:5c:
11:0b:ab:96:c7:fe:87:2a:a6:db:cb:31:f3:ac:86:ef:f8:9c:
14:8c:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:13:37 2025 by rpki-client