Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/in8MHw633MD_l1azZqW9ZALfev4.roa
File: in8MHw633MD_l1azZqW9ZALfev4.roa (raw, json)
Hash identifier: QatbWXwXjljQmWI++bl0dSaFWW/yidVC8CBk1tIbZtU=
Subject key identifier: 8A:7F:0C:1F:0E:B7:DC:C0:FF:97:56:B3:66:A5:BD:64:02:DF:7A:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 75F2AA69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/in8MHw633MD_l1azZqW9ZALfev4.roa
Signing time: Sat 26 Mar 2022 20:11:34 +0000
ROA not before: Sat 26 Mar 2022 20:11:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978837609 (0x75f2aa69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 20:11:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a7f0c1f0eb7dcc0ff9756b366a5bd6402df7afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:ca:26:98:2e:5a:a4:36:45:34:89:e2:5a:
5b:2f:19:3c:72:22:2a:bd:01:1e:a2:6e:b5:3c:dd:
3c:51:4f:ef:0b:8c:c9:9d:a6:95:c6:b4:00:ef:e9:
d7:df:a9:16:d7:7e:63:0a:1c:2c:6c:e3:bf:91:2e:
db:af:c1:f5:7c:85:fd:f6:47:de:16:ea:3e:69:7a:
5b:dd:79:c3:8d:4a:6a:65:e9:ac:41:83:b4:93:16:
04:9b:dd:8a:b8:41:f6:77:3b:d3:ea:3c:e8:13:ab:
17:b6:ab:9f:68:76:03:8d:12:84:f4:ae:93:1e:2d:
be:d4:13:5c:d7:42:d2:af:9e:d8:b9:d9:a5:9c:90:
97:21:68:45:51:c9:d0:d6:ea:67:90:a8:55:3a:c5:
fb:ba:dc:58:e9:61:8d:2b:76:89:7a:a9:8e:11:cd:
01:1d:9a:0c:f4:04:23:9a:b5:dc:5a:1f:2f:d5:e7:
8c:01:d7:50:a3:6c:b3:d1:86:d1:e3:d7:7b:b8:ef:
3a:6a:e1:d1:40:da:fc:36:9d:a9:5c:28:82:83:01:
9d:9b:58:fa:6c:dd:d2:db:13:7f:8b:d5:ff:8f:9d:
2a:3e:f6:47:4f:19:41:43:85:75:41:90:85:f5:52:
a6:5d:b1:50:9d:47:52:e6:9f:66:23:fd:3e:88:7d:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7F:0C:1F:0E:B7:DC:C0:FF:97:56:B3:66:A5:BD:64:02:DF:7A:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/in8MHw633MD_l1azZqW9ZALfev4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:1b:29:58:f6:c6:37:d7:ad:5e:0c:55:c3:79:3d:bc:5b:d4:
17:ee:3b:0f:a7:74:ac:ff:49:d4:01:52:c9:77:43:cf:1e:bf:
73:e7:fa:5a:88:b9:e7:1b:c6:c4:64:9b:f6:d5:7e:ff:58:2b:
49:7b:e0:4c:d6:d6:d4:0e:0d:11:d4:16:ab:24:ab:7a:bc:df:
88:3d:fd:15:92:56:d7:98:e5:2d:6d:03:26:e6:06:5f:3a:f7:
4e:f6:1e:e1:15:7a:ca:cc:24:3e:9e:cc:70:97:6a:8e:c3:8e:
5d:15:af:e6:d9:30:91:1d:2d:ff:ce:82:59:9f:92:ff:83:17:
66:9d:c7:20:3c:35:b2:35:fb:fc:6c:cf:a5:33:67:40:23:c9:
ac:66:9f:d3:11:a8:2f:c5:52:f6:67:5a:29:c2:dd:47:68:66:
ef:06:b6:5c:cc:0b:de:6f:c1:a3:fc:b3:2a:73:48:ee:87:df:
aa:1e:ba:f3:98:f8:2f:d2:5c:80:72:2d:fa:d3:e7:97:a7:f9:
12:f5:21:bd:45:66:a0:72:ac:55:76:a3:14:17:ff:6d:c3:f6:
54:7f:1e:ec:29:e5:2b:3b:50:56:06:8d:95:38:68:f9:c7:59:
30:1d:70:18:26:79:6b:5f:7e:d5:e5:7d:38:55:c1:79:25:b1:
bc:d7:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:35 2025 by rpki-client