Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k8RAiP4HSPzEBYTqlQ2QwT9CD5w.roa
File: k8RAiP4HSPzEBYTqlQ2QwT9CD5w.roa (raw, json)
Hash identifier: JSfQnU1JvX8FBccVwd6umogf4hkQ3pLIZCwS8zJkE+U=
Subject key identifier: 93:C4:40:88:FE:07:48:FC:C4:05:84:EA:95:0D:90:C1:3F:42:0F:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 92190478
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k8RAiP4HSPzEBYTqlQ2QwT9CD5w.roa
Signing time: Sun 03 Jul 2022 18:11:25 +0000
ROA not before: Sun 03 Jul 2022 18:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451113080 (0x92190478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 3 18:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93c44088fe0748fcc40584ea950d90c13f420f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0e:13:bf:fa:c4:9b:b6:f5:f2:c2:cf:3e:9e:
12:3b:f5:ab:ee:70:7f:6e:ea:f4:c1:da:e6:0b:96:
0b:37:55:cd:77:ea:de:61:a0:90:d3:d6:bb:2a:f7:
dd:be:b5:0c:ad:3c:ea:59:1f:13:57:59:3b:85:5d:
51:e6:a5:32:23:1a:db:6b:3f:7f:59:83:d1:40:3e:
21:aa:51:33:eb:7f:e5:ff:c0:23:79:5b:46:69:68:
cf:77:1c:a2:70:52:2f:1b:2a:76:87:e9:b9:62:65:
30:fd:59:0f:e3:31:ae:fd:e7:30:5e:9a:37:12:be:
70:0f:b7:6b:c6:c0:af:b8:c5:24:66:bf:db:e2:cf:
49:f2:55:56:be:c6:fb:e7:65:45:94:11:1a:c8:6b:
da:c5:74:f3:c6:5c:e2:fc:fe:61:8e:52:44:72:71:
a1:ee:dc:3a:7b:cb:a2:c5:3d:b6:ed:9a:cd:e5:48:
10:13:48:c4:be:8a:dc:12:d7:25:4a:10:7b:3c:10:
d6:fd:ed:7b:af:c1:68:7a:dc:67:28:8f:ee:96:09:
26:2c:10:4b:b3:49:f3:af:3b:fe:67:a5:55:94:39:
70:19:51:dc:ca:5d:ed:a2:cb:6d:e2:59:09:9b:dd:
a1:4f:8d:eb:67:75:59:05:56:86:33:b2:36:ad:b1:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C4:40:88:FE:07:48:FC:C4:05:84:EA:95:0D:90:C1:3F:42:0F:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k8RAiP4HSPzEBYTqlQ2QwT9CD5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:c3:3c:86:66:f0:59:8c:d3:63:ae:98:40:d4:1b:d5:ca:ea:
79:4d:5d:1b:f5:18:0d:ed:17:75:74:69:3e:c2:1c:bf:b2:8a:
94:41:da:83:b8:d0:0c:4c:aa:4c:c5:d7:0d:2e:c4:4c:19:d4:
25:a9:b0:24:83:c2:b4:ea:c1:30:15:fb:06:42:a8:f5:bc:3a:
f8:fc:a3:53:91:f4:32:0a:8e:0b:0c:ad:96:e8:02:7a:42:f0:
9c:54:79:d3:b7:2b:5e:ce:ec:a8:fb:a5:97:29:88:27:15:73:
62:f5:f4:34:8f:68:85:8c:d0:7f:a6:4c:6e:57:0e:47:a0:74:
55:49:19:de:57:fd:a6:2b:3f:75:d3:ef:34:57:eb:4f:02:24:
7e:c9:e0:a9:66:25:55:e1:fe:27:e4:86:c6:07:3b:7f:32:02:
b6:52:e3:4a:6c:49:41:49:10:65:80:1a:c8:af:80:a8:2e:b6:
be:67:ab:67:b1:7f:9a:aa:c9:84:58:8d:8e:dd:63:45:05:2d:
1b:91:94:5d:5a:36:82:e2:d5:76:16:42:ef:77:92:19:0f:0e:
b7:66:15:0b:03:93:6f:ee:8c:a5:20:20:32:73:85:18:50:ab:
a3:6b:12:44:63:bf:14:44:2e:56:5b:36:e4:7d:e4:e9:ce:35:
e5:28:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:47:55 2025 by rpki-client