Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o8XWbPMncT5Z63k-ANEOA8abduY.roa
File: o8XWbPMncT5Z63k-ANEOA8abduY.roa (raw, json)
Hash identifier: wCKMoFaqEkglSYciMT6B5T4cHRBVkR+GexerRWJhdi4=
Subject key identifier: A3:C5:D6:6C:F3:27:71:3E:59:EB:79:3E:00:D1:0E:03:C6:9B:76:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187812C5F7FA6EA80C3C3BCD990AEDC1535
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o8XWbPMncT5Z63k-ANEOA8abduY.roa
Signing time: Fri 14 Apr 2023 19:09:41 +0000
ROA not before: Fri 14 Apr 2023 19:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:81:2c:5f:7f:a6:ea:80:c3:c3:bc:d9:90:ae:dc:15:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 19:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3c5d66cf327713e59eb793e00d10e03c69b76e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:ff:bc:16:18:42:c9:95:cd:30:15:a4:f6:
db:11:b8:b1:39:d4:27:d4:e0:e6:e9:e0:2c:84:0b:
68:74:dc:44:23:d1:cc:21:87:3f:48:6c:f3:03:f9:
4f:44:6c:3a:69:01:99:61:a2:87:c6:5a:dc:dd:44:
40:cf:91:be:4d:70:d7:50:82:77:3d:1b:ef:6f:9f:
8a:4f:2b:e0:8e:95:f6:26:f5:69:d6:e0:80:dc:eb:
22:e4:18:ae:81:c6:9c:9f:a8:0f:59:6f:5d:ad:5f:
23:9e:5f:48:98:e2:e3:0c:59:10:8c:c6:ed:cd:e9:
0a:44:c3:45:5b:0f:b7:13:60:fa:ad:e0:6e:82:6e:
62:5f:39:69:5a:b7:22:d6:47:b3:55:69:ec:8f:45:
b3:c9:2c:03:d7:3a:3e:3f:c2:a6:5e:bc:33:14:21:
36:cf:21:bb:90:42:61:65:bd:53:03:60:5b:8e:2a:
eb:85:18:16:41:8e:82:2f:0a:59:9e:57:04:f0:89:
a4:9a:ba:7a:09:a0:8a:bb:d7:ec:5e:e5:31:7b:aa:
ca:28:33:08:0a:35:b6:5f:4f:e6:7f:ca:7e:cb:8a:
7e:04:78:a3:6b:fc:45:e7:b6:23:96:ea:53:c7:ac:
6f:e9:a2:4b:6f:d6:c5:0e:92:09:75:37:92:23:65:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C5:D6:6C:F3:27:71:3E:59:EB:79:3E:00:D1:0E:03:C6:9B:76:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o8XWbPMncT5Z63k-ANEOA8abduY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:1f:c2:eb:a8:09:9b:1a:fc:d1:2c:dc:12:48:06:a7:1f:1c:
8d:4b:3a:91:aa:28:08:b2:dd:56:56:c2:21:39:bf:39:ac:f3:
91:c1:ec:f3:97:a8:5a:5e:f3:6d:ea:ed:c8:e9:6e:36:08:f9:
77:b3:fd:5a:ac:de:0d:3f:e3:95:0a:ca:38:fd:bd:6f:4e:42:
62:00:6e:40:48:a5:fc:2b:9f:8e:05:d5:29:0c:ad:67:5a:0b:
43:66:39:0c:34:10:46:55:92:d1:8c:9e:96:e3:fb:a5:a0:db:
b9:79:b1:f0:3e:3c:30:7e:f5:07:ee:82:0e:c2:2d:61:a7:d6:
39:12:58:c2:a8:47:10:fb:c8:be:0b:04:34:2b:66:b1:67:66:
ef:38:dd:e7:71:3f:df:81:e5:37:08:32:32:87:12:7e:da:6e:
fb:6a:64:28:23:a5:60:ff:f4:c6:1c:89:58:b1:ff:b3:1c:80:
5b:cd:69:cb:d7:ef:e2:af:83:11:fb:21:bd:ad:24:4a:51:e0:
b9:63:a1:96:09:ea:b8:2d:84:20:7c:12:0e:02:2f:c6:02:f9:
9f:e3:93:de:7d:2e:11:73:0f:a9:b3:c7:34:39:e2:d0:2e:8f:
34:20:1c:2e:b5:20:22:5d:44:44:7a:d2:37:c1:f3:0b:cc:a9:
89:d5:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:19 2025 by rpki-client