Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rD8DlG_8xFkngyYBy-fXzJOslrQ.roa
File: rD8DlG_8xFkngyYBy-fXzJOslrQ.roa (raw, json)
Hash identifier: 4z8phfmXX/ErXigDXPBC3JOzo7LOfWU3CA642s2qMYU=
Subject key identifier: AC:3F:03:94:6F:FC:C4:59:27:83:26:01:CB:E7:D7:CC:93:AC:96:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8ED26884
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rD8DlG_8xFkngyYBy-fXzJOslrQ.roa
Signing time: Wed 22 Jun 2022 00:10:44 +0000
ROA not before: Wed 22 Jun 2022 00:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2396153988 (0x8ed26884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 00:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac3f03946ffcc45927832601cbe7d7cc93ac96b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:60:14:2b:47:49:ff:cd:ac:32:cf:cf:54:
fd:0d:ee:c7:2c:4e:78:30:45:61:32:64:34:4e:18:
75:78:02:ab:12:08:03:ed:d9:44:8c:c8:f6:f2:df:
f8:ee:35:29:51:f6:a4:76:2a:67:61:76:31:7d:30:
0e:c3:17:0b:25:7b:61:1e:c0:0f:38:b9:b7:a3:46:
42:b9:5b:1e:36:18:fa:fa:ac:13:5a:90:de:b3:77:
86:af:16:46:9e:b2:be:3b:7c:b3:91:3c:0d:40:e9:
2a:2b:9c:94:0d:f6:ce:53:04:5d:4e:1d:a4:28:eb:
c3:2c:20:da:57:9c:0a:9a:4e:cd:49:11:d8:8a:78:
13:ca:62:a2:d6:c6:6a:b5:ec:29:b6:63:3b:22:b1:
2c:da:b8:65:50:b5:99:85:fe:02:07:4a:74:7e:dd:
f4:79:45:da:9f:c3:a7:3b:83:df:fc:b1:4b:00:6f:
3c:19:48:2d:b3:44:d9:88:7f:27:01:b4:ee:2e:d6:
b3:d0:3d:d8:8d:c8:6c:c6:00:d0:02:84:b2:b0:7a:
24:ba:a1:a1:7b:8b:73:66:a7:3b:76:1a:70:10:63:
1d:e7:16:3e:93:72:73:3e:3a:6a:55:7a:4b:e3:b4:
93:91:89:f5:91:25:84:9e:c9:db:6a:74:22:2c:fc:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3F:03:94:6F:FC:C4:59:27:83:26:01:CB:E7:D7:CC:93:AC:96:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rD8DlG_8xFkngyYBy-fXzJOslrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:8d:e6:30:bf:7c:0b:21:65:0f:78:43:a4:47:a5:23:2a:f4:
f7:bc:8d:71:d3:4c:36:db:b0:79:3b:51:ad:9f:b1:50:06:9c:
c7:56:6f:bd:8d:5b:f6:2d:59:29:b7:ab:b6:12:f0:28:19:7f:
fb:3e:06:1c:73:16:f3:96:cf:2f:b6:c1:d1:05:88:fe:ab:f2:
09:a9:d0:72:fa:25:5b:c1:a1:48:a6:84:17:f8:0e:5d:09:1c:
54:ef:db:01:da:1b:40:ff:77:09:37:cc:16:f0:24:ab:30:4b:
75:ab:62:3d:ed:94:5b:7c:bb:4e:62:ce:e2:74:6b:03:2c:7a:
67:0a:2c:32:45:8e:b9:6d:ed:d4:71:55:06:6c:29:56:47:f8:
78:39:00:e0:b1:b7:81:a4:fd:d2:4a:f2:4c:d9:6f:99:2e:c9:
9c:27:67:b8:a5:b0:bf:75:44:69:15:f6:12:6a:0e:c7:31:52:
c3:6b:92:45:92:44:dd:45:01:f7:90:e9:20:1e:8a:e8:d1:6b:
d2:91:66:ae:03:ab:8e:0c:08:6a:cc:81:4d:6c:03:3b:2c:e6:
39:83:bd:c5:66:4d:b9:24:c8:f9:d5:c5:14:06:ff:5e:56:ba:
62:57:e8:6d:ae:fa:05:05:08:82:89:eb:bc:e3:ce:a2:4e:7b:
a2:28:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:19:59 2025 by rpki-client