Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s8D0_uFAlFrKRjMQUFaVRC4XCMM.roa
File: s8D0_uFAlFrKRjMQUFaVRC4XCMM.roa (raw, json)
Hash identifier: 38LQrO5l3ensY5mXclWhDUgjTes+EbOu0iETq+yf19g=
Subject key identifier: B3:C0:F4:FE:E1:40:94:5A:CA:46:33:10:50:56:95:44:2E:17:08:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857528BAF0AA41095D105FD8015C782833
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s8D0_uFAlFrKRjMQUFaVRC4XCMM.roa
Signing time: Tue 03 Jan 2023 01:04:41 +0000
ROA not before: Tue 03 Jan 2023 01:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:7528:4e11/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:75:28:ba:f0:aa:41:09:5d:10:5f:d8:01:5c:78:28:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 3 01:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3c0f4fee140945aca463310505695442e1708c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:42:aa:a1:4d:b3:b4:fc:48:19:f8:93:0e:
2a:29:45:4b:04:1d:35:7d:c7:b6:54:17:e6:63:c0:
d6:2f:bd:54:0d:a0:56:ec:8e:bc:17:57:d5:f0:5a:
1d:28:3d:55:55:e0:f4:7b:62:49:d4:67:ea:29:95:
ac:06:74:78:a4:9b:06:0b:66:20:39:12:34:b5:30:
cb:50:09:27:30:e8:65:3e:0b:e5:87:09:0b:0e:44:
c8:58:46:67:aa:41:1e:b9:0c:04:26:30:14:ae:ac:
c2:08:6e:9c:e2:0b:c8:21:1b:37:99:01:a9:e4:c6:
3c:53:32:45:03:09:e3:a1:90:4a:29:4e:2e:cc:22:
82:54:60:eb:8f:47:af:37:f5:1e:2c:c9:03:2f:e4:
40:0f:6d:0c:c5:79:d7:cc:68:1a:13:90:0b:4a:96:
e8:fa:ba:3f:e6:81:16:7e:fb:e2:44:22:d5:a7:47:
c5:59:ea:26:53:56:c6:7f:10:46:0c:88:46:fc:30:
f4:79:49:9b:78:9b:1d:0e:79:57:b2:cc:fa:0f:19:
72:c1:d9:c7:26:60:3c:78:d5:cd:7e:c4:fa:f7:10:
e3:c3:6f:42:b2:a6:1d:ed:7d:98:fb:9e:1f:4d:b5:
58:bf:f4:2c:dc:20:77:98:fd:c5:a4:fe:e6:ed:b0:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C0:F4:FE:E1:40:94:5A:CA:46:33:10:50:56:95:44:2E:17:08:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s8D0_uFAlFrKRjMQUFaVRC4XCMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:53:4b:cc:90:f9:bd:30:3b:87:70:dc:af:51:ac:9c:09:21:
5b:1e:b5:6b:0d:f9:38:81:46:18:5c:50:b5:80:b1:7e:6e:aa:
dd:a5:20:b4:47:69:49:c2:25:4c:03:3e:29:da:a0:3d:4c:74:
5b:33:3b:4c:d8:41:82:93:aa:83:7f:f8:74:56:cd:ad:4a:94:
0d:d8:8f:fd:3a:56:d1:d8:1f:c5:73:1e:1f:3e:10:4a:a5:a7:
a5:b8:6d:e4:7d:b5:91:0a:3c:05:a8:4c:f5:70:69:2e:83:74:
8c:e0:80:e7:c7:a6:9d:04:65:f4:8c:f6:13:bd:79:52:8e:6e:
9a:c2:a5:e6:98:46:94:32:cf:31:e6:78:a8:c7:e3:39:46:25:
bc:cf:b3:d0:df:c7:66:5c:94:b6:de:0d:5a:78:f7:dd:c2:9d:
8c:9b:1f:ee:cf:40:c7:f2:5b:4f:f9:96:4b:08:db:87:6d:28:
cb:3d:73:4e:b5:f8:81:18:21:4b:c4:4f:e6:d7:7c:88:61:6b:
6c:cf:a6:80:3f:aa:43:16:0c:c8:47:4b:9c:a4:9d:6f:f6:5f:
e1:bd:ad:8f:b8:b5:39:a4:fa:ce:61:a0:62:a2:40:e2:a4:37:
04:8c:87:46:31:69:8b:7c:a8:51:dd:22:d2:02:43:86:13:5b:
89:2b:cc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:39:49 2025 by rpki-client