Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s8EVw_2bDdrRIKPD07B8ZHQynLQ.roa
File: s8EVw_2bDdrRIKPD07B8ZHQynLQ.roa (raw, json)
Hash identifier: HQoFUDAidk1+n9HX1qCFl3pp8dTxHVBYisxNgZFu/Y8=
Subject key identifier: B3:C1:15:C3:FD:9B:0D:DA:D1:20:A3:C3:D3:B0:7C:64:74:32:9C:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A1C7DE573966E9F99DBA04B19DAF69FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s8EVw_2bDdrRIKPD07B8ZHQynLQ.roa
Signing time: Thu 02 Mar 2023 10:04:35 +0000
ROA not before: Thu 02 Mar 2023 10:04:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:c7:de:57:39:66:e9:f9:9d:ba:04:b1:9d:af:69:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 10:04:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3c115c3fd9b0ddad120a3c3d3b07c6474329cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:24:73:13:33:ed:69:af:38:28:7c:ce:c5:
c7:4c:43:83:90:73:81:7c:19:cd:e3:a6:28:21:c5:
d4:cf:44:b5:d4:ef:11:46:4a:78:99:38:44:7a:19:
ca:a7:84:39:4c:7b:15:7f:12:86:d5:50:eb:6e:d4:
ef:54:f4:1b:1b:9c:4a:73:46:fd:f5:ea:7b:2b:be:
8c:79:25:18:44:36:b6:05:b4:60:93:00:40:e8:a9:
dc:52:86:33:60:01:22:db:f9:16:d5:36:5e:a0:2f:
6b:e0:28:32:9a:eb:2c:52:36:d4:5b:45:58:58:c7:
8b:3d:d7:61:0e:ae:9d:29:9b:0b:28:97:c9:55:76:
22:36:c5:23:21:58:23:64:17:2e:3a:8c:2c:f2:5d:
7b:5e:82:ba:e8:04:e7:85:6a:46:72:5d:00:16:59:
40:08:26:ae:b0:a0:31:da:5a:31:d0:e5:21:50:56:
12:48:49:50:fc:e4:80:d6:3c:06:97:3c:69:30:0a:
a7:47:85:18:91:49:0f:70:2f:fb:71:e5:e3:54:ca:
a2:88:7a:de:7f:2e:33:72:78:ae:18:cb:36:90:ca:
bd:47:af:22:88:e9:d2:22:44:4b:d5:76:df:1a:dd:
68:d8:8d:be:6f:62:a2:0f:84:30:73:f4:12:fd:59:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:15:C3:FD:9B:0D:DA:D1:20:A3:C3:D3:B0:7C:64:74:32:9C:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s8EVw_2bDdrRIKPD07B8ZHQynLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:21:67:97:97:9e:c7:f0:67:c6:d3:e4:e3:0d:c7:b9:0c:c1:
9b:c7:16:a7:a5:ee:5a:88:a0:6f:a5:28:f9:bd:44:49:1a:b8:
16:44:9b:e3:1e:73:08:47:7b:07:11:ad:0b:14:f8:cf:2c:03:
ef:30:69:52:61:8f:b1:76:6c:a6:ac:0a:8b:e8:cd:08:bf:df:
7f:43:04:12:65:13:50:6d:b5:42:32:61:f8:34:a7:66:4f:d8:
26:c9:ae:51:30:b0:13:4b:c8:13:21:05:7d:3e:6d:15:be:b7:
6a:d4:f1:89:ac:2a:6a:16:44:86:4b:d0:b8:c3:23:6f:b2:fe:
ec:c7:23:cb:ae:bf:77:e2:15:34:da:7f:1d:b7:9b:83:fe:d4:
6a:06:fa:76:4f:c7:14:6f:5f:e6:ef:b5:68:69:96:c4:d1:38:
72:14:6a:f7:2d:c5:7e:51:e2:de:c2:f8:3e:c3:e4:ba:81:f9:
ae:4a:7b:8d:58:b1:e1:52:37:60:57:4e:81:c5:6f:6f:c5:71:
6a:f2:60:45:30:8d:2c:ac:8e:3c:d7:75:cf:39:f1:c2:63:af:
b0:77:22:12:fa:ff:78:05:0c:4d:3a:91:c6:e4:ed:4e:ec:aa:
ca:fb:18:a2:bb:81:1d:cc:3c:98:4b:29:15:24:5d:b4:66:2a:
f4:78:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:01 2025 by rpki-client