Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x8iu9xE0Mh1qNodB_xvmCyL37Fc.roa
File: x8iu9xE0Mh1qNodB_xvmCyL37Fc.roa (raw, json)
Hash identifier: HSsqowpIi05uyRajzEmur6WV0/fb/1WiI3rmE3ZUBIE=
Subject key identifier: C7:C8:AE:F7:11:34:32:1D:6A:36:87:41:FF:1B:E6:0B:22:F7:EC:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185880E5FB221A8F94A009A00B4DC486052
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x8iu9xE0Mh1qNodB_xvmCyL37Fc.roa
Signing time: Fri 06 Jan 2023 17:08:41 +0000
ROA not before: Fri 06 Jan 2023 17:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:88:0e:5f:b2:21:a8:f9:4a:00:9a:00:b4:dc:48:60:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 6 17:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7c8aef71134321d6a368741ff1be60b22f7ec57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:dc:f0:e7:7e:92:3e:8c:de:50:08:98:99:
3b:02:83:71:b5:32:ad:3f:a8:a0:36:45:3f:63:3e:
a9:8b:6d:bc:b1:04:b1:02:1a:42:3d:7e:3e:66:16:
da:3e:27:06:a3:aa:85:61:73:40:52:f5:a1:a9:8b:
49:eb:1b:f2:21:90:b3:1f:95:a8:72:12:5b:af:69:
ee:7b:6e:c2:d9:71:9c:10:42:88:3d:7b:dc:4d:db:
17:6c:56:9c:6f:8b:43:9a:d3:9e:89:d7:95:01:bb:
b7:09:3c:93:ae:40:52:ac:eb:1d:82:ed:0c:1a:6f:
1a:b0:d2:ec:88:5a:01:b8:7e:5d:db:69:88:d5:02:
4f:28:ff:f5:e9:7b:f3:c6:b7:65:8b:c5:fd:e0:51:
75:6f:de:d8:f8:4e:5f:60:11:4d:e5:77:b6:d8:22:
12:d7:08:90:98:0c:73:69:81:7e:dd:98:5b:2a:e9:
29:a4:c1:ca:b9:eb:87:aa:94:52:da:04:cb:76:fb:
dc:7f:2f:4e:01:75:06:22:e6:94:eb:39:fd:e6:0c:
72:78:44:93:82:fd:82:1a:db:cb:e8:1e:bd:d8:3c:
1c:e8:60:47:c8:c9:51:d3:bd:84:8f:e8:fc:55:e5:
c1:1c:a8:e0:fb:0e:a7:d8:8d:b4:f2:5d:c8:07:c4:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C8:AE:F7:11:34:32:1D:6A:36:87:41:FF:1B:E6:0B:22:F7:EC:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x8iu9xE0Mh1qNodB_xvmCyL37Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:27:75:bc:17:28:f1:1a:eb:2e:54:78:86:6b:02:bb:a8:ab:
00:d9:8d:7a:fc:6b:90:96:51:3c:6e:dc:eb:89:10:83:d7:3f:
1d:2c:10:e5:96:90:4a:0a:c6:a1:fe:f5:d1:99:eb:c7:89:88:
90:89:20:ae:df:c9:f7:23:13:0b:da:69:ba:a4:6d:38:d7:55:
85:04:69:05:02:0f:fc:1c:61:13:61:48:d4:f4:ab:52:d0:53:
0a:4e:21:05:4b:94:f2:df:78:8d:6c:1a:f7:43:fa:e1:e9:30:
61:bf:c9:1c:01:a1:7c:0f:ab:08:4e:57:f7:5c:68:3c:c4:dc:
e0:eb:bf:c8:5c:57:7b:32:c2:b9:fa:18:d5:14:ac:3b:46:60:
25:19:1f:25:58:75:6f:5e:b9:ac:f7:66:f3:db:02:2e:de:6e:
3f:f8:76:17:15:0f:74:fc:dc:85:53:9b:3e:82:ce:75:93:93:
9f:30:85:70:af:8f:ab:4f:ec:65:0f:5f:01:7f:2a:67:6c:b2:
f2:dc:75:7a:2e:7b:7b:d9:d0:55:86:60:95:28:ac:97:65:c1:
f3:91:1d:61:6a:7e:f8:41:06:2e:2c:e4:90:80:43:b5:18:7c:
bf:dc:e3:a6:57:dd:3b:c6:0e:2a:27:ef:a7:93:2d:a0:da:3c:
a5:bd:f8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:02:01 2025 by rpki-client