Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3-8RP-LC2BnLt9HFzFWS-JF83ks.roa
File: 3-8RP-LC2BnLt9HFzFWS-JF83ks.roa (raw, json)
Hash identifier: yzLy8ztD7xKYu4ZsmdHrSyuK/UXy8cpuyBBc9W1viwg=
Subject key identifier: DF:EF:11:3F:E2:C2:D8:19:CB:B7:D1:C5:CC:55:92:F8:91:7C:DE:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B17FCBB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3-8RP-LC2BnLt9HFzFWS-JF83ks.roa
Signing time: Wed 08 Jun 2022 20:11:02 +0000
ROA not before: Wed 08 Jun 2022 20:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2333605051 (0x8b17fcbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 20:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfef113fe2c2d819cbb7d1c5cc5592f8917cde4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:04:ab:56:26:5d:6f:c0:8c:7a:06:47:d2:
1c:ac:c4:f2:7c:8d:a6:9d:7c:04:2f:4c:ca:ba:3e:
89:33:d4:79:ad:1f:4d:07:b2:3f:da:62:a7:dc:2f:
b2:93:71:75:71:30:be:78:bd:ab:c4:9c:df:bc:42:
69:e6:49:29:a2:21:e0:87:d0:d7:43:09:64:f7:92:
bb:3f:8c:e3:7f:68:ec:f2:d8:fb:4c:d1:54:3a:7e:
42:27:db:65:b9:dc:4c:ed:70:d2:e0:81:76:2d:56:
e1:dd:c5:cb:59:14:1b:f1:f3:14:b5:a3:81:54:86:
a3:bc:01:ab:fd:01:b4:da:94:a6:59:b3:f0:af:30:
ec:02:d6:1a:8b:e9:69:a9:0d:56:ff:03:bb:f6:b9:
a3:88:a1:69:32:ed:ab:94:18:7c:ff:5e:ef:96:b4:
59:d9:d5:a3:78:fd:44:32:f1:65:22:30:fe:6c:ea:
f8:c8:a3:2c:e0:b4:94:00:84:7e:98:d2:0b:e9:4a:
b3:35:e8:45:ea:70:d7:d1:90:a9:39:86:b5:e2:70:
f8:d7:97:de:d2:b9:62:ea:d5:20:8b:02:c3:f6:4d:
52:94:e0:e8:59:ef:7d:5e:da:24:0b:91:30:d9:43:
12:de:92:23:a1:35:46:22:72:e9:c2:46:30:20:81:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:11:3F:E2:C2:D8:19:CB:B7:D1:C5:CC:55:92:F8:91:7C:DE:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3-8RP-LC2BnLt9HFzFWS-JF83ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:7b:8d:73:91:40:03:5b:54:e8:dc:75:9e:4f:a4:df:e4:fb:
e5:42:3d:2c:64:f2:55:8f:fd:7e:ba:cc:49:c4:83:02:0c:ea:
0c:4a:dd:1d:2a:fb:b4:aa:7c:5f:eb:5b:af:2f:97:03:68:51:
fa:d0:2d:ec:39:46:2f:c2:09:45:fd:f9:c5:0f:f3:25:62:aa:
2f:ae:d3:48:0c:70:e5:71:7f:df:43:e8:f2:a9:7b:ed:5b:be:
7b:a2:51:b9:97:a3:84:3b:57:24:a3:8b:d0:1a:a3:b6:de:30:
40:6e:e4:8e:59:c0:16:48:6c:fa:aa:be:0b:9c:a5:2b:8a:5a:
de:69:28:95:e1:30:8b:bc:f8:aa:ad:af:af:8f:7f:95:e6:b8:
6e:7a:71:3a:dd:f3:ce:06:a9:c9:52:c1:0a:95:68:34:63:9d:
62:fe:3c:d8:8a:31:64:5f:10:5f:48:0c:71:83:d9:55:ee:77:
9f:0f:d4:71:9d:20:98:00:a8:5b:10:76:90:c1:f6:d1:cb:88:
88:16:b6:e4:8e:42:76:c6:ed:bb:c1:3f:66:01:ec:2c:71:b3:
35:0d:b3:32:3b:d7:27:ec:70:90:75:b1:0b:0f:45:11:1d:66:
ab:ba:cf:23:b5:61:32:8c:e3:6b:17:89:4f:13:85:55:06:26:
0c:d0:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:57:46 2025 by rpki-client