Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8BTgj69SAwCd7PtEbvt8ggMsD7w.roa
File: 8BTgj69SAwCd7PtEbvt8ggMsD7w.roa (raw, json)
Hash identifier: +yDsgJ0pYS2q7vBXnGB4JUQHxR2NpGkEBX/O2T9q9DY=
Subject key identifier: F0:14:E0:8F:AF:52:03:00:9D:EC:FB:44:6E:FB:7C:82:03:2C:0F:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7375D574
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8BTgj69SAwCd7PtEbvt8ggMsD7w.roa
Signing time: Fri 18 Mar 2022 07:07:26 +0000
ROA not before: Fri 18 Mar 2022 07:07:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937102196 (0x7375d574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 07:07:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f014e08faf5203009decfb446efb7c82032c0fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:69:c4:9f:bf:77:a0:18:8b:bc:84:f4:44:
5f:d4:ee:4b:03:ed:d5:65:c3:e9:7f:c9:60:22:ec:
36:f1:55:7e:11:bc:c0:03:a6:80:87:09:8b:c3:8c:
6d:ca:d1:6a:fe:f1:0f:d9:42:39:cd:03:5d:1b:50:
7e:c7:92:63:6e:51:c4:db:34:50:c0:10:15:93:2c:
32:79:17:17:81:d7:53:30:b3:8f:51:f7:f0:a8:7a:
95:ee:5f:34:89:82:9c:8e:db:18:7c:0b:dc:28:b8:
4d:9c:84:47:a0:c3:68:b4:60:e7:31:46:8d:04:5e:
79:c8:3a:e1:e9:5b:5b:11:6c:03:17:45:0c:19:6d:
63:0c:db:27:02:ef:ee:b2:d2:02:e3:8b:c9:19:fd:
dc:0e:b8:1d:e7:7f:70:ed:41:6c:99:06:92:46:eb:
61:7d:1d:ab:b5:00:9a:4b:e7:fb:57:06:97:a5:c0:
92:89:28:a5:4d:27:a7:d5:eb:5a:55:23:ec:e5:7d:
ae:49:92:70:51:d4:ad:40:06:cd:4d:52:0a:ef:44:
be:41:1a:40:cf:13:7c:af:0c:86:c4:cc:d1:c8:e5:
c5:c4:86:96:e0:64:6e:3d:e0:7d:af:07:5e:58:f5:
51:a5:a0:38:db:41:9f:2b:89:a7:e1:03:91:eb:ab:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:E0:8F:AF:52:03:00:9D:EC:FB:44:6E:FB:7C:82:03:2C:0F:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8BTgj69SAwCd7PtEbvt8ggMsD7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:1d:d7:17:c9:21:cf:d8:98:b7:96:6d:0d:58:f3:9e:c9:2e:
38:c3:2f:ca:40:70:f7:d5:0a:e0:c4:46:92:c4:a7:76:2e:28:
a1:25:39:67:5c:b8:35:1f:4a:bf:3d:9b:13:e5:80:1a:92:18:
ef:96:57:bd:73:38:e5:d7:11:75:11:1e:a7:df:aa:55:9e:9d:
d2:96:3d:8f:f4:69:ee:39:5e:47:61:1b:fa:9b:ab:68:ca:6d:
57:44:42:c8:55:f5:f0:86:57:18:5e:7b:68:67:0f:4b:15:73:
be:05:61:99:b1:84:3c:ca:07:67:5e:ef:c1:99:32:a1:b7:8b:
df:bc:41:e5:d4:77:2e:9b:66:c7:ec:32:47:41:ce:39:0b:8e:
4e:9f:76:01:63:71:73:c4:a0:7f:ea:60:99:95:dc:37:c7:cc:
55:2f:df:24:a5:9d:bb:f5:6f:6a:b0:f1:8b:e1:b6:b2:0a:37:
e9:28:5b:66:6c:ed:8d:1e:c5:da:b8:e9:85:fa:e1:47:6d:54:
57:aa:e0:a7:a6:f4:58:18:fa:e7:cd:3f:ac:ac:9b:eb:90:cb:
2b:ad:9f:18:4c:3c:a3:05:42:54:62:8e:bf:48:3d:d8:42:5b:
4d:0f:ca:c8:a7:56:9f:85:1f:2d:c2:01:a0:9d:bd:2c:e6:d7:
fe:19:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:59:09 2025 by rpki-client