Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8C4_I9V3bOjVaA-syvnEAsSnB7s.roa
File: 8C4_I9V3bOjVaA-syvnEAsSnB7s.roa (raw, json)
Hash identifier: 5hz2YrFaFKckDpjsCjYQ0Zgp2eR1HgtUQVFkP3PdC28=
Subject key identifier: F0:2E:3F:23:D5:77:6C:E8:D5:68:0F:AC:CA:F9:C4:02:C4:A7:07:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182DAC0432E0506B1D27F65A646BABD5534
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8C4_I9V3bOjVaA-syvnEAsSnB7s.roa
Signing time: Fri 26 Aug 2022 15:23:29 +0000
ROA not before: Fri 26 Aug 2022 15:23:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:da:c0:43:2e:05:06:b1:d2:7f:65:a6:46:ba:bd:55:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 15:23:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f02e3f23d5776ce8d5680faccaf9c402c4a707bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:4b:7c:70:9c:1b:4d:e0:0d:12:38:91:c7:
d5:a2:8b:15:27:db:9d:d0:45:e8:7f:77:08:c8:e7:
c1:64:ce:62:27:59:61:2e:d9:27:02:1b:c8:9d:b6:
db:c7:a7:4c:e8:60:23:4c:b3:7f:c0:15:cb:ee:bc:
36:bd:57:f2:ef:c0:a2:8f:ce:29:b4:bb:ae:b9:fd:
b2:da:09:ee:d4:7c:ff:eb:e2:c5:7e:78:16:6c:2e:
fa:5a:ec:6b:a4:ed:92:42:f3:64:d7:40:01:57:9a:
75:0a:86:bf:f5:61:68:11:3f:0d:be:6a:61:ad:1d:
cd:84:57:77:fa:8b:b4:33:45:77:90:ce:f7:c2:56:
19:e4:72:9a:b9:d0:8f:fd:42:2b:f5:3b:a6:9b:ba:
ec:39:8b:77:0d:09:ba:68:03:6f:fb:36:f6:7c:51:
a4:fc:0e:56:51:af:ea:ac:ed:d2:ea:c2:92:a6:d3:
6d:a5:d6:b6:24:6d:76:19:3c:04:5c:69:fd:f3:57:
72:ea:39:d0:f0:35:c3:e7:c7:57:b1:a7:85:f2:e8:
22:00:68:d5:54:19:c3:ae:40:8e:5c:cf:e9:12:7c:
89:53:91:87:7b:21:31:45:b8:13:44:35:87:71:16:
bc:17:80:9a:3a:fa:34:d7:0b:63:74:b0:12:8e:f6:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2E:3F:23:D5:77:6C:E8:D5:68:0F:AC:CA:F9:C4:02:C4:A7:07:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8C4_I9V3bOjVaA-syvnEAsSnB7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:5b:5b:99:3b:93:50:a3:c0:fe:72:28:ed:96:a0:49:e2:98:
ef:64:08:9f:d7:6e:9f:ad:ae:95:65:11:83:13:67:f7:2d:62:
bc:45:f9:be:18:9a:bb:db:91:76:91:58:63:be:a9:89:2c:7f:
e8:bb:26:33:a5:85:89:34:0f:23:cf:d0:cb:a4:f7:8c:f4:bf:
56:71:4e:82:ba:54:3a:fa:40:7e:bd:0d:81:60:35:c2:4b:d1:
85:66:79:bf:2b:02:49:ed:d7:40:b3:24:54:76:5d:76:03:2a:
d4:0a:72:a2:bd:d7:7f:ee:64:32:39:7b:cc:78:7e:70:f1:12:
ec:25:ea:e6:93:64:d7:be:c9:d6:17:9f:e3:ed:58:6e:6d:f6:
da:c6:fa:cb:52:02:6e:31:1c:3b:0c:ea:48:30:a8:c0:bf:6f:
6c:7a:3b:26:b0:18:4f:a1:26:ec:87:18:2b:bc:c3:f4:90:e1:
a3:d2:36:d7:66:37:89:1f:f0:28:f0:c0:f5:57:13:de:00:d9:
3d:5c:3c:81:a4:d6:30:18:e3:97:93:86:55:c9:f3:4a:45:85:
56:aa:77:ed:f7:bd:31:c4:9e:d0:22:81:40:fb:46:a5:cc:d4:
19:01:2f:c8:57:4a:1d:9a:b7:9a:73:59:f3:25:32:62:5b:54:
27:de:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:18 2025 by rpki-client