Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RXHG3q07Qy2uRwqe6znzHn9DwA.roa
File: 8RXHG3q07Qy2uRwqe6znzHn9DwA.roa (raw, json)
Hash identifier: KnLdr/vg7EXUJJ+Z3s1M+aI/rn2VpB3f9QlSAgfVKbs=
Subject key identifier: F1:15:C7:1B:7A:B4:ED:0C:B6:B9:1C:2A:7B:AC:E7:CC:79:FD:0F:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F5B575D6A37AFEDCD3045E1993B9A071
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RXHG3q07Qy2uRwqe6znzHn9DwA.roa
Signing time: Sat 28 Jan 2023 00:09:48 +0000
ROA not before: Sat 28 Jan 2023 00:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f5:b5:75:d6:a3:7a:fe:dc:d3:04:5e:19:93:b9:a0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 28 00:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f115c71b7ab4ed0cb6b91c2a7bace7cc79fd0f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:54:2e:c5:1c:5d:e3:07:1c:f9:04:0c:de:06:
e8:d9:d3:29:fb:cc:a9:da:76:6e:5f:59:22:89:09:
9c:0b:f1:b1:6e:1d:1e:49:0e:24:10:0c:32:b7:62:
f6:08:ab:84:1a:35:46:22:d5:c5:6b:25:b5:2e:fa:
0e:e6:c8:c4:9d:b2:b8:46:56:c9:23:ca:0b:c2:83:
2b:86:74:f1:34:47:d5:9f:d6:05:8c:3d:dd:d3:5e:
20:84:76:33:34:ee:73:7d:02:b0:4c:7a:9d:7f:8a:
e8:06:19:35:ec:06:86:5b:74:51:d0:df:b7:f8:ce:
35:f4:2d:67:9a:aa:cf:04:c5:fb:36:8f:ca:85:92:
1f:81:36:17:0a:6a:4d:aa:07:b0:92:bf:6b:5c:08:
39:df:c6:37:0a:5d:a7:b4:70:f8:80:20:1e:32:ce:
50:23:78:a7:c9:88:82:57:74:88:f1:95:86:a5:c3:
e8:43:01:62:aa:fb:e3:4f:86:74:09:58:a4:cf:31:
1a:d0:d0:af:e3:ea:ec:8c:f3:6a:04:ac:c4:14:c8:
62:ee:9b:64:ba:1d:0e:bb:fe:74:81:23:78:91:f2:
af:f5:09:4c:ef:d3:c8:51:2d:17:ad:8c:c1:0e:b9:
fc:69:da:2d:de:27:47:7d:b1:0c:f7:7a:05:7f:18:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:C7:1B:7A:B4:ED:0C:B6:B9:1C:2A:7B:AC:E7:CC:79:FD:0F:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RXHG3q07Qy2uRwqe6znzHn9DwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:85:3f:9d:60:9a:41:86:1c:ee:4f:bb:14:98:75:3d:6f:40:
7b:55:1a:e8:5a:b6:ef:a6:a3:9e:d6:0b:5b:dc:af:b9:24:fe:
2b:c6:4f:61:ef:1b:40:2f:11:cc:6a:63:18:fa:35:53:1a:59:
d1:cb:9e:15:e0:1c:db:ff:2f:5e:17:09:cc:d6:ca:19:dd:59:
ba:03:22:54:2b:17:5c:1e:e0:cb:85:a9:9c:13:a8:74:88:97:
fa:78:13:f2:91:b2:d3:f0:15:94:24:51:7d:28:06:3d:a5:70:
80:f2:3c:f3:aa:74:d9:6a:ce:df:d4:c1:db:80:50:d5:9d:1d:
ec:60:e4:62:df:6c:f1:5b:16:2d:bc:8f:58:f0:39:70:d9:dc:
21:52:48:f3:54:12:fd:72:d7:5c:f8:39:dd:1a:d1:74:38:c4:
fb:7d:10:09:e7:be:16:24:4f:f2:38:d1:5e:07:38:bd:93:83:
5b:1c:58:b5:32:04:c3:dc:73:b7:92:16:89:11:fe:39:66:8e:
55:94:6c:85:68:7c:da:50:22:8c:81:86:3c:46:79:86:f4:be:
fc:31:cf:f2:60:f7:28:bc:52:8d:38:f1:0d:22:16:b1:82:9e:
8e:61:65:75:58:cc:c5:be:60:dc:58:79:88:1b:eb:d2:2c:f6:
bc:d9:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:52:20 2025 by rpki-client