Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8SsL006R5OjBpGcAWbrzZOBBsls.roa
File: 8SsL006R5OjBpGcAWbrzZOBBsls.roa (raw, json)
Hash identifier: du6zh/eN8ombZpVm/H8yzvVYMFiJI5ZpuTF0RP5a/ow=
Subject key identifier: F1:2B:0B:D3:4E:91:E4:E8:C1:A4:67:00:59:BA:F3:64:E0:41:B2:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C2A70DDCE6507B74EF07E596BF27A817
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8SsL006R5OjBpGcAWbrzZOBBsls.roa
Signing time: Wed 08 Mar 2023 19:16:13 +0000
ROA not before: Wed 08 Mar 2023 19:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:a7:0d:dc:e6:50:7b:74:ef:07:e5:96:bf:27:a8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 19:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f12b0bd34e91e4e8c1a4670059baf364e041b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:82:b2:de:3e:c2:3b:f7:0d:ec:a3:b4:c8:
41:37:2c:b5:41:f1:f6:1d:db:1f:39:82:09:f0:33:
1d:a1:3d:28:6c:37:9d:ec:c5:60:0b:04:d1:37:8c:
30:5c:3a:c2:9a:ee:79:24:73:9d:f2:56:f5:23:2e:
be:aa:d1:e0:26:71:1c:0c:1b:b7:6d:69:a3:2a:3b:
90:09:88:16:7e:6a:24:f5:33:64:da:a8:c5:25:3a:
1c:d5:5c:93:03:87:8f:00:56:59:b7:a0:ae:d7:c9:
42:94:44:ea:d7:5a:48:e7:35:e6:f4:b7:83:b3:ba:
74:c6:72:86:8f:2a:48:72:fc:bd:14:ce:ea:23:96:
fb:d7:3b:a1:90:57:fa:29:80:aa:7d:6c:72:87:a8:
0b:6c:9f:41:69:4f:94:a6:92:eb:0e:4a:45:28:83:
ab:68:75:5b:0c:1a:df:e0:ce:84:1b:7d:5c:09:8e:
5a:88:36:76:8d:cf:72:08:99:79:48:81:c7:d2:dc:
c4:d6:ce:87:bd:62:5c:0f:de:0a:2a:6d:db:cd:04:
3b:51:80:93:92:51:14:17:45:38:54:18:6f:56:bd:
0a:46:e1:cd:a3:e1:9e:34:09:c1:97:4a:d1:63:21:
3d:f1:4a:41:83:8a:2a:47:4a:13:c4:a9:46:2a:6b:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2B:0B:D3:4E:91:E4:E8:C1:A4:67:00:59:BA:F3:64:E0:41:B2:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8SsL006R5OjBpGcAWbrzZOBBsls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:5b:65:8a:8d:a5:16:29:03:c0:de:c1:1b:af:4b:bf:b8:79:
df:ef:f2:24:3b:ab:dd:48:4e:6e:cd:01:f5:3d:47:e9:8a:d4:
19:92:50:18:51:2e:fb:6c:ab:84:37:5c:f4:5a:33:16:c6:5b:
61:35:ae:0e:2d:5f:dc:93:95:73:db:bc:45:05:55:2f:55:73:
a3:97:f1:8f:5b:52:b1:37:2a:13:e9:df:3c:1d:8a:1a:6c:a1:
03:66:1f:02:32:56:94:9e:08:5d:e3:d6:32:d4:b2:b8:61:f9:
df:c4:77:c4:fd:20:2b:0e:64:73:9d:73:49:fa:df:2c:6e:14:
87:ee:b1:4b:4f:ce:c7:03:ff:b6:4b:ae:7e:a8:a5:06:1c:04:
28:3d:f7:f4:ed:1c:9c:2f:25:94:87:05:5e:e3:d7:42:6c:4d:
c8:07:4f:18:49:8c:5e:2f:38:02:9d:e7:86:2f:ce:83:ef:ac:
f4:c8:cf:ad:52:c9:37:0f:36:23:24:30:ab:25:8e:b6:55:1a:
a8:25:6f:94:1b:bb:2d:2c:64:06:1c:1b:43:53:be:3c:8b:4c:
a0:65:d0:d7:c3:7a:23:13:ee:05:df:3e:8d:7b:28:fb:8f:c2:
eb:63:e3:41:ed:48:4e:48:8b:cc:66:4d:6e:b0:0b:01:aa:ee:
74:96:a8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:45:25 2025 by rpki-client