Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8TpOUyZ_omKp8vlEZ0lblaaHjMc.roa
File: 8TpOUyZ_omKp8vlEZ0lblaaHjMc.roa (raw, json)
Hash identifier: YD56tIwWtY4P7OHVp5gWY+lrHo0gsPX8uZ2bkDpQHFg=
Subject key identifier: F1:3A:4E:53:26:7F:A2:62:A9:F2:F9:44:67:49:5B:95:A6:87:8C:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C2657E17C3200CA4ADA50A18C0E13A07
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8TpOUyZ_omKp8vlEZ0lblaaHjMc.roa
Signing time: Fri 04 Aug 2023 21:12:58 +0000
ROA not before: Fri 04 Aug 2023 21:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c2:65:7e:17:c3:20:0c:a4:ad:a5:0a:18:c0:e1:3a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 21:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f13a4e53267fa262a9f2f94467495b95a6878cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:c0:21:f8:24:3a:65:81:95:1f:eb:18:a8:
72:b6:f2:23:da:4a:ec:b8:d8:07:06:7b:3a:e2:31:
04:b9:cd:8d:27:ad:31:ba:25:e6:5c:88:04:50:0d:
9e:ea:05:72:6d:98:91:c9:72:c1:ff:a6:2d:c8:3e:
9b:59:c2:51:15:dc:e5:78:ce:5a:7d:e3:ba:93:f8:
e4:3f:02:85:6d:cb:34:51:d0:e1:e2:ac:62:bd:60:
eb:f1:bf:a4:d6:36:5d:91:46:8a:10:00:a5:b8:18:
8c:0e:a7:40:62:b0:1a:b2:50:74:e6:8e:4d:d8:78:
35:db:40:c1:93:27:54:0f:53:e4:90:65:46:c9:41:
4c:8b:78:8f:62:f9:76:56:7d:fc:6f:bb:5c:7e:a2:
da:2e:1b:08:ce:eb:6b:92:b1:3d:a5:82:2f:f9:cd:
30:63:05:fa:7d:ff:c2:a3:40:e8:bf:f3:26:1c:5e:
96:0c:6f:3e:df:6a:46:08:3f:c5:e8:f9:db:bb:3d:
a6:cd:d0:02:77:2f:ff:e6:71:86:46:1c:4e:08:8d:
69:ca:0d:5e:14:99:f8:ea:48:5c:7e:c7:36:e1:b5:
a3:52:e9:ec:0b:08:94:36:f6:0a:10:36:61:85:7a:
39:aa:87:58:2d:58:5f:8f:8f:50:04:c1:f5:b2:77:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:4E:53:26:7F:A2:62:A9:F2:F9:44:67:49:5B:95:A6:87:8C:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8TpOUyZ_omKp8vlEZ0lblaaHjMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:c4:58:04:61:d8:27:ce:83:8d:51:d8:29:c3:6b:74:c4:49:
03:81:e2:d7:10:9b:a3:d2:66:57:45:3c:a4:db:19:38:9a:b3:
c4:89:bd:2b:ea:88:a3:93:b0:0a:89:ad:5f:50:39:ef:9d:b1:
3f:26:cd:69:fb:f8:07:25:7a:ea:65:cf:84:d6:5d:71:6e:85:
ab:f9:a6:71:c0:39:65:ac:ff:76:83:e8:f7:a2:8a:72:93:e7:
0e:67:6c:8b:6a:fd:42:da:ab:9c:3a:4b:80:40:75:fb:a7:42:
5f:4d:cc:29:94:62:55:8e:ca:60:ef:db:1f:6c:f5:43:3f:e9:
4b:e1:1e:c8:43:e3:1a:98:b4:f6:c5:b1:fd:7a:b0:dd:f8:02:
93:af:32:33:ca:74:89:73:7c:44:99:85:37:9c:fc:e5:0a:f0:
4f:1c:4b:df:b7:23:c6:13:f8:78:88:15:fb:31:78:66:1a:87:
67:eb:05:29:97:77:87:81:3f:89:08:b4:a2:6a:5d:b2:ac:5e:
14:39:32:bc:00:f8:dc:9e:ef:04:cd:b7:b1:55:b1:ec:8a:bd:
f0:2f:aa:83:a0:d5:a7:82:9f:8a:60:65:48:2f:bf:b9:57:22:
3f:08:e6:b4:c6:e1:14:69:a9:34:1e:0f:ab:20:09:ac:d7:a3:
58:0a:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:26:21 2025 by rpki-client