Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8c4pdIDYOzDYuNWZrMuHjm2sj7o.roa
File: 8c4pdIDYOzDYuNWZrMuHjm2sj7o.roa (raw, json)
Hash identifier: 9AYBUwtWKiHwYlUkn/Ms+E2+TzxbEJ/w2b9lUk0HQ6I=
Subject key identifier: F1:CE:29:74:80:D8:3B:30:D8:B8:D5:99:AC:CB:87:8E:6D:AC:8F:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018855D2493B88BF5B83421A2F185F4CC364
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8c4pdIDYOzDYuNWZrMuHjm2sj7o.roa
Signing time: Fri 26 May 2023 02:10:24 +0000
ROA not before: Fri 26 May 2023 02:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:55:d2:49:3b:88:bf:5b:83:42:1a:2f:18:5f:4c:c3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 02:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1ce297480d83b30d8b8d599accb878e6dac8fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:11:38:54:72:98:83:e0:26:4a:15:3f:6b:
26:21:79:aa:c1:75:5a:f7:65:ac:a0:67:50:d1:fb:
fb:10:a2:ab:bc:35:d3:8b:6d:03:6c:25:0e:d8:f7:
ee:9e:9d:7d:11:46:8c:d0:23:76:b2:20:14:a9:49:
46:7f:e3:d1:be:6b:c0:02:36:68:fa:a9:66:bb:89:
49:7d:e4:96:a8:2d:4d:66:36:99:a8:81:8a:a1:c5:
66:c0:69:4f:b7:01:e4:0a:85:79:32:9b:ce:e8:f1:
ab:dd:a8:5e:82:8b:5c:ae:9b:80:46:1a:f1:f0:b8:
46:47:76:3f:35:ca:e0:5d:03:48:17:a0:5b:5d:7e:
6d:dc:99:27:04:21:29:3e:68:a7:19:e2:26:47:35:
c3:55:06:fb:fc:80:0e:a8:78:56:ae:ea:75:d7:18:
91:95:dd:7a:85:cd:71:28:e8:f2:7b:ee:9d:5a:9e:
7d:29:08:92:92:a8:e0:a1:d8:0e:1d:1e:73:8b:a5:
e9:a5:1a:af:09:d0:0b:35:ea:f4:d9:8d:11:7a:25:
58:86:2b:b8:bb:87:62:ce:24:12:10:fe:ac:7f:32:
f3:4d:b5:20:5f:b9:3d:20:c4:aa:2a:db:eb:6f:54:
87:ea:c5:09:54:2f:4c:33:2c:da:ea:fa:64:41:c6:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:29:74:80:D8:3B:30:D8:B8:D5:99:AC:CB:87:8E:6D:AC:8F:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8c4pdIDYOzDYuNWZrMuHjm2sj7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:7d:c0:ce:b9:fe:74:47:bc:8b:6d:49:40:55:4c:0d:8f:0b:
d7:f5:7b:a9:7c:3d:36:64:19:e9:9a:47:eb:f6:cf:93:3d:5f:
84:c5:2b:ee:80:3a:50:57:13:a5:0e:63:34:e9:a2:d0:26:01:
3b:64:5c:47:53:9b:e7:45:b1:4f:a8:e4:64:31:4c:40:40:f7:
e4:e2:65:74:4d:82:76:da:e4:f2:5c:12:8d:14:29:84:6b:51:
d6:45:7f:ff:15:ae:41:f9:14:d3:8a:ee:59:50:a3:40:71:4b:
7e:fa:0d:59:91:04:63:e5:83:7e:06:ed:05:e6:95:87:18:32:
9c:e1:f6:55:a0:eb:ec:1b:29:56:1a:23:ca:41:9c:6a:6d:5e:
e1:32:4e:a8:5a:1e:5e:cf:a1:6a:d5:a9:79:ff:1b:2c:96:5f:
2c:f9:82:a4:67:0b:d8:97:90:e0:6f:b5:a8:20:d6:39:3e:e1:
27:a2:2b:fb:15:43:99:53:d8:39:3b:8a:35:8c:c3:89:c6:89:
87:82:31:fc:bc:3c:7c:ad:dd:bd:e3:5e:24:df:e9:3c:54:8a:
51:25:de:cf:15:18:8e:96:cf:0a:2a:f0:40:4a:2a:3e:ae:76:
87:9a:7a:b4:13:dd:0f:8c:3b:7e:fa:33:c0:ae:6c:0a:e2:97:
82:7d:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:05 2025 by rpki-client