Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cSzgBPFkZWkBwt9oK5jH0vzXtE.roa
File: 8cSzgBPFkZWkBwt9oK5jH0vzXtE.roa (raw, json)
Hash identifier: OrieXQiJKTON/yySZJ+4VMUlYE3ZtqOCDsaEic9P/AY=
Subject key identifier: F1:C4:B3:80:13:C5:91:95:A4:07:0B:7D:A0:AE:63:1F:4B:F3:5E:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184FC5FFF3DE98B3B653C90417B3D05B5AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cSzgBPFkZWkBwt9oK5jH0vzXtE.roa
Signing time: Sat 10 Dec 2022 14:11:00 +0000
ROA not before: Sat 10 Dec 2022 14:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fc:5f:ff:3d:e9:8b:3b:65:3c:90:41:7b:3d:05:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 10 14:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1c4b38013c59195a4070b7da0ae631f4bf35ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:fb:34:e7:27:1c:c4:15:55:ac:fe:31:30:
75:a3:21:3c:fd:61:bb:58:c0:33:fd:ea:aa:6b:4b:
a6:ce:e6:f5:73:aa:3e:e8:83:e9:24:9c:82:6e:1f:
3a:da:38:31:60:4d:3a:ad:d0:46:8f:a9:4c:e7:8a:
6d:bd:e7:16:0d:02:bb:af:e9:34:63:6a:55:6b:95:
78:35:3b:ad:28:a0:6b:60:d4:b1:03:d2:75:3a:d7:
ad:a5:4d:80:5c:6e:1a:fc:f9:be:50:ae:f4:ec:47:
65:dc:12:88:3b:8a:13:8a:7d:c7:ba:4a:64:32:77:
bb:65:60:88:21:08:bd:22:df:78:c0:0b:ed:23:47:
01:ee:8f:bd:e7:8d:a5:9b:a3:89:84:93:67:52:6c:
6a:d3:ce:db:56:fc:fb:ae:d6:ba:1e:0f:36:5a:a6:
86:37:6c:d5:0a:75:ba:e7:c3:bb:a5:d4:af:9a:35:
d3:bd:fc:a7:12:7d:22:db:72:ff:82:92:5c:95:9e:
f4:98:9b:f6:76:86:93:b6:6b:a4:90:69:d9:51:af:
04:a3:1f:1e:3e:c8:fd:0f:ad:2b:2e:e4:62:0a:02:
1f:56:24:bd:65:8c:aa:7e:e8:5b:5b:b6:f7:50:b3:
6b:b9:2f:a4:14:7f:45:1d:17:d2:21:d7:37:a8:4d:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C4:B3:80:13:C5:91:95:A4:07:0B:7D:A0:AE:63:1F:4B:F3:5E:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cSzgBPFkZWkBwt9oK5jH0vzXtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:9f:03:34:09:d1:c3:13:e8:d0:ea:40:30:6b:76:86:96:43:
17:4b:41:1f:0c:cc:28:38:41:6c:42:c2:fa:51:f0:c4:78:4a:
21:18:ea:a5:20:1d:3c:65:15:56:c2:93:45:0f:84:dc:7a:59:
cb:9c:90:dd:81:3c:bb:fd:d4:b8:61:e7:99:2f:9d:46:1e:29:
86:9e:9c:22:0e:c8:3e:cc:23:55:38:d3:df:71:4e:c5:a7:a1:
c3:95:cf:31:81:b1:54:4f:cb:cb:f8:ec:6f:5e:21:37:9c:4d:
eb:24:e4:ed:33:f7:96:6f:a6:aa:56:c5:13:7a:b4:c8:83:c4:
b6:88:e4:a7:2c:5c:5f:8c:90:52:9f:ad:8b:29:20:51:dc:ca:
19:0a:2c:fd:60:38:0d:10:a3:80:03:c5:a4:bc:72:c0:fc:3b:
c0:2b:13:2c:21:5e:fc:d3:f5:e4:dd:9e:e8:2a:d5:19:a4:46:
11:6f:c6:d4:3c:b3:d8:0f:7a:44:92:11:0e:31:90:9f:15:75:
0f:03:c2:61:7b:aa:bc:f1:7d:c6:f8:04:31:92:05:f5:dd:48:
09:98:0f:c9:08:e1:a0:8a:d5:cc:e6:f9:26:32:e3:bd:78:05:
b8:32:5c:c0:4d:36:db:0b:a6:64:60:a1:b8:ab:a7:e3:3f:e6:
a9:0b:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:49:26 2025 by rpki-client