Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cl1nPTvYMIlwcGrLomJ6-F1e-E.roa
File: 8cl1nPTvYMIlwcGrLomJ6-F1e-E.roa (raw, json)
Hash identifier: Ovv7+TLrs1ebg2WyT2h2TkleQpAfLcyvnP8mwo28p8Q=
Subject key identifier: F1:C9:75:9C:F4:EF:60:C2:25:C1:C1:AB:2E:89:89:EB:E1:75:7B:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A4AB251
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cl1nPTvYMIlwcGrLomJ6-F1e-E.roa
Signing time: Sun 13 Feb 2022 15:09:50 +0000
ROA not before: Sun 13 Feb 2022 15:09:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783280209 (0x6a4ab251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 15:09:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1c9759cf4ef60c225c1c1ab2e8989ebe1757be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c2:89:e3:30:ca:31:dc:31:3e:74:1b:ad:1f:
d6:17:b8:96:42:e5:d3:1e:46:9b:a4:1c:fd:e3:b6:
dd:45:ca:84:46:57:8c:67:90:ab:54:1e:5c:0a:c2:
2e:24:62:06:b3:b9:fb:02:1b:1a:7a:e2:d1:70:14:
1d:48:97:ec:93:21:b3:6e:55:e3:3f:2c:35:38:49:
ef:e9:c9:1f:1f:f4:c6:19:a9:43:16:6f:f3:87:12:
82:2c:45:a6:2d:a0:5c:da:d2:9d:54:75:8a:d5:86:
28:c5:9b:d6:70:6e:4f:9a:be:4b:44:16:db:09:db:
29:5b:e7:99:05:dd:90:c4:00:51:cc:e6:51:0a:a6:
8c:1d:10:a1:35:46:9b:36:fc:c1:d9:da:ee:46:ed:
5e:d4:89:db:4f:51:9a:84:a5:f8:45:22:66:4f:1c:
3c:33:d8:79:5e:2e:f5:2e:dc:0b:1b:be:1b:6c:80:
9a:89:52:00:90:12:23:84:93:3f:f1:b8:e3:b0:00:
63:ee:29:90:20:f9:ae:a8:1a:dd:f2:2b:c1:c5:01:
bc:70:ae:27:6c:e2:c8:90:52:0b:64:94:4d:0b:4d:
7b:32:e3:f9:f8:05:5b:c5:7f:f5:7b:ad:31:b1:dd:
c2:46:63:72:28:0b:5f:e9:a7:40:42:2c:94:05:d1:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C9:75:9C:F4:EF:60:C2:25:C1:C1:AB:2E:89:89:EB:E1:75:7B:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cl1nPTvYMIlwcGrLomJ6-F1e-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:5a:5f:f8:04:84:cd:a0:70:73:31:67:a2:84:c2:75:d5:8a:
52:ef:c3:a7:3a:af:ca:71:3d:66:13:07:7d:50:a4:fe:4b:45:
b9:de:cc:f4:60:f8:ef:26:25:b2:e0:a2:b4:09:15:24:3d:47:
7e:e2:7b:d8:d3:eb:f4:1c:f5:0c:b2:5f:7c:9d:f6:54:58:92:
7f:f2:5d:aa:a5:1a:70:5c:60:ff:fb:9e:b6:33:fd:26:6f:cd:
da:56:b2:37:80:59:ea:a3:0f:97:e6:96:1e:81:40:40:4a:17:
0b:af:f4:a3:fa:99:de:47:27:94:ff:d7:3e:1e:4f:27:5c:c5:
c3:0a:cf:5e:83:96:42:eb:7a:f0:2c:02:db:34:d0:08:4b:7b:
20:a8:fb:7e:2d:07:6d:f0:83:db:21:16:d0:74:d2:e9:d5:a2:
b6:ce:73:5b:93:9a:55:2b:25:fb:ad:cd:63:4a:b4:d0:1d:12:
61:fc:48:c5:b7:c8:4d:de:3a:cd:b6:56:0d:da:49:9d:0d:6e:
76:5f:ff:4d:b8:07:c4:98:de:84:f0:2d:86:e2:7a:3b:6c:7a:
c9:f9:09:d3:ff:97:db:98:a3:cd:fd:fb:16:af:51:71:ff:d2:
db:f2:ce:45:00:ee:f0:09:6c:f5:a7:7b:e1:bf:ce:ec:ff:27:
60:71:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:07:14 2025 by rpki-client