Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8tYy2jZWzyWv9fvRKfOHCCFpEks.roa
File: 8tYy2jZWzyWv9fvRKfOHCCFpEks.roa (raw, json)
Hash identifier: Ik0Mu6JptMlclA159Fc02bjs3N7EKcCuYDV3D+dZ6n8=
Subject key identifier: F2:D6:32:DA:36:56:CF:25:AF:F5:FB:D1:29:F3:87:08:21:69:12:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D81C379A086BC25D3B1CD7370F4CB3DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8tYy2jZWzyWv9fvRKfOHCCFpEks.roa
Signing time: Sun 12 Mar 2023 23:16:13 +0000
ROA not before: Sun 12 Mar 2023 23:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d8:1c:37:9a:08:6b:c2:5d:3b:1c:d7:37:0f:4c:b3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 23:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2d632da3656cf25aff5fbd129f387082169124b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:b5:a9:fb:26:d4:4a:e2:a5:55:e7:99:f7:
47:db:c9:95:e0:fd:b7:e1:5d:aa:96:3f:16:ed:e6:
98:cb:6a:06:83:cc:d9:c9:47:91:f9:dd:f8:b2:be:
5a:5d:94:3f:fd:34:a1:1b:93:5d:b0:30:b4:10:e0:
5d:8b:7e:7f:11:a9:65:98:66:d6:cc:9e:2e:40:ef:
aa:2b:00:b6:85:1c:bc:d0:f8:7e:0c:a1:29:32:25:
25:1e:4d:11:85:d4:ec:46:ae:9f:a1:e9:73:25:99:
ef:c0:54:09:8a:73:82:d9:df:9f:8b:68:ea:f7:10:
a7:be:71:cd:67:66:62:fd:03:bd:58:dc:99:0f:f2:
b0:3c:b4:3a:8f:ac:f7:9c:d0:a2:8e:b9:95:ab:cf:
c2:34:0d:c3:38:fb:1a:49:be:5e:bd:68:f6:4e:d9:
9b:91:d5:f8:7a:78:a1:d6:51:da:c7:fd:2d:df:a3:
5b:2a:87:7c:2f:e6:4c:2d:bc:64:d9:5a:70:7c:05:
b3:81:7c:f4:eb:43:b5:0a:bc:7b:3e:7c:05:f7:c1:
d3:ea:1c:12:33:22:43:1f:49:d6:54:c6:53:86:6d:
cc:b2:37:60:a0:f1:fb:1e:c3:c1:fd:ac:0b:d7:39:
9c:35:5c:d5:0e:2c:4d:6c:56:e2:c2:1e:1b:d0:c3:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D6:32:DA:36:56:CF:25:AF:F5:FB:D1:29:F3:87:08:21:69:12:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8tYy2jZWzyWv9fvRKfOHCCFpEks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:7b:8e:07:f3:31:91:30:97:82:32:e6:a3:ce:0b:e1:39:a3:
65:ac:87:15:51:26:e1:34:54:40:47:1b:3c:a7:73:5a:0d:6d:
64:4b:92:0b:08:ee:b3:6e:74:ed:3b:c1:a3:6d:6f:21:e1:d1:
64:9d:e8:50:5e:1e:31:f2:ae:54:a3:b2:0d:a2:63:85:0a:c9:
bf:97:a7:28:41:82:8d:d1:51:fd:ad:b1:22:5e:63:97:11:dc:
68:0b:d8:a4:e9:ae:4a:51:34:07:5a:4f:b3:de:1b:ea:07:b5:
1d:94:84:66:8f:29:d8:2b:28:88:d3:c0:b5:2b:c1:3c:5c:84:
fe:5a:81:60:33:e2:8c:b3:62:72:41:95:4f:d8:c1:53:07:ca:
50:dd:9b:f2:85:51:e9:29:71:89:b4:7a:68:08:e5:4a:c6:6d:
38:fe:cf:d1:8d:6b:74:c0:ed:b1:5b:63:b7:49:af:df:5c:73:
73:71:ee:d9:d7:57:0d:85:bc:9d:6c:90:a4:82:15:af:76:28:
a0:fd:f1:4f:76:6a:e2:c9:34:36:70:ff:10:7e:25:3e:2c:51:
2d:ee:29:1d:4e:56:a1:30:4a:97:33:23:65:b6:37:02:ee:90:
8c:e5:74:33:3c:65:e8:3e:9f:af:b4:af:bb:9c:67:67:94:62:
aa:a7:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:18:46 2025 by rpki-client