Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AR8-WOiKPS4nMKpCPgfCKu3OZbA.roa
File: AR8-WOiKPS4nMKpCPgfCKu3OZbA.roa (raw, json)
Hash identifier: kIoYYgHa4qAF508L70Jt2XaCN959Es7TVLHUFCOZ5Xo=
Subject key identifier: 01:1F:3E:58:E8:8A:3D:2E:27:30:AA:42:3E:07:C2:2A:ED:CE:65:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79646FEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AR8-WOiKPS4nMKpCPgfCKu3OZbA.roa
Signing time: Fri 08 Apr 2022 01:09:28 +0000
ROA not before: Fri 08 Apr 2022 01:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036625391 (0x79646fef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 01:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=011f3e58e88a3d2e2730aa423e07c22aedce65b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:51:c3:40:d1:6c:6e:29:2f:62:d6:a9:f0:3d:
5d:64:32:fe:62:1f:1b:cb:50:b0:c7:ca:7c:0b:53:
b5:69:e9:4f:1b:d3:95:c7:76:e1:d5:06:1b:7c:45:
87:87:94:11:88:fe:6e:32:11:1c:d6:6f:5a:81:ed:
bf:6c:7c:92:51:db:c5:49:20:06:0d:9f:c9:a6:19:
a7:b4:32:a7:5b:65:9b:b7:64:5e:25:06:db:95:0f:
31:06:bd:e3:ed:02:de:f9:b0:f3:99:1a:d2:48:65:
8c:4a:d5:46:e2:c2:c3:5a:c0:92:4f:b4:88:fc:69:
56:7f:48:8d:f9:04:3a:c2:be:dc:cd:57:4a:bb:67:
d8:c0:17:de:29:6d:f6:e0:d6:80:18:96:1f:f1:2a:
88:6a:73:8d:41:21:dc:d6:e3:ee:d5:85:91:8b:f6:
3d:db:b5:ae:ac:0d:17:59:37:b1:cf:d7:34:3f:32:
20:10:56:f2:40:ec:b5:6f:ab:14:a1:80:48:60:a3:
2d:50:2d:e4:d5:f7:b7:fa:fd:84:1d:34:8b:9d:c9:
d4:39:32:93:97:c5:c3:b8:86:b7:c9:2b:8d:b6:c2:
49:21:2a:e6:e8:90:18:f6:7d:02:b5:bc:a9:ff:f7:
e0:ac:e9:a3:1b:e3:94:c3:ad:db:a1:a0:de:7c:f4:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1F:3E:58:E8:8A:3D:2E:27:30:AA:42:3E:07:C2:2A:ED:CE:65:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AR8-WOiKPS4nMKpCPgfCKu3OZbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:52:e1:eb:9d:9e:09:a9:88:11:08:cb:35:ef:94:0b:d7:85:
82:73:10:a2:fc:a2:07:85:2a:d9:41:67:2e:0b:b6:49:46:8c:
ef:41:d3:ed:27:e4:18:f2:f6:31:36:80:b7:f1:78:9d:5e:2a:
e4:02:3a:33:37:82:24:37:67:a9:9d:c7:d9:82:e8:f5:6e:c8:
23:9c:73:64:e6:85:ea:2d:6e:d6:f5:63:94:5b:5f:55:85:5e:
88:3e:02:b8:84:4d:6c:de:5c:8e:3a:e3:fb:09:ab:e4:18:81:
39:1b:8b:f4:71:ad:fb:37:4d:4c:10:eb:15:59:62:e9:47:46:
67:d5:a5:b7:ae:f7:3e:b9:ba:7c:f6:d5:48:71:9b:53:e6:47:
ed:5a:b6:8c:cb:9d:0c:89:18:63:db:8e:50:a1:80:a9:13:94:
69:18:83:96:68:10:e6:dd:d7:62:18:3b:42:e7:93:0e:cb:aa:
c6:da:7c:c6:8c:4f:e3:a7:e3:c5:64:3f:8a:7f:bd:e8:a6:40:
6a:58:d8:66:90:d8:f1:dd:66:b7:8b:e8:8d:c1:4e:19:1c:4d:
f2:4f:f4:0a:98:f5:d3:5c:e1:52:72:05:5a:ea:97:a9:4b:ca:
e0:79:c0:a2:25:21:cf:2c:51:a4:a7:54:49:fd:0a:7f:25:b0:
42:06:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:04:01 2025 by rpki-client