Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S8kgo6U7dHsgET5XkXbzARlcSnI.roa
File: S8kgo6U7dHsgET5XkXbzARlcSnI.roa (raw, json)
Hash identifier: qKId1+9NHCAuLX6kX2ewMHnd9bVeH7q6TZs1RJD8Xts=
Subject key identifier: 4B:C9:20:A3:A5:3B:74:7B:20:11:3E:57:91:76:F3:01:19:5C:4A:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C6A7E32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S8kgo6U7dHsgET5XkXbzARlcSnI.roa
Signing time: Mon 13 Jun 2022 15:08:44 +0000
ROA not before: Mon 13 Jun 2022 15:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2355789362 (0x8c6a7e32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 15:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bc920a3a53b747b20113e579176f301195c4a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:d3:7b:3d:94:37:24:5a:18:bb:c6:0a:f8:
01:99:ca:d5:8b:99:fc:07:ec:81:7d:7b:50:d3:a8:
1b:22:f8:59:6c:f7:2c:36:0c:1b:3c:cc:fa:c1:4f:
82:da:5c:6e:30:13:50:32:37:4c:44:bb:21:c5:47:
03:2d:cb:cd:5e:86:49:4d:21:86:40:c4:a9:14:3f:
78:7f:08:ab:2d:84:c9:a5:f0:bf:0b:44:fc:6b:f6:
eb:7a:70:76:44:b3:6b:4c:5a:8e:f2:ba:cf:88:5c:
09:9a:4e:eb:c1:fe:22:30:9a:1e:27:8d:18:5b:34:
5b:90:2a:55:00:a5:c6:8d:3f:96:30:72:59:9b:21:
23:ba:3a:a4:a3:0b:34:a1:87:f4:95:be:73:fc:e5:
f9:10:89:d6:c3:68:76:ee:d3:49:2c:96:ca:70:f7:
1c:17:e0:f5:13:2e:cf:23:20:05:b8:3e:3c:96:9f:
fc:b1:d1:ad:42:26:ab:e0:9e:d0:5a:35:18:a7:76:
1c:62:d4:1c:a4:9c:b8:ab:e8:29:3e:56:10:a1:89:
01:9a:dd:24:98:06:68:3f:66:42:45:ba:f5:ae:e5:
0a:fe:7d:c7:9c:64:c9:4c:b8:ff:24:f2:db:36:94:
18:0a:3e:5c:5c:b7:0c:8b:6c:d3:51:43:38:65:5f:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:20:A3:A5:3B:74:7B:20:11:3E:57:91:76:F3:01:19:5C:4A:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S8kgo6U7dHsgET5XkXbzARlcSnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:16:a2:96:e6:a7:43:b6:c4:cf:c5:38:ec:75:12:1d:fa:8a:
23:19:d0:5b:84:0b:74:f4:fe:13:0e:01:ab:cb:c0:c4:c4:26:
d9:33:3f:de:aa:23:ca:67:7d:14:4e:8d:c0:3c:b4:c3:9b:38:
61:59:21:2f:7e:bc:4f:e8:40:8c:39:f8:43:22:f5:67:b4:d7:
e1:ce:5e:72:7d:ee:31:90:a6:fe:0f:e3:c9:b1:4e:2c:08:26:
da:40:0f:26:f8:0d:e2:38:9a:69:38:f3:db:dd:ef:87:fc:da:
6c:5d:cf:0c:c4:a5:cd:5f:43:3e:d7:31:44:b6:ed:ca:f8:2b:
26:f8:11:7e:25:a2:e2:16:ad:78:95:49:7a:05:30:ed:aa:5b:
36:d6:ee:92:bd:93:d3:d2:db:6c:6d:34:5b:c1:5d:c3:e7:63:
a4:f3:86:fc:4d:16:51:e6:67:54:b6:c1:4c:f2:d4:ff:7c:9b:
fe:89:5b:73:88:de:c9:35:6c:a7:e8:fc:c7:48:98:00:27:42:
d3:84:a0:c9:54:a6:0f:94:c4:1e:d8:f6:c2:7c:6a:80:c2:10:
52:9d:d7:e2:4a:90:7f:a8:97:1a:44:e5:87:bd:a4:6e:20:d0:
c7:7b:f6:d6:36:48:56:cb:06:ae:b0:c9:72:8e:71:e1:fd:ea:
30:61:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:21:43 2025 by rpki-client