Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ow8sPLfownShgsft9AdntHF-fo.roa
File: _ow8sPLfownShgsft9AdntHF-fo.roa (raw, json)
Hash identifier: s+QH51+xS2dIkuCkQt2q/VbM3y8mZvqJ0S9beMSPyTE=
Subject key identifier: FE:8C:3C:B0:F2:DF:A3:09:D2:86:0B:1F:B7:D0:1D:9E:D1:C5:F9:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184786CC0D6E5DD6874ABA4B2B7E20A3CD3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ow8sPLfownShgsft9AdntHF-fo.roa
Signing time: Mon 14 Nov 2022 23:15:03 +0000
ROA not before: Mon 14 Nov 2022 23:15:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:78:6c:c0:d6:e5:dd:68:74:ab:a4:b2:b7:e2:0a:3c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 14 23:15:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe8c3cb0f2dfa309d2860b1fb7d01d9ed1c5f9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:c2:22:8b:73:9d:e0:7f:70:3a:5b:f2:b1:
d5:3f:21:32:d8:52:98:0e:21:ea:34:b7:d6:2e:f0:
a3:a1:de:de:86:6d:b5:7c:ea:e7:7f:d7:95:bb:5d:
ff:ce:31:1b:6e:f4:1e:66:82:e3:c4:b6:69:e9:ee:
4d:e8:1f:6e:73:5a:ca:1b:bc:5f:8a:d9:be:13:c3:
25:41:ce:cb:fa:5a:61:f9:0c:28:80:62:7e:b6:4d:
65:f6:3e:94:44:1a:9f:25:73:2d:ec:d2:9e:ff:64:
97:11:90:d5:e9:2f:12:31:3a:29:a3:76:5d:1a:cd:
f4:c3:1c:7d:bf:b1:36:67:2a:08:8c:b1:6a:4b:a8:
9c:b0:92:b5:a8:6d:84:b0:56:45:b0:5e:3a:bd:e2:
5d:5b:2d:18:3f:7a:65:45:67:a9:0f:f0:1f:18:28:
84:5e:fb:34:9e:39:62:54:08:bd:42:42:b9:b0:70:
c2:60:55:cf:d3:fc:5f:b6:01:36:c4:bc:38:9d:82:
f9:37:44:88:b5:8e:bf:4b:a4:8f:f3:72:8c:d3:41:
a4:bb:02:95:d9:42:71:ba:f7:89:c3:ea:37:16:6a:
40:fe:03:11:0e:f1:2e:bf:a7:da:d9:89:4a:b8:ee:
45:3e:9b:c1:4c:eb:9e:4d:77:16:99:4f:f9:f2:30:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:3C:B0:F2:DF:A3:09:D2:86:0B:1F:B7:D0:1D:9E:D1:C5:F9:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ow8sPLfownShgsft9AdntHF-fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:fa:0f:69:9d:39:a7:0f:13:23:2c:a0:06:1f:6f:6c:36:68:
05:03:cd:a5:70:18:44:8b:4b:76:4f:6f:59:93:c6:88:d9:50:
ff:f6:b0:be:93:74:52:f2:3e:35:8e:5d:8f:de:2f:e7:09:8f:
48:90:39:96:0d:c3:f5:1c:f0:21:35:82:fa:b4:bd:a2:18:80:
f8:b5:a6:02:d6:f2:98:ec:56:a9:f2:5b:9f:f3:42:46:f8:06:
9d:66:cf:97:54:e5:13:6a:fd:93:da:2b:a3:9c:b6:7c:ef:12:
f7:1f:03:eb:c2:4a:9e:0a:c7:eb:b1:6d:5f:82:e5:57:52:f6:
e2:39:8c:c2:97:84:1f:90:5d:c8:9d:78:5e:f0:91:db:8e:d1:
2a:a3:f5:40:e4:bf:d0:4e:a8:9f:42:12:c4:bf:c5:a4:a5:d4:
72:07:ec:c8:f3:a6:66:a4:8a:3f:28:df:38:34:a9:b0:27:ac:
3c:45:72:6d:71:72:75:07:e4:b3:4d:6e:21:21:de:ef:9e:6e:
71:19:61:93:58:98:e6:c6:f4:c4:ba:bc:9d:9a:c2:43:ea:b5:
3f:02:6d:72:ad:50:7f:1e:ee:78:08:19:6c:37:bc:7e:d8:8e:
39:e0:59:bc:da:b1:5a:fc:9b:6b:6b:7d:e6:eb:c2:d2:e1:9f:
42:d3:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:30 2025 by rpki-client