Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a8z8WDe0iZjisuLqyAnQbPkwBxA.roa
File: a8z8WDe0iZjisuLqyAnQbPkwBxA.roa (raw, json)
Hash identifier: YQgs7ecVjzmHKMfEHALpCp0+DVitxwelOb5Qtsd4cUk=
Subject key identifier: 6B:CC:FC:58:37:B4:89:98:E2:B2:E2:EA:C8:09:D0:6C:F9:30:07:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 819C6DB0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a8z8WDe0iZjisuLqyAnQbPkwBxA.roa
Signing time: Fri 06 May 2022 09:11:29 +0000
ROA not before: Fri 06 May 2022 09:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174512560 (0x819c6db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 09:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bccfc5837b48998e2b2e2eac809d06cf9300710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:e6:d2:7b:8d:7b:f8:4b:0d:2b:59:e9:54:
3d:a4:c6:7f:62:2e:69:79:d1:bc:a5:2c:bf:6e:86:
b9:7e:de:f0:6a:79:67:f9:cd:8d:56:20:2e:42:97:
07:00:d8:ab:01:5c:13:3a:08:34:03:e7:91:9a:31:
1e:11:17:0e:b7:24:5b:52:25:d1:c6:9e:84:ca:6f:
23:22:4d:58:15:ed:65:b9:4f:5b:35:e3:a9:5e:25:
3c:12:8d:99:62:7b:cc:03:73:24:e3:25:51:56:8a:
9e:38:04:7e:94:9f:5a:1e:7e:fd:cb:16:a4:17:22:
c5:a7:a2:84:68:90:3e:63:a4:6f:5f:e9:7a:89:08:
c7:ea:45:d1:be:96:4c:c9:38:bc:7a:9c:f3:28:0e:
30:a1:ce:9c:8b:ff:25:3c:be:49:2f:88:09:0e:4c:
4d:ea:c5:82:1e:9d:1a:6f:76:f3:c3:51:64:01:33:
8a:b4:1b:74:c8:cc:6c:58:42:44:78:ff:d3:d7:70:
37:f2:a1:41:17:d5:f5:7a:ed:a5:48:42:e0:a7:f8:
f1:33:0b:5e:29:43:a0:ab:81:0e:27:a0:25:31:51:
6e:d7:e9:67:18:31:b7:2a:a2:8d:df:cf:64:44:b4:
e6:1f:ba:d7:91:2a:3c:bf:63:09:81:c5:37:b0:f6:
14:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:FC:58:37:B4:89:98:E2:B2:E2:EA:C8:09:D0:6C:F9:30:07:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a8z8WDe0iZjisuLqyAnQbPkwBxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:a1:a8:ad:0d:7e:2b:30:bb:9f:7a:62:e7:73:2f:0f:cf:ad:
8b:0f:7e:28:a6:82:13:9d:44:80:41:e9:29:10:91:dc:81:96:
8b:d6:ec:cf:ed:9e:7c:e0:b8:f5:bd:4d:4b:39:77:06:42:2b:
ea:e0:67:c1:78:1f:30:bd:c8:35:b7:f6:60:cd:ce:f4:b1:32:
c9:43:56:40:dd:57:bb:33:6e:2c:de:a6:0a:b5:2d:4a:d7:97:
10:04:cb:19:0d:d2:b7:01:04:14:1f:05:70:16:7c:c3:96:d1:
6c:74:93:d3:3a:ba:1d:22:27:66:4b:b8:ff:2b:b8:91:f9:58:
c1:32:4b:19:67:53:06:46:c8:28:2a:80:f4:65:23:f1:fd:e6:
6c:80:2c:16:11:de:4b:3d:af:42:0c:94:01:d5:83:d2:e6:f5:
81:1e:47:57:6f:64:94:cb:bf:33:fd:21:de:bc:2a:0e:aa:54:
f0:9c:24:38:f1:02:35:11:9f:4f:40:6c:a0:5b:c8:b5:35:52:
06:65:23:bd:75:7e:0f:6e:f8:42:03:80:a8:62:27:92:39:0d:
45:b4:c3:3b:a7:71:fd:be:cb:65:ba:c1:3d:d5:50:d6:45:0b:
bf:0e:5a:1f:d7:32:94:7e:be:0a:b4:19:3b:35:b5:e5:bc:65:
eb:a8:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:22:19 2025 by rpki-client