Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x8PkI_-F4lfm2FVG-ZS9dQj5sv4.roa
File: x8PkI_-F4lfm2FVG-ZS9dQj5sv4.roa (raw, json)
Hash identifier: 58tNPWdyLHWiJN/RNp7Et56W6BkYrpEws175o1d+xcY=
Subject key identifier: C7:C3:E4:23:FF:85:E2:57:E6:D8:55:46:F9:94:BD:75:08:F9:B2:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D51A444DA3BF21915903DA5A7C36D617
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x8PkI_-F4lfm2FVG-ZS9dQj5sv4.roa
Signing time: Sun 12 Mar 2023 09:15:13 +0000
ROA not before: Sun 12 Mar 2023 09:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:1a:44:4d:a3:bf:21:91:59:03:da:5a:7c:36:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 09:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7c3e423ff85e257e6d85546f994bd7508f9b2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:ad:92:bd:63:5f:af:ba:1c:5c:01:fb:c8:
fd:9b:cd:c1:0d:02:64:39:bc:f7:9e:25:4e:69:89:
b4:40:6d:f6:18:d0:be:79:8b:1c:cf:74:01:9b:db:
08:7d:a3:b3:a3:6f:5f:a6:76:1c:1e:b9:0a:f0:9c:
49:77:28:58:a8:2b:eb:0a:40:65:fe:de:59:39:8b:
c9:2e:74:5d:06:8e:21:d6:07:dc:02:45:3c:26:64:
e0:fe:c3:c4:5b:7a:77:1d:2b:62:db:37:10:8d:ae:
d9:8d:6b:be:b9:84:c8:5e:f9:30:07:58:8b:f9:e5:
a9:5e:24:db:9f:e4:fc:78:bd:ce:24:b6:f4:af:73:
f1:74:ad:4b:80:80:12:89:f6:3a:5a:96:07:d0:c2:
1f:c7:33:2d:ba:93:a5:af:4f:ae:64:f3:d9:d0:67:
ae:ac:15:ce:b9:98:18:29:cb:01:f7:d6:3e:27:a0:
21:70:e4:7f:cb:60:a6:0d:e0:fa:be:8e:e6:40:ec:
61:91:a0:d7:93:b1:9b:39:cd:7f:f0:d5:75:f7:c9:
e8:ca:e8:74:bc:e4:70:42:40:81:44:b0:a5:4d:33:
ec:dd:e4:56:05:c7:5c:cf:82:97:d0:8b:e1:bd:50:
b1:30:41:25:b0:c3:ae:69:f2:bc:f7:07:83:71:6b:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C3:E4:23:FF:85:E2:57:E6:D8:55:46:F9:94:BD:75:08:F9:B2:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x8PkI_-F4lfm2FVG-ZS9dQj5sv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:fd:dc:e4:c4:30:5e:50:d7:cd:fd:34:45:79:e9:a1:15:82:
28:fd:30:fd:c4:bc:b9:aa:f0:c5:e4:07:11:58:11:cd:90:6b:
3e:6e:ea:84:36:7c:29:39:9b:9d:94:b8:38:0b:a5:8e:a8:12:
cf:eb:f4:e6:05:ce:62:4a:de:09:fe:5a:9e:9a:0f:89:cf:8a:
65:cb:f6:b1:ab:2e:40:88:98:b3:26:eb:9b:07:20:e3:b9:df:
2e:47:0e:ab:18:1e:e9:d3:6d:bb:2d:92:9a:01:0c:eb:e4:ba:
d5:94:93:5c:7f:a4:31:ef:0b:99:e2:bd:ea:48:8f:de:9e:4c:
75:6e:39:f5:a2:3b:3e:e0:e6:4c:c6:b0:8f:93:c2:c9:bd:2b:
a3:90:7f:3e:76:47:ec:dc:58:92:97:e6:77:ce:b2:6c:2a:e8:
83:56:d7:1d:a7:9c:28:32:8d:63:d5:c5:b2:08:0d:ab:14:ad:
0d:55:36:ef:af:0d:c1:70:84:44:1f:9a:e1:5c:5b:00:d0:b5:
74:ad:94:40:49:8d:09:df:cd:42:24:28:90:8e:d5:42:7c:37:
8d:e3:7a:7a:c9:99:b2:25:87:0e:ea:c2:76:20:f3:b7:4b:d3:
f4:9d:58:97:68:45:52:81:a5:47:8d:e5:b8:64:c4:c8:4f:8d:
2d:47:0b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:55:43 2025 by rpki-client