Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0IXJDWCYFdOysOM7fPJJw00f1kQ.roa
File: 0IXJDWCYFdOysOM7fPJJw00f1kQ.roa (raw, json)
Hash identifier: J8vsxX9LLAZ7qY2s8LBDHDfvLAjY3wq/6CEtXywhgL8=
Subject key identifier: D0:85:C9:0D:60:98:15:D3:B2:B0:E3:3B:7C:F2:49:C3:4D:1F:D6:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82F02BC8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0IXJDWCYFdOysOM7fPJJw00f1kQ.roa
Signing time: Wed 11 May 2022 01:10:00 +0000
ROA not before: Wed 11 May 2022 01:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:b0a5:741f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196777928 (0x82f02bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 01:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d085c90d609815d3b2b0e33b7cf249c34d1fd644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:d7:4b:c9:54:21:47:1f:94:c2:c6:64:d4:
e2:6e:65:80:86:e0:03:5b:da:81:a3:b5:77:56:93:
b5:42:1e:00:c6:82:a6:49:31:fa:af:d3:25:4e:51:
7f:14:76:87:bb:74:dc:e4:04:34:b2:74:b8:e8:b6:
74:46:1f:4c:cd:2d:b1:a4:8f:6f:e9:e0:53:1f:13:
ca:6a:e0:8e:c2:66:60:fb:d3:d5:f6:02:f3:fd:50:
86:3e:42:f1:3d:ce:fb:e4:0a:b7:a3:be:26:a2:2f:
f0:54:8f:5d:aa:71:80:40:d1:6e:e5:05:9a:0a:7b:
a7:8e:16:a3:34:e0:27:0c:0b:a1:83:dd:cb:aa:12:
6b:e1:bd:e4:47:d7:d0:86:79:81:44:c9:e5:68:2c:
6f:bf:4e:f1:4e:4d:de:eb:38:5f:73:6d:69:60:37:
bc:be:dc:72:75:5c:58:87:f4:dc:52:30:e1:94:4a:
e2:f8:b5:6a:a6:b8:35:00:de:7a:22:d7:9c:89:f1:
fd:7e:92:1f:68:3a:d0:41:a4:21:37:eb:da:88:18:
3c:ac:31:d4:e0:09:0f:5e:bc:90:e3:1a:0e:7e:96:
f1:6f:cf:09:41:2d:18:44:8a:61:5b:f7:d5:9a:a1:
55:d5:18:e6:2a:a2:2f:9b:ae:2e:fb:4e:1b:62:46:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:85:C9:0D:60:98:15:D3:B2:B0:E3:3B:7C:F2:49:C3:4D:1F:D6:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0IXJDWCYFdOysOM7fPJJw00f1kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:b5:ef:26:d8:ea:37:3a:6b:01:97:06:cf:c9:4f:88:a4:77:
6f:73:3c:3b:23:59:37:92:93:bc:d5:00:87:56:6c:d7:d8:ea:
06:69:70:99:97:06:8a:d2:27:64:5d:96:19:22:d1:c8:5e:65:
6f:72:30:19:6b:db:8b:e1:62:dd:b7:08:71:a1:f6:c9:4d:bc:
ea:0e:5b:72:32:2e:d4:b5:cb:ac:75:dc:ab:9c:b9:37:f3:e5:
8b:fa:5c:b4:c9:5e:8d:9b:c4:89:ef:e0:52:c2:b4:ec:a8:a5:
32:13:62:0d:dc:c6:9d:48:93:89:99:ba:4a:ad:92:b6:88:5a:
2f:9b:84:35:43:2b:d3:d5:ba:a0:54:b7:74:11:fa:33:ce:27:
38:42:59:37:e7:2d:00:6d:5a:27:1d:f8:01:48:32:21:c9:83:
2e:6a:1d:74:65:46:67:69:60:3e:1e:21:9c:34:88:f3:da:b5:
8d:6e:94:fc:99:59:72:2a:46:10:2b:29:72:1c:0b:a9:41:15:
22:cd:49:a1:10:de:36:9e:1b:32:c3:cf:a4:15:41:35:c7:32:
2b:f3:f0:64:af:e4:7c:ae:91:02:13:38:37:bf:98:f2:7b:15:
92:94:9f:0c:ab:9d:7e:90:4a:7a:84:53:01:6e:a3:f9:cc:59:
54:14:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:06:17 2025 by rpki-client