Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ii_357kde9aaYAEMRtxxj2tBCA.roa
File: 1ii_357kde9aaYAEMRtxxj2tBCA.roa (raw, json)
Hash identifier: /QolX6O8XHHW8YzGwpTyB2IlWkeKItzjytqEJpqIQaU=
Subject key identifier: D6:28:BF:DF:9E:E4:75:EF:5A:69:80:04:31:1B:71:C6:3D:AD:04:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BDACFDABFA36D9640CBC022A6BEE4E85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ii_357kde9aaYAEMRtxxj2tBCA.roa
Signing time: Thu 03 Aug 2023 23:12:58 +0000
ROA not before: Thu 03 Aug 2023 23:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:ac:fd:ab:fa:36:d9:64:0c:bc:02:2a:6b:ee:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 23:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d628bfdf9ee475ef5a698004311b71c63dad0420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:f0:72:33:a0:dc:2c:ee:9e:38:14:31:91:
02:a9:7d:44:88:c5:65:2f:19:be:a9:f6:e0:9f:c0:
61:a7:55:b1:e3:a2:27:0e:47:f1:3b:5a:01:33:af:
30:ee:78:a5:1c:34:fb:d3:d3:40:7a:22:0c:e3:a0:
00:03:85:9b:27:49:77:4a:c8:4b:8b:8a:4c:ee:98:
0a:4c:c0:4b:1c:3b:c6:94:89:2c:14:27:78:df:4a:
1f:5c:f9:85:c6:08:ad:8c:a0:7a:04:95:1f:0a:ab:
86:9e:34:0c:c7:eb:cc:4b:30:1d:58:df:bd:17:79:
62:99:ae:87:cc:84:5e:b5:22:63:e6:3b:99:eb:a7:
fe:a2:c4:f9:d8:8b:3b:8b:03:01:e9:74:2e:13:fd:
3c:2e:ce:d5:b3:a3:9b:1f:31:c6:af:1c:a6:d8:7d:
72:7f:fb:aa:9e:60:10:16:41:9a:bd:d6:11:68:c0:
c8:88:04:c8:49:53:f6:55:12:ec:44:7e:6f:bf:9f:
31:4d:23:86:1c:ee:a6:df:dc:71:2f:b8:cb:5f:ef:
9d:72:f5:39:a9:85:a0:a6:19:77:1d:1f:69:de:35:
dc:c8:c1:6f:33:92:10:2b:a8:1c:9b:39:0c:31:16:
cb:2e:91:de:0b:5e:54:cf:98:1e:e0:65:89:b2:40:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:28:BF:DF:9E:E4:75:EF:5A:69:80:04:31:1B:71:C6:3D:AD:04:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ii_357kde9aaYAEMRtxxj2tBCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:ab:ea:4e:f0:5a:1c:5f:10:ac:81:06:71:46:80:85:a4:4d:
4a:f9:8d:bb:45:82:d5:98:00:2a:06:4f:e9:22:82:26:c1:c8:
80:84:23:8e:4f:f4:1f:30:53:35:19:85:a6:7e:71:07:1d:a9:
85:53:e7:c8:af:4d:0f:e0:86:d7:66:af:ee:8b:14:09:55:12:
65:9b:0d:cc:ad:c5:43:12:d5:8d:aa:b6:1c:a6:86:54:27:87:
0a:0b:aa:7b:6e:19:2c:89:e8:08:b8:68:67:01:da:9a:c5:7a:
a5:dd:5e:00:e3:05:49:e9:36:74:64:c8:97:01:bc:16:37:c4:
b4:95:11:59:57:9c:da:16:a4:d1:7d:cc:3d:a1:ca:4a:a9:c9:
42:92:68:f5:77:5a:a5:47:8a:07:64:4a:3f:4d:30:ca:14:ff:
3f:2f:ea:65:ee:ed:e9:41:1e:f8:45:aa:15:69:f3:15:64:c1:
f9:6c:72:a8:44:4a:14:c7:e0:64:07:7f:43:93:8a:91:d0:0e:
5f:1f:82:ad:65:11:1e:a5:c8:8e:40:19:aa:d4:b4:d9:51:fc:
8f:6e:11:c7:3d:87:37:1c:de:78:9b:03:fa:53:c6:79:56:b9:
89:55:d8:96:22:c2:aa:c7:59:39:e5:d1:64:27:53:bf:27:41:
57:68:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:55 2025 by rpki-client