Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ilu6jTbI9JMLegB-bu8E9hBmhc.roa
File: 1ilu6jTbI9JMLegB-bu8E9hBmhc.roa (raw, json)
Hash identifier: yzowr9eVeBIVLGg0IcY/y+04Xug6k+0t7IMp1DssaX8=
Subject key identifier: D6:29:6E:EA:34:DB:23:D2:4C:2D:E8:01:F9:BB:BC:13:D8:41:9A:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855EDC6B9DFB9F8737B2609C43A2CF9CA7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ilu6jTbI9JMLegB-bu8E9hBmhc.roa
Signing time: Thu 29 Dec 2022 17:09:41 +0000
ROA not before: Thu 29 Dec 2022 17:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:dc:6b:9d:fb:9f:87:37:b2:60:9c:43:a2:cf:9c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 17:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6296eea34db23d24c2de801f9bbbc13d8419a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:d4:13:77:6e:84:6f:63:fe:67:7b:65:d3:
3c:c3:08:38:ae:0e:61:46:e9:e7:c0:6c:a6:9c:2a:
8c:70:0a:76:db:4f:2d:73:bf:47:46:69:4e:4d:ac:
38:34:4f:55:01:f0:ca:f6:8c:37:9c:3f:0f:95:45:
e5:0c:e4:a3:85:ce:8f:71:b4:ac:bb:74:bd:99:a9:
1d:b6:db:8d:a2:86:f0:0d:fe:29:9d:e1:c6:c5:a5:
8a:bc:bc:f3:3c:f2:fc:d6:62:8f:ba:b2:ae:07:fd:
b9:9e:e7:6a:82:82:bc:6b:06:e4:09:b3:6d:dd:73:
27:eb:80:80:c9:7c:66:5e:82:49:b3:a6:11:b4:43:
07:bc:3b:82:3a:83:2d:76:6c:3b:48:d4:46:9d:1c:
42:c7:ab:58:ec:d1:51:5c:9c:a5:92:f4:42:4f:cf:
df:10:53:9e:b0:cd:86:7a:89:6c:52:dc:f5:12:41:
f0:ac:29:34:0b:f4:53:eb:a0:07:aa:ab:bd:31:ca:
d0:f9:c1:85:69:10:f6:51:4c:e8:5c:86:28:de:89:
4e:b0:a9:da:ee:30:7b:23:cd:40:ff:00:96:9e:ac:
3e:c2:13:8c:5e:e6:6e:67:a3:b9:5b:b9:bc:22:31:
99:83:c3:9f:1c:1a:69:a3:07:76:3f:06:e4:16:05:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:29:6E:EA:34:DB:23:D2:4C:2D:E8:01:F9:BB:BC:13:D8:41:9A:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ilu6jTbI9JMLegB-bu8E9hBmhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:7b:3e:d7:31:47:5f:38:f1:e1:09:9d:54:81:a0:4b:b6:95:
b1:38:54:ca:ba:22:05:2c:4a:18:02:12:41:5e:bd:af:5b:8a:
b8:26:2b:9e:8b:08:75:5c:41:6b:58:8b:6b:58:1d:94:67:89:
29:f0:02:b6:7f:a6:fb:00:a3:d3:6d:07:e9:91:83:45:38:c4:
46:8e:b8:9d:90:51:03:a5:31:df:80:d2:3c:c5:06:49:77:88:
03:43:ed:1e:ee:02:16:af:09:1a:08:45:d7:eb:67:3c:b5:c8:
58:24:d7:1d:d4:46:f0:37:1b:10:66:41:0f:1c:f1:d9:d1:f6:
6d:17:ba:46:1e:30:61:53:85:86:bd:fe:ae:96:0e:0c:e8:b2:
c3:73:0b:af:73:e4:bd:4f:e2:fe:60:30:d2:67:f9:19:f5:a1:
73:0b:d5:ec:1b:9d:d3:86:0f:57:10:0e:7f:d5:74:47:8c:c3:
24:78:e5:60:59:2f:f8:33:a8:3e:c3:6f:b2:0e:95:b8:ee:68:
1c:60:77:80:8b:b4:c5:30:67:75:e8:81:da:f0:b3:93:42:ec:
8b:fa:63:66:cc:c0:d2:ef:e8:dd:da:c8:6c:2e:a4:a3:dc:39:
65:c7:82:aa:4d:45:7c:ba:9d:16:f7:44:42:60:72:dc:d5:16:
72:08:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:14:15 2025 by rpki-client