Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ixj_LwfA9XQOFCLguicAL6ZVmw.roa
File: 2ixj_LwfA9XQOFCLguicAL6ZVmw.roa (raw, json)
Hash identifier: lv90ymuPFFEiQtLE7bzaC6MpwYx0TICC3vIGKAtuCvw=
Subject key identifier: DA:2C:63:FC:BC:1F:03:D5:D0:38:50:8B:82:E8:9C:00:BE:99:56:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186996961625B8C47C95DB930E5B06F4980
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ixj_LwfA9XQOFCLguicAL6ZVmw.roa
Signing time: Tue 28 Feb 2023 19:04:25 +0000
ROA not before: Tue 28 Feb 2023 19:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9969:2602/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:69:61:62:5b:8c:47:c9:5d:b9:30:e5:b0:6f:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 19:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da2c63fcbc1f03d5d038508b82e89c00be99566c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:81:03:17:3f:e6:66:49:4d:49:87:35:3a:
55:ea:42:03:12:dd:71:86:bc:9e:88:b3:82:91:1b:
45:8f:4b:20:71:3d:d7:e3:fd:c1:22:17:06:4f:8f:
6b:9c:e1:1a:ed:74:e1:88:9a:4f:ab:0e:e6:d9:52:
d4:2a:58:9f:5f:e9:9b:07:cc:ef:21:f9:5f:5c:b0:
d9:33:9e:d2:75:4d:ee:22:9f:d4:37:42:99:d9:76:
6c:f9:74:7e:bc:7b:48:05:bb:fd:e5:ff:4f:fc:9f:
a7:91:d4:fc:ba:4f:72:57:f9:0b:e0:82:3e:6c:b3:
18:6d:a4:bb:70:63:8e:71:93:4b:1f:8e:f4:a8:db:
f2:1b:7c:3b:ac:28:29:c0:7a:43:c2:39:63:7e:3c:
ca:10:d3:92:f7:a8:7b:bb:4e:80:4e:f0:45:9f:79:
17:75:ad:05:81:e2:00:e1:d7:f3:72:06:1f:1d:99:
ec:52:3f:be:33:0d:82:8d:c1:6d:d2:e5:cb:81:0a:
9c:42:48:27:0c:fd:50:69:a1:71:76:38:13:90:b6:
aa:0f:dc:bf:44:77:a0:d4:d7:a8:6d:43:3a:21:1d:
7a:d4:cd:3b:15:b0:1c:a8:74:80:45:4a:c2:e6:95:
1f:f3:aa:34:de:2b:6a:61:27:96:98:ca:6d:0b:0b:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:63:FC:BC:1F:03:D5:D0:38:50:8B:82:E8:9C:00:BE:99:56:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ixj_LwfA9XQOFCLguicAL6ZVmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:65:2f:54:e5:bd:3c:8a:e4:3d:67:c1:f4:cc:6a:9f:bd:b0:
88:c7:91:b0:e5:ae:3f:06:c3:e9:c8:ab:ff:97:bc:b1:73:e8:
bc:6a:10:13:55:6f:bc:a8:b5:9e:9b:7b:de:16:53:0a:62:de:
e7:ab:b5:fc:97:03:ad:ba:4e:d5:13:f7:f5:c6:b1:17:1b:3e:
f8:74:fe:48:b1:b8:7d:ef:d1:9b:e9:6a:1a:f1:86:bf:e0:6a:
96:4c:f2:f0:91:fe:87:d3:a5:cd:d2:68:65:3a:80:c7:25:3c:
4a:76:00:d6:0b:7e:91:6a:74:13:9d:b3:e9:fe:aa:5a:9e:d6:
64:21:ec:80:18:8b:2b:a6:81:70:05:d3:59:95:8d:30:3c:1b:
da:1b:7e:8b:69:6d:99:55:a9:3a:7a:8e:51:a8:ad:88:cf:d0:
98:65:f9:5b:d1:b2:19:a9:98:2d:50:47:55:5f:1d:38:06:cf:
e4:8d:92:80:f5:36:b8:4b:a8:1b:40:cb:e8:89:fd:2e:64:dc:
26:53:77:41:86:eb:09:55:1f:d4:ca:6d:58:28:7c:f8:87:cd:
2e:6a:6a:7b:17:16:46:84:79:f1:34:b0:c5:52:f1:d5:bd:d2:
a3:3e:46:32:11:4a:7f:0c:1e:68:26:2f:99:97:30:64:2e:46:
c5:1e:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:34 2025 by rpki-client