Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I1R7543EJRVFVgov7BS1VLOL_n8.roa
File: I1R7543EJRVFVgov7BS1VLOL_n8.roa (raw, json)
Hash identifier: 68WXRhbITgZ9gfUmLOIXCSl77JGpOqwBi9dP7SmkHac=
Subject key identifier: 23:54:7B:E7:8D:C4:25:15:45:56:0A:2F:EC:14:B5:54:B3:8B:FE:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EFBAB076BFA1C5A8B2D988FF4FA3052A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I1R7543EJRVFVgov7BS1VLOL_n8.roa
Signing time: Thu 08 Dec 2022 03:15:00 +0000
ROA not before: Thu 08 Dec 2022 03:15:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:ba:b0:76:bf:a1:c5:a8:b2:d9:88:ff:4f:a3:05:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 03:15:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23547be78dc4251545560a2fec14b554b38bfe7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:20:7e:aa:fa:ce:c9:7f:d9:13:54:b4:78:
c7:34:06:fd:bd:45:1b:6e:62:88:00:01:be:75:85:
fa:61:ba:8b:64:94:42:b1:c1:4e:2e:5e:78:77:6a:
9e:f0:7b:23:23:34:68:75:98:1b:4f:5d:21:41:0c:
34:58:89:d5:03:86:66:8e:22:64:dd:90:a9:41:a0:
ca:12:43:fc:c6:f1:83:25:3e:4a:59:73:ef:c4:45:
73:61:93:6c:e7:3e:1f:ff:15:a1:d6:93:05:00:1f:
e8:a0:a3:a4:ec:13:33:b0:ea:90:d1:b3:ab:48:42:
9a:58:05:cd:5d:3f:e0:44:0a:3e:fb:d7:53:dd:40:
a9:63:a4:24:cd:e8:bb:3f:da:36:1b:c3:8f:8c:fe:
15:b1:04:77:84:b1:95:62:0f:23:90:d8:7c:67:7c:
fc:76:1d:e2:12:a8:1a:27:05:6c:2e:98:2e:54:a1:
8d:33:79:52:a8:a8:87:4e:1f:ac:59:f3:38:43:59:
09:31:cb:ca:6c:56:a6:48:24:63:fc:b2:c4:2d:72:
55:fe:f4:04:31:da:b8:8d:38:b6:2d:18:34:52:21:
d9:d1:85:32:a4:9d:54:b5:c7:ac:60:59:74:dc:ca:
16:50:7e:c7:64:37:33:46:b5:fa:a5:a7:c8:6f:53:
22:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:54:7B:E7:8D:C4:25:15:45:56:0A:2F:EC:14:B5:54:B3:8B:FE:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I1R7543EJRVFVgov7BS1VLOL_n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:25:00:e9:b0:10:78:c3:4a:d1:62:48:48:8c:52:df:92:1b:
68:8d:78:fb:30:37:0b:ef:ab:ac:ee:72:e6:ee:b2:2c:aa:a8:
23:e5:8a:2e:d7:e6:cf:eb:7e:d2:82:e3:14:30:a3:ff:f9:97:
97:90:ae:aa:b1:a5:6a:04:4d:9f:3d:93:17:55:a4:8e:d4:a8:
59:8c:7a:86:0a:1c:dd:c5:86:cc:16:14:1c:4a:a3:a6:55:b2:
f2:4b:6e:c9:8a:9a:4a:4d:7d:e6:f6:7c:ec:93:fd:66:54:fc:
dd:45:4b:3b:a9:f3:bb:71:ad:f3:55:ff:7a:81:6f:97:9a:6c:
8c:da:ef:33:2c:5a:59:4c:63:3f:33:ab:09:3c:6c:ca:93:83:
e0:c6:2c:a2:49:c8:6f:35:3b:0a:36:b1:be:4b:00:af:28:24:
6b:26:a9:77:57:ba:4d:bc:25:95:3a:d8:22:02:cf:9d:2f:44:
c8:d7:ef:23:98:90:88:8e:53:17:88:d1:24:94:88:06:31:89:
50:d1:37:65:91:26:c0:fd:dc:14:fd:c9:86:0b:35:34:1c:45:
61:65:46:a9:52:8a:a0:96:24:e5:85:3b:0f:c2:03:86:1a:d1:
af:be:a1:6d:06:64:4f:6d:da:10:41:b0:37:89:8c:f0:77:4f:
b8:dd:3f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:32 2025 by rpki-client