Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I2ebIALp-nEMbFxRWUvk_vGYjWA.roa
File: I2ebIALp-nEMbFxRWUvk_vGYjWA.roa (raw, json)
Hash identifier: YBSJUF1WU59u84z9ElMisfWyvJQnvAycTBAA2JDJynA=
Subject key identifier: 23:67:9B:20:02:E9:FA:71:0C:6C:5C:51:59:4B:E4:FE:F1:98:8D:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01837B30F12D0F6390A95EB31B9590D78316
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I2ebIALp-nEMbFxRWUvk_vGYjWA.roa
Signing time: Mon 26 Sep 2022 19:05:48 +0000
ROA not before: Mon 26 Sep 2022 19:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:183:7b30:d8d/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7b:30:f1:2d:0f:63:90:a9:5e:b3:1b:95:90:d7:83:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 26 19:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23679b2002e9fa710c6c5c51594be4fef1988d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:6a:9d:b7:18:a0:69:d3:4f:93:9f:13:27:
1b:4a:cc:72:2b:24:be:ce:95:08:f5:f3:18:ee:5f:
d2:6b:50:9d:3a:a4:9c:2d:fa:a4:d3:2a:2b:4c:93:
ea:e5:95:09:10:f6:b9:26:35:eb:5c:50:aa:27:11:
ed:7a:5c:40:cb:83:f4:e5:b7:f7:5b:6f:c4:b2:23:
26:f2:16:37:ae:3e:53:59:3f:5e:82:16:1e:7a:19:
24:67:55:62:ab:c7:44:ae:e2:35:93:f2:a4:de:df:
00:58:ca:a2:84:46:8a:bc:f4:a7:22:d4:7d:3f:3d:
02:9f:e8:5d:2c:b1:9a:66:28:ea:d3:9a:5e:2d:0b:
dd:15:d5:d0:14:d7:e7:15:52:6e:55:8b:e1:e6:1f:
ab:3c:90:59:f5:b5:1b:d2:5b:d1:89:87:f3:76:1d:
7d:fc:e4:67:5d:46:80:92:7b:12:3e:e1:69:16:2b:
12:a2:70:28:ae:fc:e8:8f:d0:63:4e:61:e5:71:df:
5c:0c:3d:3f:62:ac:70:59:b8:b1:07:63:cc:4e:65:
a0:85:8c:ac:fb:2f:11:94:04:79:b5:e7:d7:ed:ad:
7a:b8:df:75:d1:04:8a:03:7c:4a:d6:41:c0:b9:38:
eb:2a:04:5a:21:91:5c:b2:48:56:9e:d3:d6:8d:a5:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:67:9B:20:02:E9:FA:71:0C:6C:5C:51:59:4B:E4:FE:F1:98:8D:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I2ebIALp-nEMbFxRWUvk_vGYjWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:87:a0:98:bd:df:c2:ba:7b:45:8f:ec:ae:36:12:99:21:2a:
32:82:38:b7:c9:b8:d4:78:07:4a:ee:f3:8b:c7:48:5d:24:fd:
46:76:ea:ad:a3:2c:74:c6:bb:2a:d0:b5:26:0a:79:46:ad:c3:
dc:97:ae:14:bb:a4:d2:11:95:7a:b3:de:15:57:de:bb:1f:f5:
2b:46:5e:ef:5d:5b:b7:79:e1:15:bd:c5:ed:be:34:8c:06:38:
3d:df:a5:3f:83:5a:1b:e5:e2:7b:a0:f4:34:d4:0f:05:b0:07:
36:db:ff:76:e7:0c:ef:8a:0a:9e:90:9d:02:f7:d0:a2:04:9f:
d7:97:0a:4d:92:21:cf:c8:fc:a8:13:e1:11:99:09:41:dd:9a:
8d:98:8d:5e:cc:77:6c:ed:58:49:e0:48:f9:f0:29:23:ec:42:
e4:81:fb:68:be:56:f3:b8:b1:a2:b6:8e:8b:14:ad:5b:d2:79:
6e:8b:18:42:6a:17:ef:d2:bd:7f:4a:b4:0b:1e:cf:39:9e:fd:
cd:a4:8a:ff:ab:e3:34:1d:6f:cb:fd:93:0b:d8:32:d1:79:b2:
cb:c9:03:e7:6c:0d:13:25:a8:c5:e2:93:71:7c:4b:9b:a1:6d:
58:95:92:df:4d:88:a4:b5:9c:78:9e:06:e9:82:da:a9:b1:f2:
64:09:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:11:50 2025 by rpki-client