Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I2pGAyUjrkjmyvYM3wjYCVtyc6A.roa
File: I2pGAyUjrkjmyvYM3wjYCVtyc6A.roa (raw, json)
Hash identifier: BpJPvP3n66cQ/dFmec5MRP6wOYWqR8lOPEYsOeDK4zs=
Subject key identifier: 23:6A:46:03:25:23:AE:48:E6:CA:F6:0C:DF:08:D8:09:5B:72:73:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A4327FF1CBEC6A4F6168C4CAFA7AD7415
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I2pGAyUjrkjmyvYM3wjYCVtyc6A.roa
Signing time: Tue 29 Aug 2023 21:16:49 +0000
ROA not before: Tue 29 Aug 2023 21:16:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:27:ff:1c:be:c6:a4:f6:16:8c:4c:af:a7:ad:74:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 21:16:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=236a46032523ae48e6caf60cdf08d8095b7273a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:37:ce:0e:56:de:1a:06:42:cc:04:e2:cd:
e8:60:f3:97:6c:a4:e4:d5:5a:4b:91:9c:f7:1b:f0:
78:92:4f:4c:60:a0:a3:e8:ce:dd:e1:f0:73:7d:34:
91:5d:82:91:f0:f3:c8:57:3e:0e:67:7b:73:94:81:
05:76:0c:e3:cd:d4:c2:8a:86:ab:1d:f4:d9:df:22:
1a:da:5a:87:bf:a5:6b:cb:4b:a5:da:38:d2:66:31:
5c:8a:79:5d:4d:91:36:c3:5b:c2:30:16:0d:46:05:
8c:b7:45:6a:9f:15:b8:72:90:32:ab:b1:1f:d7:e0:
5d:c6:22:78:56:0d:82:d4:58:12:21:c7:ff:42:19:
f7:38:15:64:7a:52:5a:1a:a2:10:28:b1:31:f6:8b:
58:ac:61:e6:0e:66:67:fc:56:6c:03:a9:71:74:d5:
20:06:e9:ec:39:11:bd:d7:9b:ed:4d:2d:4d:da:77:
76:c5:a7:5f:7c:cf:d0:26:1b:7f:1a:25:f6:c6:0b:
4f:82:3f:80:c2:44:cd:c1:08:13:cc:f8:85:77:76:
3f:b5:0a:a7:86:86:e3:44:c7:44:3a:d4:1e:66:2b:
3e:95:dd:87:45:bc:0c:57:c3:98:86:16:0b:54:c9:
3e:45:41:c0:bc:a1:32:2e:a4:28:64:5c:9a:37:d1:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6A:46:03:25:23:AE:48:E6:CA:F6:0C:DF:08:D8:09:5B:72:73:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I2pGAyUjrkjmyvYM3wjYCVtyc6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:26:40:6e:8c:07:3b:11:6a:a4:f6:9e:77:7a:25:b2:61:67:
28:40:6a:4d:6c:70:b6:12:a0:03:1c:75:b2:47:7e:cd:97:47:
ac:34:30:4d:b3:d5:8f:7d:76:0a:ff:d9:cb:42:aa:09:48:a5:
f2:49:99:02:7d:48:2d:54:99:a2:5e:2c:d5:a8:dd:fc:8c:c3:
11:ee:dc:ec:f9:cc:c7:0d:d0:68:88:03:fb:98:b4:c9:2b:4a:
10:26:8e:47:70:91:5d:30:ba:dd:a4:3c:ac:82:b3:67:eb:bd:
77:b0:80:49:4d:f2:35:01:0e:20:08:ac:44:d8:aa:62:4c:17:
e2:6a:f5:eb:50:a2:5a:b2:af:f5:06:45:48:f6:6a:4a:4c:1e:
b4:d5:bc:8f:79:31:f1:6a:fd:7f:90:1f:b8:00:45:84:bb:a5:
f9:b3:bb:1b:d5:a2:c4:d2:3e:de:73:f2:99:af:ad:d0:7d:5a:
15:fe:a3:6d:31:fd:31:c7:83:77:49:46:6f:5d:cb:eb:ad:f6:
b5:1c:57:a9:f3:00:32:cc:ac:f9:72:07:6a:1b:cd:03:57:bc:
84:84:f2:d7:50:2a:0d:23:70:ce:81:3f:a5:96:c2:a9:71:35:
8c:25:82:5b:fa:e8:a3:ce:68:1b:4f:bf:5a:bf:04:e2:a0:8c:
46:00:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:07:41 2025 by rpki-client