Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I3q6fDBY-4u46Ilvli-jVNjN-Vw.roa
File: I3q6fDBY-4u46Ilvli-jVNjN-Vw.roa (raw, json)
Hash identifier: jAe/+8svDCzjGoGEwsDU1qj63AuJJRXXqHUc/+zxgTc=
Subject key identifier: 23:7A:BA:7C:30:58:FB:8B:B8:E8:89:6F:96:2F:A3:54:D8:CD:F9:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854AAFED2B96C475DF3A55AAA61FA5DFC0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I3q6fDBY-4u46Ilvli-jVNjN-Vw.roa
Signing time: Sun 25 Dec 2022 19:08:41 +0000
ROA not before: Sun 25 Dec 2022 19:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4a:af:ed:2b:96:c4:75:df:3a:55:aa:a6:1f:a5:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 19:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=237aba7c3058fb8bb8e8896f962fa354d8cdf95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:24:92:4e:43:cb:17:87:8d:ef:7e:77:fb:
54:db:06:4c:9a:8f:eb:ff:4e:be:4c:68:81:54:88:
0a:44:8b:e4:3c:bb:a9:87:8d:23:8f:de:c6:09:5f:
1d:b0:d1:20:70:22:de:92:95:ab:1d:88:e0:1a:ef:
6b:0b:b0:d6:f9:75:e7:a1:19:fc:9f:34:51:88:14:
b4:0f:f5:b6:62:b2:c1:ca:bb:5d:81:00:9b:ab:5d:
dc:78:bb:89:d7:19:b9:13:3c:02:a9:75:ac:9d:54:
36:96:28:0c:2c:a4:e2:dd:fe:b3:2c:66:46:24:b0:
36:bf:40:e1:16:81:e2:7f:8c:a8:5f:7c:e7:e2:6a:
6f:22:94:31:f7:5c:df:a9:1d:73:6b:97:49:89:a4:
cf:fe:20:2b:18:27:cb:4b:d0:56:43:16:c1:bd:0f:
01:a0:38:2f:57:fa:64:63:0b:97:67:50:c1:95:fa:
6e:80:70:7e:df:26:02:8c:fc:27:7f:f1:7c:db:a3:
9c:bf:cf:c6:aa:9a:15:84:3b:4a:d7:e9:8d:81:ea:
2b:40:0a:9e:ce:f1:74:70:69:52:23:d1:0c:22:4c:
b6:6c:e3:53:69:9c:89:cb:7b:aa:1a:c5:37:89:d6:
4b:85:b2:1b:6f:f6:67:79:b1:82:39:ce:69:9d:8d:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7A:BA:7C:30:58:FB:8B:B8:E8:89:6F:96:2F:A3:54:D8:CD:F9:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I3q6fDBY-4u46Ilvli-jVNjN-Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:35:3d:78:81:a6:b3:97:04:0d:0a:d4:65:88:a5:46:60:98:
d1:e8:31:22:21:b7:06:92:ce:80:d7:a5:e3:0c:5e:eb:6d:46:
25:44:66:03:b3:af:41:24:4b:ab:a8:23:33:bb:ee:57:a4:2a:
fa:c3:7e:aa:7c:9c:57:14:6f:dd:65:92:94:90:a3:8a:8b:09:
e5:68:bb:6d:10:2c:db:be:b3:ce:d7:75:f2:11:ee:59:c9:97:
69:9f:98:64:ff:64:9e:1f:cd:8c:d8:4d:e7:4d:a9:12:6a:1e:
c3:db:25:ba:62:f7:c6:97:b8:9f:34:f8:9b:13:e5:80:4b:c6:
62:fb:e8:52:c6:cd:57:fe:5e:e0:e8:16:1e:2a:8d:f9:be:a7:
44:54:e7:f6:6c:3d:d9:a1:79:d8:24:52:c8:5d:7c:ff:17:5a:
8a:76:2f:bd:9b:ef:53:a5:c9:e8:48:3d:51:8a:6f:82:ad:67:
a9:9d:c8:43:3e:39:cb:ff:94:d9:89:6e:bf:2d:7a:28:a3:87:
8c:bb:8d:3b:27:6e:9d:cd:58:05:54:8a:56:52:de:d6:23:01:
4c:02:85:59:6c:f3:e0:2c:73:41:bb:fd:a5:37:bb:7a:1c:78:
1d:4e:4f:76:66:37:ce:e9:69:74:c7:02:7f:7b:2d:6a:8d:cf:
52:b1:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:48:04 2025 by rpki-client