Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4agSUre76NfQGPM10KgsYba2KA.roa
File: I4agSUre76NfQGPM10KgsYba2KA.roa (raw, json)
Hash identifier: O8V8BVG9RAM5+Ij6bm8FPwpFFLA16oXLAUZpwQAQF1g=
Subject key identifier: 23:86:A0:49:4A:DE:EF:A3:5F:40:63:CC:D7:42:A0:B1:86:DA:D8:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895A8B63F9255509AD612C6DFDF1D89917
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4agSUre76NfQGPM10KgsYba2KA.roa
Signing time: Sat 15 Jul 2023 17:13:51 +0000
ROA not before: Sat 15 Jul 2023 17:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:8b:63:f9:25:55:09:ad:61:2c:6d:fd:f1:d8:99:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 17:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2386a0494adeefa35f4063ccd742a0b186dad8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:37:90:dc:ad:e3:7d:86:3b:99:be:24:f9:
76:07:76:23:90:48:67:fb:12:63:de:3b:5f:de:dc:
80:59:69:4f:c5:68:b5:98:1d:2d:5c:cd:5c:d0:3a:
17:3f:27:fa:f0:7e:c9:78:ba:5f:fc:76:8c:c7:50:
40:7f:29:91:1c:ac:89:b3:21:22:48:eb:30:64:15:
c0:df:ef:4f:a5:d2:01:d5:11:73:59:6e:2f:5e:81:
26:4d:96:2d:03:bd:b2:2d:d4:82:4d:6c:1d:43:c4:
5e:e8:27:b7:f3:8c:cc:27:da:3c:f1:1f:ec:bb:b5:
c2:f0:65:32:87:00:78:32:90:17:ec:04:cc:e0:ae:
f7:f8:2d:8b:de:09:31:5c:22:50:a8:b7:6b:59:d8:
77:05:da:1c:78:f6:a9:f3:af:d8:ba:73:e5:33:98:
33:80:15:fb:01:2f:6b:c2:48:e0:ff:f1:0d:99:57:
50:68:23:f0:96:a3:c6:f1:d5:41:9b:7a:ff:eb:9e:
12:4a:6f:6c:04:c7:97:9a:76:dc:27:26:77:85:a5:
a3:6c:42:f6:52:cb:c8:85:b2:d6:84:23:db:bd:66:
3c:19:7a:91:59:41:5d:10:14:5b:b0:9c:b2:3b:62:
09:1b:43:da:3a:4c:30:4d:33:ad:4c:d2:6c:cb:5d:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:86:A0:49:4A:DE:EF:A3:5F:40:63:CC:D7:42:A0:B1:86:DA:D8:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4agSUre76NfQGPM10KgsYba2KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:2b:c0:03:48:2e:17:84:3a:66:45:d9:a0:17:82:0d:80:58:
5a:2f:b9:4a:31:7e:3c:93:4d:3d:3b:19:0e:77:c5:a8:ef:38:
53:d4:b0:d4:36:3a:e4:89:ba:b7:7f:67:ab:c7:14:50:04:14:
5e:0a:d4:51:cc:2e:d6:e3:fb:4e:57:86:d7:c1:7e:de:ee:2e:
9d:4e:4b:c2:79:7a:5a:f4:d4:84:2f:45:28:07:a2:e1:0c:f1:
04:2a:58:21:5b:3d:a1:9f:a8:15:3d:9e:e3:8b:81:54:70:9b:
16:53:d8:52:3d:9c:1a:45:28:7c:76:dc:e5:09:17:1b:e1:6d:
48:03:fb:1d:38:45:79:cf:fe:1c:47:73:0b:cd:f3:29:54:f1:
6d:f0:58:27:64:cf:77:3b:a9:2b:f1:f1:fb:34:9d:58:90:67:
f7:1f:d2:13:f5:92:2c:42:bc:17:cb:23:6f:22:88:a6:ae:6b:
e6:35:87:bd:58:79:0a:24:f5:55:c9:d7:45:71:22:9d:4b:41:
52:26:cb:97:62:20:af:40:3f:5b:1f:dc:9b:89:3e:20:7e:aa:
c5:77:79:1f:5a:2a:f7:a5:3f:79:c5:23:24:ed:29:7c:aa:85:
71:20:fc:01:7c:9b:67:24:c4:f8:20:c1:fd:ba:ec:9a:6b:b5:
9c:84:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:18 2025 by rpki-client