Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I50hyjfhacE4Mj0QBYkA2iPYmSo.roa
File: I50hyjfhacE4Mj0QBYkA2iPYmSo.roa (raw, json)
Hash identifier: BHky0KtMLR7dPU+Rw19PTuqGws5qjVODkIcyfFg/X84=
Subject key identifier: 23:9D:21:CA:37:E1:69:C1:38:32:3D:10:05:89:00:DA:23:D8:99:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A68B93AF2B00163296ABCA18A23D3979
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I50hyjfhacE4Mj0QBYkA2iPYmSo.roa
Signing time: Wed 23 Nov 2022 22:11:15 +0000
ROA not before: Wed 23 Nov 2022 22:11:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a6:8b:93:af:2b:00:16:32:96:ab:ca:18:a2:3d:39:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 23 22:11:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=239d21ca37e169c138323d10058900da23d8992a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:50:da:e9:41:75:19:13:6d:1e:65:d2:02:
02:70:c2:64:68:90:38:85:27:30:a5:b7:d3:91:22:
68:d7:27:a9:40:29:d2:aa:8d:8b:66:17:6f:07:26:
90:40:c1:00:f7:d2:35:14:2d:10:07:65:05:20:df:
bf:b8:ad:1f:fb:f4:f6:4c:a5:a9:40:ac:b7:ef:32:
c8:2e:95:04:15:7b:9b:ba:5a:d2:46:af:f8:c4:2e:
b9:98:5c:1d:15:53:f3:fd:1b:ab:c7:12:87:24:2c:
f2:bb:26:b5:2f:dd:87:7d:8e:28:ae:f9:cf:b8:4f:
64:4e:3b:b9:e9:e6:74:f2:70:54:68:ff:6c:f1:69:
b6:91:2e:31:4c:4b:71:a9:68:c4:6c:96:dc:4b:a9:
ab:14:9a:28:11:f1:f9:0c:2f:47:cd:72:85:47:27:
ce:50:4f:c3:39:e6:e1:95:25:42:db:d5:52:6b:29:
9a:08:e3:6e:26:1d:b0:98:73:fd:52:62:2a:a1:bb:
45:48:d5:de:71:c8:26:2f:ae:c2:fd:90:05:bc:26:
77:98:ac:c5:fd:5a:1b:2b:fd:b8:bb:0c:04:2d:b3:
97:8e:4b:92:87:74:1d:a8:24:5d:7f:e9:bb:0b:ad:
f2:ce:d6:c9:0c:c8:09:00:ef:a3:04:0e:64:dd:f1:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9D:21:CA:37:E1:69:C1:38:32:3D:10:05:89:00:DA:23:D8:99:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I50hyjfhacE4Mj0QBYkA2iPYmSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:46:53:6c:37:dd:2e:4e:43:06:cb:58:66:0c:39:4b:30:36:
18:9b:27:66:55:8a:36:56:b7:5d:f3:a3:63:4d:f8:3c:16:e5:
4e:c9:67:03:c2:92:28:b7:1b:f6:ee:0b:f3:50:59:e7:fc:73:
8e:e9:bd:76:4a:f7:40:92:b2:0f:e7:91:e0:b6:fc:91:18:f9:
56:a4:60:87:1e:7f:82:86:47:56:04:fa:f4:37:93:95:e9:2d:
f9:02:f0:ed:b7:fc:14:ca:0d:91:be:0b:ef:cc:3a:49:94:2b:
f0:5f:ea:fe:4b:84:3e:de:f1:50:94:8e:4f:90:b3:4e:ba:68:
54:c9:7e:ed:bf:e9:83:3a:a6:e4:32:de:19:86:c3:b3:87:7f:
a7:60:8b:9a:3a:f5:15:04:45:c0:02:f1:78:48:fd:80:92:d9:
10:9c:22:01:b7:4d:5e:db:9f:35:89:47:39:21:c4:34:93:cf:
1f:5b:22:de:a7:8b:b0:a3:bb:b4:41:9f:10:84:6b:4b:78:e6:
2b:e6:d1:8f:1a:5e:72:1b:55:1e:e5:eb:9a:c1:27:17:73:39:
3c:d2:ec:28:7c:f1:04:10:ce:4e:ff:c0:01:f3:32:3a:e9:a6:
d4:5a:08:8f:6e:ba:3b:88:6f:10:a5:55:ca:03:7e:33:26:92:
45:54:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:17 2025 by rpki-client