Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I5eqVCLbmVyZO31E4QwxPGAYtG8.roa
File: I5eqVCLbmVyZO31E4QwxPGAYtG8.roa (raw, json)
Hash identifier: rXyvpFxqygq7d7qkRWowWxhw3+GyNQ6W1X6Wv8+uSpI=
Subject key identifier: 23:97:AA:54:22:DB:99:5C:99:3B:7D:44:E1:0C:31:3C:60:18:B4:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018889F67B6F09B96B57DFA5A677F2D7DF7F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I5eqVCLbmVyZO31E4QwxPGAYtG8.roa
Signing time: Mon 05 Jun 2023 05:10:11 +0000
ROA not before: Mon 05 Jun 2023 05:10:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:89:f6:7b:6f:09:b9:6b:57:df:a5:a6:77:f2:d7:df:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 05:10:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2397aa5422db995c993b7d44e10c313c6018b46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:58:36:b8:df:aa:5a:89:2b:77:55:64:5b:
56:b7:d4:bb:e0:56:ef:e6:4e:23:34:ad:e4:14:b9:
64:9a:15:d6:75:36:51:da:bf:93:f6:9f:a6:4a:4c:
75:b6:67:d4:e1:c5:28:a5:50:44:86:b5:d6:01:1c:
8f:b8:ac:b5:12:88:15:81:fa:53:0c:9c:e3:72:bb:
12:51:40:f6:92:e3:2b:ce:26:51:c8:f8:c5:e7:29:
3c:42:c6:3f:e2:52:04:be:96:d5:54:86:d9:24:22:
a1:88:91:21:05:ee:7a:4a:5a:ab:db:f2:07:fe:eb:
7f:33:76:85:5a:31:1f:95:a8:0a:03:4a:fa:9c:d4:
a7:df:db:74:35:14:25:a0:13:ea:4e:3d:20:f9:d7:
f9:65:74:ec:ba:41:ee:63:2e:27:c7:da:0c:c7:9b:
29:13:ac:bb:0a:b3:aa:9d:77:cd:03:2d:cf:34:c5:
8d:c8:df:d9:a9:79:e7:60:a5:3b:be:7a:22:d6:f6:
43:e1:e0:fc:88:e9:4f:d5:2b:2b:bc:f2:e9:cc:7d:
32:51:f3:2b:d2:ea:3f:04:83:45:2d:12:9f:b7:3e:
66:e8:0a:42:20:45:f4:fe:14:3e:c4:d1:ca:bf:3d:
56:5b:2d:e6:74:9a:29:e2:db:11:49:b5:d4:28:6d:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:AA:54:22:DB:99:5C:99:3B:7D:44:E1:0C:31:3C:60:18:B4:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I5eqVCLbmVyZO31E4QwxPGAYtG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:4c:6d:4d:33:40:9b:ee:e0:cc:f5:37:d1:e6:f4:27:e5:29:
ff:7e:a3:bd:1a:e1:1f:36:2e:f2:bf:5a:d4:b6:4a:e4:f9:46:
04:c9:bd:90:b2:25:17:04:20:03:71:a0:2d:c6:28:53:7c:a0:
fa:74:40:c6:5d:47:27:fe:24:11:dd:cc:e0:7b:f8:07:4e:ab:
9f:3c:32:bf:e0:26:b1:6c:ee:ba:84:f9:d3:5e:a8:69:76:be:
75:a6:b2:5a:d8:c0:ef:ee:48:32:ad:bc:79:fb:69:19:a1:c0:
d0:cc:b9:d0:7a:58:9e:ca:dc:e3:be:fc:09:7d:18:3f:9a:26:
48:60:22:e7:80:cc:02:ad:e7:f6:44:35:19:6f:7e:ba:99:54:
63:ac:24:e3:e5:d4:7e:81:36:b9:a2:85:e1:a0:e3:90:eb:c3:
22:ab:5f:cd:ef:db:60:e5:44:81:1f:90:a3:9e:41:4e:dc:d7:
b7:74:17:0d:11:20:8c:03:88:4f:c1:65:34:ee:bd:f0:95:bf:
e2:ca:e0:79:bc:04:2b:c8:3c:61:7d:8d:e3:e2:8c:21:7a:ad:
41:98:7d:1f:f8:23:f2:18:3e:b9:19:6a:3d:82:02:fa:1d:44:
3e:35:1c:4a:f1:04:b2:07:ed:d8:01:18:f4:f9:8c:4d:7b:1f:
96:d0:88:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:36 2025 by rpki-client