Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I7wJA1qIspNAWaCYGAiAU4ggoto.roa
File: I7wJA1qIspNAWaCYGAiAU4ggoto.roa (raw, json)
Hash identifier: w1NEHreVXK1cxH+dzXc0ZJSTQWSx9oiOEcYcl8ZD8Cc=
Subject key identifier: 23:BC:09:03:5A:88:B2:93:40:59:A0:98:18:08:80:53:88:20:A2:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829DC6B8DA17A59AA9B97A4472AD6AF07E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I7wJA1qIspNAWaCYGAiAU4ggoto.roa
Signing time: Sun 14 Aug 2022 19:13:42 +0000
ROA not before: Sun 14 Aug 2022 19:13:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9d:c6:b8:da:17:a5:9a:a9:b9:7a:44:72:ad:6a:f0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 19:13:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23bc09035a88b2934059a098180880538820a2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:0a:fb:b0:ff:d8:66:12:5e:61:b7:88:bf:
c9:b7:81:99:e3:7a:8f:6b:76:dd:1a:b3:3c:6f:48:
4a:7c:c3:20:ab:7a:62:22:86:a5:53:d0:73:b1:14:
fb:e3:d4:9d:d0:ca:42:16:8f:48:7c:6f:59:88:ca:
a9:1b:ff:3a:3a:ae:3e:a7:e8:bd:e6:56:4b:fc:4a:
26:98:d8:e9:9a:ef:2a:a8:f2:d7:75:34:bb:e3:6d:
05:43:db:3f:a7:34:89:0c:32:29:95:4b:7d:ea:78:
7e:c4:b1:22:af:f6:04:30:94:c1:90:b8:7c:66:b0:
4d:63:4e:9c:dc:da:c9:66:29:22:f8:0c:64:07:3a:
c2:1a:07:d9:15:02:05:58:44:a2:05:4a:58:f7:f8:
fa:9c:db:94:e4:7b:55:4d:3f:89:3b:65:8b:47:c8:
d9:20:cc:b0:b1:1b:3e:ed:15:55:f0:e8:5b:52:bc:
90:85:ec:d9:87:2c:00:7b:4a:0a:ce:94:d5:28:e5:
f5:95:86:1c:da:c6:6d:fc:50:82:68:f1:2c:ac:c5:
c9:a6:dd:75:f5:50:52:94:7c:13:31:dc:4d:b7:8b:
7f:c2:9a:a4:76:ea:f4:d5:24:d9:b6:1b:47:8e:ee:
a4:89:b2:98:00:0c:b5:ff:b1:a5:8d:9f:19:c1:ff:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:09:03:5A:88:B2:93:40:59:A0:98:18:08:80:53:88:20:A2:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I7wJA1qIspNAWaCYGAiAU4ggoto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:d4:4a:15:d5:46:fd:f2:d4:5d:2e:34:db:3c:59:a8:16:11:
a0:e0:a8:70:31:37:4f:bb:f2:0f:20:c4:2a:fa:8b:fc:65:1c:
83:e2:5a:bd:0f:4b:1a:f9:bb:68:a4:e3:07:e6:20:b4:08:82:
d2:ec:0d:3a:cc:b5:4f:7d:b4:1c:fb:c1:c8:05:c9:8e:e9:d4:
4d:7e:2c:eb:bb:7b:36:d7:82:3e:0c:f6:6b:f8:06:d8:07:2b:
7a:2b:36:29:ba:0c:d3:db:1e:ed:f5:06:b7:6d:4e:e1:c4:46:
fd:e1:23:27:45:b1:3e:4b:06:08:55:3e:30:94:ae:ea:c1:72:
d8:a9:24:a3:df:b0:74:9b:c6:f2:5d:ef:48:5d:1f:f0:68:89:
43:8c:78:76:8c:e2:86:c8:96:e4:db:3b:47:f3:26:f7:52:f3:
96:f3:03:c2:f9:fd:fc:71:c6:37:bb:11:6b:f0:ca:ff:e2:36:
a7:2f:a0:b2:37:51:29:f9:d4:4e:d8:4e:f2:17:31:e5:45:8b:
af:a2:16:0b:d1:49:55:a7:81:4b:2a:6d:8f:60:8c:5f:29:ce:
a5:23:8c:67:6e:06:d9:96:e3:25:c2:c8:a3:51:9d:1f:8f:fb:
77:e0:90:ec:dd:74:60:fc:29:29:be:d6:97:a1:06:64:6e:bd:
e1:44:fb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:08:09 2025 by rpki-client