Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8TBv2CQ0qDjAFaJ5tpUPvdC7-8.roa
File: I8TBv2CQ0qDjAFaJ5tpUPvdC7-8.roa (raw, json)
Hash identifier: d/kX9/Zp09aMXSL1F6+urngSxjUx9M1xSp2fjHvE8N4=
Subject key identifier: 23:C4:C1:BF:60:90:D2:A0:E3:00:56:89:E6:DA:54:3E:F7:42:EF:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6733441A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8TBv2CQ0qDjAFaJ5tpUPvdC7-8.roa
Signing time: Wed 02 Feb 2022 14:04:41 +0000
ROA not before: Wed 02 Feb 2022 14:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:bac0:700b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731413018 (0x6733441a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 14:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23c4c1bf6090d2a0e3005689e6da543ef742efef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:2d:5e:d8:22:9b:10:98:77:9d:d1:37:d5:
d9:8c:c7:a6:96:26:96:9c:c5:3e:a5:cb:3b:54:e4:
2a:ec:ba:a2:b8:7e:4c:6c:ef:8c:2b:96:c2:49:50:
a5:29:5a:b6:da:27:a2:1e:81:de:80:ee:8a:62:53:
29:03:73:f1:47:c2:29:f3:10:6d:b2:a5:0b:e5:0a:
81:b0:0c:63:f0:fa:d1:ac:77:c2:70:e3:bf:48:c9:
6d:ed:d2:a5:bc:11:03:7e:e2:1f:b9:28:28:ed:37:
3f:9b:5c:1d:11:2b:05:d3:d7:92:4f:22:4f:73:42:
95:27:0e:95:cd:69:f2:2e:63:af:36:16:33:32:cd:
05:ae:9f:0b:4a:3e:7f:bf:7b:ab:03:d6:dc:bd:a7:
0a:b7:ee:3c:b6:9e:0e:24:c4:7e:62:7e:b9:f7:ef:
96:d7:54:ab:9b:c1:bf:64:38:f2:6f:40:57:4b:b1:
8b:48:7a:fa:28:09:a3:b5:e9:1b:12:9a:d4:8d:60:
2b:34:a6:48:c7:97:1d:40:5c:0f:ec:10:6b:07:4a:
ed:08:e8:0d:d6:80:03:60:58:5b:82:bf:e5:74:b4:
2d:f7:a3:c1:79:9e:00:28:4f:2a:17:19:0c:62:88:
7f:b5:37:70:f6:3c:f8:4a:25:99:15:7f:9c:4c:3f:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:C1:BF:60:90:D2:A0:E3:00:56:89:E6:DA:54:3E:F7:42:EF:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8TBv2CQ0qDjAFaJ5tpUPvdC7-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:9c:42:2f:b1:e4:04:6b:3b:89:04:5d:55:d7:3e:ef:e0:b2:
04:92:74:96:0e:7c:8d:35:78:57:fb:d1:ee:fa:cd:c8:4f:89:
62:7b:de:df:32:91:92:7d:2f:59:5f:77:e6:47:c2:85:41:95:
45:5a:6c:72:97:69:de:5e:b9:7e:c6:09:e3:36:96:f8:d7:24:
e9:0f:55:e7:80:c2:62:a0:c7:0d:41:54:c6:f5:d9:a9:d8:d6:
4a:fc:62:2d:4d:8c:5d:2e:4a:ae:26:a6:1e:f2:8c:a2:39:ad:
9a:4f:4b:35:03:13:53:87:90:81:1b:e1:6f:dc:13:90:e6:a5:
48:89:4e:5d:5f:e4:15:69:72:c2:8f:20:14:4a:0c:e5:a1:04:
9d:f0:bc:13:64:d3:e5:8e:23:8d:0f:5c:b8:85:e8:e1:fa:0b:
7e:3f:7c:56:66:ee:f6:b0:ac:93:c8:4b:69:0e:0c:41:37:9c:
aa:c4:fa:3b:6f:47:6c:eb:46:fc:bd:bd:b6:70:6a:73:5d:8b:
d4:14:88:2f:f0:f8:a5:99:1e:2f:df:90:6f:da:31:7d:6b:75:
45:3a:17:83:33:69:0d:59:65:c5:6b:55:fa:2e:a0:e5:9e:0f:
f8:5d:c7:6a:ed:e0:b9:a1:a7:8b:8d:ab:f5:f0:c1:4c:a2:bb:
7f:1b:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:43:29 2025 by rpki-client