Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8jfFabIyNkIiTXlEKdT_vL_SPo.roa
File: I8jfFabIyNkIiTXlEKdT_vL_SPo.roa (raw, json)
Hash identifier: i/B44920Wwjd4lj0jMURqco+Hyx+Ej0JPVDty1Ma1YA=
Subject key identifier: 23:C8:DF:15:A6:C8:C8:D9:08:89:35:E5:10:A7:53:FE:F2:FF:48:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182FE260C4401CAA5AFA025D00B23A4879A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8jfFabIyNkIiTXlEKdT_vL_SPo.roa
Signing time: Fri 02 Sep 2022 12:21:22 +0000
ROA not before: Fri 02 Sep 2022 12:21:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fe:26:0c:44:01:ca:a5:af:a0:25:d0:0b:23:a4:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 2 12:21:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23c8df15a6c8c8d9088935e510a753fef2ff48fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:e2:10:ce:26:22:0b:a6:1d:4e:97:26:3f:
eb:25:c5:34:c7:57:43:02:82:cd:1b:76:a9:17:d3:
1d:bf:70:7c:ef:cc:8d:25:ea:09:8c:39:c8:7b:bc:
39:b6:96:43:92:3a:31:f2:6c:25:d6:a3:08:c5:f4:
42:6c:29:d4:f3:d4:f8:c2:3d:03:62:7a:7a:23:23:
5b:e5:62:4c:01:43:3f:94:9e:15:eb:9f:a5:b6:72:
85:bd:f5:f4:4f:5c:3d:48:82:fb:96:f4:3c:bb:32:
60:35:42:7c:9e:ca:9f:da:0d:95:e2:29:9b:c3:49:
f3:21:7c:5d:9d:ba:c9:ab:a5:34:9f:0f:86:d8:6b:
81:cf:75:dd:71:2e:76:e9:21:f5:2a:57:7f:a4:29:
ac:69:d9:c8:9e:68:b3:36:f9:98:6b:24:2e:49:41:
12:c5:27:1c:c4:09:96:08:96:e5:04:d3:c3:2d:c7:
cf:30:38:a7:5f:e8:05:f6:8e:fe:1f:a3:24:ed:c6:
f8:04:2a:db:62:12:f1:78:26:d1:dc:a0:64:f9:3c:
ce:8f:78:60:a8:cf:47:90:2e:a5:d9:76:0f:ea:29:
10:85:09:31:11:7e:fc:9e:e8:c4:41:82:4c:ab:bf:
e5:4e:2a:a8:da:b2:0c:e2:1e:0a:04:61:90:e2:7b:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C8:DF:15:A6:C8:C8:D9:08:89:35:E5:10:A7:53:FE:F2:FF:48:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8jfFabIyNkIiTXlEKdT_vL_SPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:fd:e7:bc:88:cb:64:b3:cb:0a:98:b7:57:57:bb:41:a3:89:
d7:3c:f9:0c:4b:84:8f:cd:19:57:00:d9:ea:08:dd:36:19:46:
5c:d1:47:02:20:01:bc:11:29:05:db:5e:67:14:2d:fd:63:0d:
09:ef:f2:fa:db:89:6a:6b:b4:7a:0d:7a:f6:93:21:e0:61:a4:
7d:1b:cf:62:19:56:65:87:99:71:db:a5:75:e9:98:b5:9d:d1:
2a:84:01:e1:cc:f5:57:cc:0c:54:df:65:2b:0b:04:47:2b:f7:
28:92:f6:b8:30:4b:d5:f7:c5:72:cf:c1:74:75:33:09:10:d1:
ef:0a:5d:32:fb:fa:95:d1:2f:2d:b3:74:7c:18:c7:01:63:fe:
8c:df:3d:e9:e2:42:8f:48:f9:3f:46:13:c6:7a:22:c0:4c:35:
84:0d:8d:2d:3b:61:fb:a1:09:60:81:7b:5c:8d:c4:44:92:e7:
0e:17:f3:75:f8:6d:d0:09:c2:e2:90:0b:17:25:d5:e8:d9:aa:
91:97:ba:a8:3f:84:d5:c3:22:2b:38:8b:6a:39:e9:dc:7c:41:
35:74:39:a6:bd:ba:67:1f:5d:e2:8e:2b:63:f4:ae:63:c5:e3:
c5:d8:40:e8:c3:c1:ca:f2:e6:d5:86:d3:2e:02:fd:8d:48:15:
4a:24:5d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:02:57 2025 by rpki-client