Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I90Hqd37V_EDvN14DlNxZHu6E7s.roa
File: I90Hqd37V_EDvN14DlNxZHu6E7s.roa (raw, json)
Hash identifier: SPwaINCRVdrrBJne4r8Oi8jMOlQsemJtKNn8aVznVr0=
Subject key identifier: 23:DD:07:A9:DD:FB:57:F1:03:BC:DD:78:0E:53:71:64:7B:BA:13:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899EF5F5F8F6A205F22058BB81B54A709F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I90Hqd37V_EDvN14DlNxZHu6E7s.roa
Signing time: Sat 29 Jul 2023 00:04:26 +0000
ROA not before: Sat 29 Jul 2023 00:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:9ef5:c848/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9e:f5:f5:f8:f6:a2:05:f2:20:58:bb:81:b5:4a:70:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 00:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23dd07a9ddfb57f103bcdd780e5371647bba13bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:d5:db:18:51:1a:a0:af:36:39:4f:7a:d1:
e3:a5:ee:90:5b:d6:3b:cb:0e:f4:a1:eb:71:b7:dc:
7f:93:f4:36:55:21:25:2a:e9:aa:e0:55:02:12:1a:
38:6b:60:cd:f1:5e:b0:23:a7:97:93:af:2d:75:4b:
b7:da:15:fd:6f:31:ad:ef:0e:29:4c:26:72:3c:9b:
39:22:93:4a:9d:62:2f:49:75:10:0a:f3:e2:7d:6c:
98:9c:c6:ef:33:6d:30:67:30:7c:8f:48:82:f7:44:
6e:9e:60:8f:3c:dd:fc:97:7c:59:ed:35:43:97:ae:
7a:72:ba:94:f2:99:bd:38:ac:0e:6a:99:41:ce:24:
0b:8b:8d:4e:ea:25:96:4b:b0:01:f9:c3:2a:5e:bd:
60:f7:1b:08:17:11:36:1f:8b:1e:d9:17:43:14:aa:
5b:04:3c:9c:f7:1f:a4:91:e7:b8:df:67:27:21:19:
50:d1:89:b9:e6:f7:81:b0:95:0a:d8:b7:66:6e:51:
0a:28:0d:fb:a7:12:60:22:3e:46:34:fe:fc:c9:2d:
70:1f:21:01:95:5d:53:98:3a:5c:91:09:6a:f3:9e:
28:c6:6c:c6:60:e6:a2:c7:69:08:b0:a0:3a:bf:60:
18:7f:05:05:90:2d:6e:de:a3:61:b3:a2:73:a5:d1:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:07:A9:DD:FB:57:F1:03:BC:DD:78:0E:53:71:64:7B:BA:13:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I90Hqd37V_EDvN14DlNxZHu6E7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:1f:62:b9:69:f1:58:cb:80:bc:06:a7:dd:67:04:fb:c3:ed:
fc:97:1d:87:a1:4f:67:69:47:05:e6:d6:b2:45:a0:a2:aa:a3:
93:b0:54:e4:bc:6f:f7:49:ab:ec:f1:76:65:84:7b:48:35:87:
d7:c8:16:3b:bb:65:a1:a3:36:1a:cb:e5:8d:87:b6:df:ee:46:
c7:b9:86:ab:8e:69:d2:e5:b8:f0:e4:ed:42:ae:3e:23:01:0f:
ed:73:f1:76:fe:81:3f:99:09:7d:13:79:f4:a9:f1:48:0c:49:
28:5a:8a:cd:90:4c:86:01:13:bc:6d:d2:f6:47:2a:69:f1:57:
70:e9:69:6e:82:db:81:dc:bc:f9:f8:05:04:b4:9f:8f:a6:4a:
10:3d:eb:9d:dd:dd:70:25:84:d7:65:c0:e7:be:0b:57:eb:81:
d0:c2:db:ba:74:be:36:db:1f:ff:1b:c9:f9:73:74:45:56:d3:
36:34:d8:e2:a6:cb:0e:8b:18:c8:8c:db:11:9b:2d:5b:6b:f8:
d6:4d:ff:74:24:34:60:ea:e0:4d:c1:34:d0:52:d0:c0:83:09:
15:a1:e6:ac:fc:68:23:03:5c:de:8c:20:5f:2b:39:15:90:5f:
c6:34:19:0b:0b:7f:d6:e4:2f:16:94:e8:f6:9a:97:5e:43:c4:
ae:0e:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:59:51 2025 by rpki-client