Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ICj7UUSpD_vW5gzwmNMI8IpNtls.roa
File: ICj7UUSpD_vW5gzwmNMI8IpNtls.roa (raw, json)
Hash identifier: FBaQFX0ABXeUDeKZKOxfaFHPUYIu4v9WiWaEV9YYk0w=
Subject key identifier: 20:28:FB:51:44:A9:0F:FB:D6:E6:0C:F0:98:D3:08:F0:8A:4D:B6:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 766C7D88
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ICj7UUSpD_vW5gzwmNMI8IpNtls.roa
Signing time: Mon 28 Mar 2022 11:09:38 +0000
ROA not before: Mon 28 Mar 2022 11:09:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1986821512 (0x766c7d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 11:09:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2028fb5144a90ffbd6e60cf098d308f08a4db65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:08:7e:55:2e:27:6b:f0:6f:50:d0:92:58:
91:32:e1:d5:a3:b9:55:b3:9a:2c:a8:ee:d9:7d:a8:
de:0d:78:ca:7a:c4:3c:b9:23:25:8b:44:c8:2d:6f:
ad:29:aa:56:0e:92:d4:65:e7:e6:70:49:f1:02:79:
7a:79:3b:6c:48:4c:74:3b:fa:27:e2:51:35:2b:dd:
1c:07:be:7a:97:59:41:7f:61:36:04:bd:ed:89:82:
67:57:75:19:ff:c7:64:fc:d8:36:3a:38:14:f7:79:
cb:a5:b6:61:55:36:e9:22:ee:0a:a6:1a:53:47:74:
3c:39:1d:b5:93:1e:37:aa:0a:60:3c:09:b9:a3:88:
0c:f6:e0:dd:f5:a3:68:4f:0d:9f:9c:cd:df:c1:7f:
b2:4f:5b:24:88:7b:18:ea:47:0a:b1:6c:93:cd:23:
b2:f6:18:e8:5c:56:1b:f3:d7:39:da:fd:aa:3b:b5:
81:70:23:bb:0a:d7:39:e1:1c:5a:d5:76:90:bd:d3:
dd:fc:d5:81:e6:91:a6:1f:32:17:dd:76:dd:ce:c5:
fc:4d:2f:00:38:78:85:b7:4a:2d:7c:c0:75:d1:12:
d4:7d:a7:6c:0d:e0:b9:9f:b3:c6:e2:e9:30:3a:12:
f2:35:02:7d:35:33:f4:de:3d:3e:30:f8:0f:56:12:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:28:FB:51:44:A9:0F:FB:D6:E6:0C:F0:98:D3:08:F0:8A:4D:B6:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ICj7UUSpD_vW5gzwmNMI8IpNtls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:32:48:f5:3b:f3:3e:60:81:cb:69:22:a1:a7:fc:b8:f8:99:
0d:38:e1:97:17:34:8f:c6:bf:ce:cb:c6:24:ca:d6:54:ef:76:
ce:fe:04:f0:4b:12:c2:dd:a2:d0:cd:cf:77:4a:07:84:b7:39:
e4:9e:9d:c7:0f:e7:49:25:31:f7:a9:d4:c7:66:53:17:da:52:
19:35:a9:a9:65:75:8d:ec:88:7d:66:f0:f4:c3:7c:fb:0a:6b:
cd:6d:c1:f7:e8:91:f8:d8:92:84:ad:0b:84:de:4a:d0:31:0e:
25:01:7e:ec:c5:d0:5c:e3:b0:83:34:18:68:50:ba:b6:a9:68:
72:28:99:31:07:c0:69:d9:dc:5b:36:ae:6e:26:72:33:c3:7e:
a5:f7:2b:0a:95:7a:c7:bd:ea:e8:03:7c:5a:e4:78:4f:0a:25:
eb:59:81:36:58:d3:50:63:2c:6b:47:1f:a5:7d:b1:ae:e0:2a:
ac:d6:95:19:54:6b:9c:85:b9:c5:28:2e:ec:32:9c:d7:d3:de:
02:f4:ba:c5:1d:77:bd:bc:a9:ae:c8:c1:88:4f:36:e3:aa:b4:
c1:77:8d:59:ad:ca:13:29:ff:55:2e:a7:5d:b3:98:5f:d9:a4:
13:42:b1:ba:8f:27:3b:99:a6:2f:08:12:21:cf:da:0c:07:43:
f0:ff:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:30 2025 by rpki-client