Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ICyFfYuWUVUsa-jvKE66DspETM0.roa
File: ICyFfYuWUVUsa-jvKE66DspETM0.roa (raw, json)
Hash identifier: uqC/fk5IKUPzpOVAJceMUta6v3KQaTA3YVGCEr53Es4=
Subject key identifier: 20:2C:85:7D:8B:96:51:55:2C:6B:E8:EF:28:4E:BA:0E:CA:44:4C:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 80CB2745
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ICyFfYuWUVUsa-jvKE66DspETM0.roa
Signing time: Tue 03 May 2022 16:08:59 +0000
ROA not before: Tue 03 May 2022 16:08:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160797509 (0x80cb2745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 16:08:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=202c857d8b9651552c6be8ef284eba0eca444ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:30:c4:57:77:b9:c3:02:3e:38:76:38:b4:b7:
ed:46:87:01:98:0b:61:80:16:a5:e4:f4:0c:60:67:
8a:0c:4a:da:b1:4f:ab:93:93:1d:0f:c3:4f:0c:b4:
4d:9d:1c:88:a2:cf:d3:5b:4b:cf:a1:af:09:5e:51:
0e:98:3e:fb:72:73:8d:09:10:8a:a4:28:f5:75:53:
e4:94:63:42:0a:00:03:43:e4:31:83:34:e4:5d:96:
70:21:20:53:9c:a0:33:67:1b:5b:c0:ad:27:17:3f:
36:9b:fc:77:7b:99:32:83:bf:fd:a6:c9:d2:80:05:
7b:19:1e:01:dd:66:4d:17:f2:2b:af:16:d2:6c:b0:
f9:4b:f3:fd:de:62:a7:86:58:2c:c9:b6:da:e8:ae:
b8:60:ec:74:ba:ff:d5:73:a9:6c:8b:b1:58:18:97:
3b:ca:e0:c4:30:de:53:6b:0d:fa:27:ac:a2:4a:7f:
dc:da:b9:93:25:50:d3:66:4b:0c:00:b9:8e:4f:b1:
ec:a4:61:6a:af:a8:d3:4c:67:0d:7b:9c:f4:ed:3d:
25:52:d4:f9:e2:63:a1:84:bc:9f:58:91:a4:5e:23:
20:9b:46:7f:ce:70:af:d6:2f:fd:a7:73:59:b0:d4:
b3:ea:87:ba:19:a7:40:8c:c5:a6:c0:aa:01:df:ad:
0c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:85:7D:8B:96:51:55:2C:6B:E8:EF:28:4E:BA:0E:CA:44:4C:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ICyFfYuWUVUsa-jvKE66DspETM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:fc:a9:49:22:95:f6:3f:2d:2b:f6:37:4f:c4:82:01:46:37:
ff:17:fb:c8:b1:f1:e2:2e:3e:5a:a8:00:50:92:d3:3d:32:b6:
1c:6f:9c:ee:9a:10:17:66:a7:8d:8a:b2:8a:78:dd:fd:71:67:
c9:0b:88:8d:ea:a3:8f:67:c1:25:c7:75:e4:19:9e:ae:b6:cf:
df:4b:42:21:a5:96:c8:1c:43:e3:90:d9:8c:7b:cb:9a:6f:9a:
30:e4:bc:80:2b:16:76:f8:95:bf:97:ed:54:6a:21:67:7c:b8:
db:78:07:41:48:72:0b:b5:25:80:95:e3:2d:3a:1a:b7:d9:2f:
5b:b1:75:9e:89:51:e7:cc:7a:fa:95:2b:13:da:2b:f2:2a:9a:
d4:b4:2a:8d:6f:b6:a7:6e:23:63:0d:f4:7d:48:62:92:8e:90:
c7:d8:2a:84:b2:76:c4:66:f0:a6:26:7e:77:ee:35:32:9b:23:
d0:ee:52:5d:38:5c:6f:2a:11:08:14:93:88:94:fa:55:e3:f6:
cf:cf:56:ea:ef:a5:3d:c6:af:74:a8:58:3c:2f:8a:61:b4:66:
59:4d:9d:cb:8e:ca:e7:bd:df:c9:16:05:1f:61:eb:ce:c0:a8:
95:1c:fc:0f:07:3d:cc:d5:db:42:02:ac:e3:8e:f9:c4:31:1c:
f1:f1:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:01:22 2025 by rpki-client