Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IFq2ifw9Yn32aM6Qf5_e5Wk4RCs.roa
File: IFq2ifw9Yn32aM6Qf5_e5Wk4RCs.roa (raw, json)
Hash identifier: Bq9Ao9qT4Nv/uwUYLcarbBt2sikr+FkhW1gA5qEbpiI=
Subject key identifier: 20:5A:B6:89:FC:3D:62:7D:F6:68:CE:90:7F:9F:DE:E5:69:38:44:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C26479C47F3434184CE53CD544F62280
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IFq2ifw9Yn32aM6Qf5_e5Wk4RCs.roa
Signing time: Fri 16 Jun 2023 04:09:04 +0000
ROA not before: Fri 16 Jun 2023 04:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c2:64:79:c4:7f:34:34:18:4c:e5:3c:d5:44:f6:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 04:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=205ab689fc3d627df668ce907f9fdee56938442b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:28:12:f0:f4:a0:93:86:9d:98:49:cf:f0:
8e:3e:8c:0a:60:dd:2a:e3:39:f2:c9:17:3f:53:e1:
59:48:77:47:0f:bc:95:ad:1f:16:2a:48:b6:86:36:
60:b7:95:b4:78:84:d0:cf:88:07:b3:7f:b8:24:5b:
f5:5c:86:1a:13:50:66:95:24:33:39:1a:44:c1:c9:
72:6c:4f:30:18:d0:8b:46:79:d4:c7:9f:f0:86:31:
d0:43:df:39:66:6e:99:64:22:2b:88:ca:70:0a:16:
c0:fa:7a:c3:d1:34:6b:12:3e:14:a5:f9:2c:ac:d1:
c0:3b:41:ad:85:53:2b:cc:80:b5:b3:7d:d7:78:64:
ad:9b:18:47:a3:c0:23:cc:ab:6f:85:28:2e:fa:31:
bc:41:ff:44:12:5b:10:cc:07:89:73:7f:36:77:0f:
ce:21:26:39:c7:d9:76:1f:47:0f:72:ae:bd:ef:c7:
93:3e:c0:3d:70:a7:e5:3c:6e:2e:21:40:83:c1:f1:
e4:2a:3e:80:c4:f5:e2:35:5a:b4:91:9c:cc:32:a4:
64:05:a8:1b:a5:9a:5c:ef:9d:57:c7:6a:74:57:0d:
e4:02:07:6a:76:c1:cb:69:89:ee:38:b2:12:de:a8:
f3:0a:db:50:af:b0:a1:58:dc:99:f8:e0:19:0e:4c:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5A:B6:89:FC:3D:62:7D:F6:68:CE:90:7F:9F:DE:E5:69:38:44:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IFq2ifw9Yn32aM6Qf5_e5Wk4RCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:08:a0:c3:b9:df:b0:ff:41:a3:6d:5e:6e:c7:76:f2:e8:d0:
c4:a9:53:09:a6:10:e8:63:eb:67:97:e3:50:d1:0d:14:34:95:
79:d8:8a:d6:ee:a0:1e:38:05:ad:86:66:0c:65:ec:78:3a:cf:
dc:36:0d:dd:1c:bc:97:2e:15:88:9c:66:a5:49:39:ec:7b:5e:
3a:d4:49:b1:d2:c8:8d:d6:49:27:19:18:d5:88:1c:0a:92:ba:
a4:9f:bd:a5:65:f5:1b:d2:d8:7b:63:10:81:46:9e:e4:9e:55:
89:7f:94:40:92:62:de:a6:53:38:bd:4a:e5:9e:6b:ed:67:37:
7f:0f:01:f3:b9:24:c1:87:c0:50:9c:61:b2:81:a1:12:66:ab:
90:61:c2:e4:e8:49:7e:60:3b:7e:b5:6f:74:7f:de:ec:40:7e:
d7:fe:2e:bb:75:61:5c:08:8d:92:53:cb:90:ec:73:37:4a:89:
22:84:57:27:47:48:b5:dd:17:e2:02:2e:47:05:61:1e:44:3e:
14:d8:75:36:d2:a2:55:78:c3:1a:ff:fc:2d:ac:d7:33:6b:d9:
4f:a9:5c:4f:16:70:fd:89:f3:ff:40:29:ae:5d:a0:a8:4d:72:
0a:93:e6:5a:ed:a2:8c:6e:a2:a8:9c:63:33:6c:08:c3:75:e9:
7b:bd:d9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:33:34 2025 by rpki-client