Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IICzncVLl9n1RJKejav1dE6CWik.roa
File: IICzncVLl9n1RJKejav1dE6CWik.roa (raw, json)
Hash identifier: aXqi+SvxcbdI9H+Q+Ns7Qx5iz+H6E1ck80oC9N6ziuc=
Subject key identifier: 20:80:B3:9D:C5:4B:97:D9:F5:44:92:9E:8D:AB:F5:74:4E:82:5A:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7299D2DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IICzncVLl9n1RJKejav1dE6CWik.roa
Signing time: Tue 15 Mar 2022 02:09:52 +0000
ROA not before: Tue 15 Mar 2022 02:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922683611 (0x7299d2db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 02:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2080b39dc54b97d9f544929e8dabf5744e825a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:10:f0:dc:ef:23:11:bd:13:a0:14:13:a6:
aa:b3:3f:77:07:f5:8d:6c:70:8d:fc:93:e2:21:2c:
77:7e:8e:0f:e6:58:e9:88:a5:f7:8c:25:72:ac:ef:
f9:6f:0f:5b:ca:74:51:6f:b8:4f:9e:03:5e:c7:67:
c5:4c:f2:57:39:9a:0f:f2:c5:6f:af:01:f4:6c:ee:
a4:5b:bb:c4:3f:75:12:43:00:42:71:b3:e7:30:bd:
8d:36:57:27:05:53:0f:b9:5a:d1:50:8b:c3:48:00:
af:5c:af:9c:6e:02:fd:29:9e:3e:c6:23:f7:f4:1b:
f4:61:fd:4b:b3:7e:86:bc:62:0e:2b:ab:7e:59:75:
53:6e:95:9c:e2:50:06:82:49:7b:31:15:da:1e:bf:
81:a8:14:3d:14:9c:bb:6a:52:d6:f9:9a:0c:d6:50:
57:8f:20:e1:dd:b9:2f:cb:09:c8:5f:3e:bc:71:76:
fd:3c:f8:de:4e:6e:a5:ab:d1:5c:1c:15:5f:54:48:
fc:7e:1b:3b:d5:b7:21:c4:94:49:8e:13:52:5a:12:
fb:60:6c:80:a0:8a:d3:59:a2:0a:e9:12:2c:d3:f8:
82:46:6c:4f:48:ac:b6:92:5a:95:c7:ad:0c:9c:ab:
22:6e:c3:b2:b8:39:a7:c4:0a:60:25:71:5f:03:26:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:80:B3:9D:C5:4B:97:D9:F5:44:92:9E:8D:AB:F5:74:4E:82:5A:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IICzncVLl9n1RJKejav1dE6CWik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:ab:c9:4a:ba:1e:84:47:fe:ef:1b:48:a0:64:fc:56:6d:a2:
04:f2:59:0f:e1:e2:71:1c:50:07:4b:f1:4f:9a:ec:99:b9:fc:
a1:59:6b:e0:16:47:c9:3f:c9:8f:8e:07:70:dc:90:b2:9b:2c:
11:3c:f2:ff:d3:a5:72:5f:01:d3:67:07:42:3e:c4:2c:91:7b:
6b:7c:03:47:d2:e5:f3:84:95:b9:9e:88:89:d9:6b:c3:0a:43:
73:4e:ef:ee:2b:7d:d8:70:4c:3b:2f:ba:72:ad:18:2d:e9:73:
e1:49:8a:04:1c:35:e6:1f:f8:b3:bb:e3:e9:37:a0:85:f8:8e:
ba:b9:5b:53:5a:80:76:cd:dd:ee:77:0f:44:2d:91:f6:21:75:
46:44:f2:37:fb:8c:41:a5:24:67:c0:77:7a:52:d4:84:76:f7:
e9:4a:62:c1:dd:e9:42:2c:da:8d:a7:f8:17:f9:a6:31:06:e0:
0a:43:17:bb:89:10:51:b9:6c:fe:1e:86:db:f0:ed:82:62:ed:
f0:ba:37:96:2f:8d:58:c1:2b:43:be:f7:e5:81:be:2c:da:fc:
bf:bf:6d:f4:ce:fb:50:cf:4a:b4:26:ac:c5:6b:bd:8d:5e:17:
fe:d5:05:22:12:53:6a:77:5d:11:6c:e2:df:c4:05:21:3b:18:
39:45:b4:de
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcpnS2zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
NTAyMDk1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjA4MGIzOWRjNTRi
OTdkOWY1NDQ5MjllOGRhYmY1NzQ0ZTgyNWEyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALpNEPDc7yMRvROgFBOmqrM/dwf1jWxwjfyT4iEsd36OD+ZY
6Yil94wlcqzv+W8PW8p0UW+4T54DXsdnxUzyVzmaD/LFb68B9GzupFu7xD91EkMA
QnGz5zC9jTZXJwVTD7la0VCLw0gAr1yvnG4C/SmePsYj9/Qb9GH9S7N+hrxiDiur
fll1U26VnOJQBoJJezEV2h6/gagUPRScu2pS1vmaDNZQV48g4d25L8sJyF8+vHF2
/Tz43k5upavRXBwVX1RI/H4bO9W3IcSUSY4TUloS+2BsgKCK01miCukSLNP4gkZs
T0istpJalcetDJyrIm7Dsrg5p8QKYCVxXwMm+tMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQggLOdxUuX2fVEkp6Nq/V0ToJaKTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0lJQ3puY1ZMbDluMVJKS2VqYXYxZEU2Q1dpay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBpq8lKuh6ER/7vG0igZPxWbaIE8lkP4eJxHFAH
S/FPmuyZufyhWWvgFkfJP8mPjgdw3JCymywRPPL/06VyXwHTZwdCPsQskXtrfANH
0uXzhJW5noiJ2WvDCkNzTu/uK33YcEw7L7pyrRgt6XPhSYoEHDXmH/izu+PpN6CF
+I66uVtTWoB2zd3udw9ELZH2IXVGRPI3+4xBpSRnwHd6UtSEdvfpSmLB3elCLNqN
p/gX+aYxBuAKQxe7iRBRuWz+Hobb8O2CYu3wujeWL41YwStDvvflgb4s2vy/v230
zvtQz0q0JqzFa72NXhf+1QUiElNqd10RbOLfxAUhOxg5RbTe
-----END CERTIFICATE-----
Generated at Thu May 1 01:48:04 2025 by rpki-client