Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IRhKIVrMTN4cP2ZK7EgRJWhnlLg.roa
File: IRhKIVrMTN4cP2ZK7EgRJWhnlLg.roa (raw, json)
Hash identifier: fvT992ayEEFYVSZ0fyHb9ZsVUA3tLe4708QR0oWsyG0=
Subject key identifier: 21:18:4A:21:5A:CC:4C:DE:1C:3F:66:4A:EC:48:11:25:68:67:94:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018587A083CD1FB3D5E553C7C832FE5BCE2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IRhKIVrMTN4cP2ZK7EgRJWhnlLg.roa
Signing time: Fri 06 Jan 2023 15:08:41 +0000
ROA not before: Fri 06 Jan 2023 15:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:a0:83:cd:1f:b3:d5:e5:53:c7:c8:32:fe:5b:ce:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 6 15:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21184a215acc4cde1c3f664aec481125686794b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:18:3d:8d:7c:08:13:58:e0:b2:dd:60:b2:d0:
48:bc:cc:1f:21:93:ef:62:9f:39:7d:be:94:46:7f:
48:3a:09:fe:fc:f2:04:86:1a:04:36:7f:fc:15:84:
5a:e0:f5:92:3f:bc:53:73:e5:6e:d4:ff:78:1c:ed:
b3:4c:80:f8:9a:bd:34:c9:42:ff:50:ec:02:76:fa:
1b:c6:84:01:60:f3:f7:79:4a:c5:0d:65:f1:d3:43:
b7:db:12:43:75:46:56:2a:b6:57:35:b8:4f:69:94:
dc:e4:6d:24:94:f8:6f:57:09:15:1b:aa:32:3f:11:
24:bf:cf:42:e3:78:31:44:c8:16:cc:aa:b9:e6:cc:
57:14:eb:6d:fc:e4:34:1b:ee:34:fb:00:6b:d4:52:
d5:fb:08:1a:dc:16:f6:0c:f4:7f:2e:ef:a6:7c:7b:
00:72:3c:cc:94:8a:9d:81:4e:b8:58:2b:e5:b0:8f:
3f:00:d3:3c:b9:b6:b4:c4:69:f8:7e:a4:ac:c4:f9:
ce:75:20:fc:14:6d:70:0d:8a:b1:64:d2:30:d3:dc:
ce:95:0b:7e:c2:c2:b1:ab:35:10:eb:66:65:2d:0b:
68:90:c7:90:7e:8d:2e:b3:8c:44:ee:31:04:2f:7b:
ff:09:66:ca:9d:40:69:12:5d:8e:10:e7:0c:4f:34:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:4A:21:5A:CC:4C:DE:1C:3F:66:4A:EC:48:11:25:68:67:94:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IRhKIVrMTN4cP2ZK7EgRJWhnlLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:70:b7:53:81:51:ab:84:e6:3b:cb:2c:20:34:78:68:11:c4:
10:e2:c9:4e:91:c0:1e:2d:b5:00:74:e4:9e:99:e8:88:94:29:
ac:b3:44:80:c4:aa:9c:f0:16:39:71:56:5d:07:ce:97:00:07:
bf:01:0d:28:b9:3c:8c:e4:ae:ed:f4:3c:b9:ea:24:91:70:83:
3a:1e:58:a9:12:b3:27:bd:aa:26:8b:e4:cf:83:e6:80:07:02:
4b:ed:76:57:f3:dd:5a:4b:e8:cb:ce:e1:22:8a:72:3a:6e:76:
5f:c0:d9:19:8c:b9:90:cb:19:63:9b:4e:b8:2b:dc:a0:a0:fb:
96:79:a9:17:37:0e:d7:85:51:f3:4b:7b:51:70:90:ec:48:dc:
9b:da:ae:63:be:da:cf:14:47:02:1d:fe:f9:e8:d3:ea:db:f4:
af:92:15:60:42:50:e5:01:e6:f4:6f:f0:78:ab:ed:0f:0a:9e:
5c:29:47:2b:81:e5:ac:d5:ca:d3:03:06:b2:f6:ff:94:1a:ca:
7a:cd:b2:9d:2c:6e:05:7a:5a:19:73:df:21:fd:50:9e:89:05:
49:14:a4:6b:2c:65:14:8a:3f:8a:c7:4b:ed:c4:55:64:91:3b:
47:eb:65:30:7b:90:a9:e9:3a:fd:cb:e1:36:c0:99:7c:fe:ef:
7b:f4:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:55 2025 by rpki-client