Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IYawn5ccbEhUs-HMFeocO4mospY.roa
File: IYawn5ccbEhUs-HMFeocO4mospY.roa (raw, json)
Hash identifier: JG10N+22P6Kv27PwaxbBwjjSvBCjFMZLmcX6clBp26I=
Subject key identifier: 21:86:B0:9F:97:1C:6C:48:54:B3:E1:CC:15:EA:1C:3B:89:A8:B2:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6689FDAD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IYawn5ccbEhUs-HMFeocO4mospY.roa
Signing time: Mon 31 Jan 2022 03:12:09 +0000
ROA not before: Mon 31 Jan 2022 03:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720319405 (0x6689fdad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 03:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2186b09f971c6c4854b3e1cc15ea1c3b89a8b296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:e7:81:b4:22:25:39:ff:7f:49:9c:6e:86:
53:b2:33:30:09:d2:7d:40:ca:15:9a:6e:20:00:13:
50:4a:33:ac:34:76:5b:79:8e:20:3d:1c:b8:17:f1:
82:64:44:e0:9b:fd:19:00:34:9d:5c:a5:26:87:d6:
72:9a:23:eb:cc:76:32:e9:6b:fb:3c:68:b0:4f:c7:
d3:6d:a2:45:60:e4:40:18:24:7e:a6:c5:83:84:4a:
2c:ec:4b:07:7f:ee:91:d8:7c:ed:ba:77:69:5e:d9:
c6:bd:16:d2:d2:87:6f:9b:4e:0a:a8:bc:a0:bc:42:
74:4d:ec:bb:d9:ac:b7:28:4f:7d:8c:5d:c6:bc:87:
fb:ee:bf:36:48:e8:f0:0e:e2:81:4c:37:d2:78:36:
69:51:7e:ab:56:9e:8c:e2:c9:fc:f1:6f:4d:1d:9c:
b0:da:52:6a:30:ea:94:f7:77:c1:64:4f:ae:c1:e8:
3b:6e:42:d5:aa:ba:79:a7:ea:9d:c6:82:b7:2a:25:
34:49:2a:a0:e6:4d:d0:a9:c4:4b:a1:2c:48:c6:b7:
0e:4b:f4:e4:63:e9:4b:a6:c3:e9:2e:54:99:51:0c:
69:d7:f8:fe:f0:58:07:94:0d:95:8f:d8:52:47:07:
e8:1e:0b:33:b0:8e:0d:7e:a6:43:c7:4e:56:c1:c0:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:86:B0:9F:97:1C:6C:48:54:B3:E1:CC:15:EA:1C:3B:89:A8:B2:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IYawn5ccbEhUs-HMFeocO4mospY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:ca:99:a1:56:51:8e:5f:af:b3:b8:4e:47:95:15:ca:25:dc:
63:9e:1f:33:89:34:32:9c:06:ff:e8:12:cb:1c:54:f9:9a:e3:
96:d6:a1:2e:87:f2:19:1c:12:ce:12:ca:bc:59:ae:91:d5:a1:
a6:c1:8e:54:3f:bf:4e:bb:da:40:30:8a:9c:e8:d0:df:27:b6:
df:e1:94:ba:d5:e0:c8:56:60:91:dd:38:1e:49:9d:ae:3f:a8:
1d:3a:32:bc:ea:67:d5:6b:8b:1d:a1:39:53:29:9d:4c:04:23:
3e:8f:94:d7:8f:09:df:48:05:47:7f:80:ce:1b:dc:9e:22:90:
9b:48:0f:b7:b4:fc:98:49:29:90:f9:c3:21:b3:67:ab:ef:29:
19:ea:c8:18:4e:b7:b1:d9:80:f2:46:ea:7c:8a:ff:1e:4a:b6:
e3:18:da:55:3d:d1:8e:57:ed:83:2b:02:26:e3:c3:cd:51:7c:
dc:55:7a:31:bc:e8:49:7d:49:ed:e7:91:48:d1:48:7b:f3:c3:
fd:56:58:8d:8b:93:78:e9:67:05:68:a7:69:3e:d8:c8:1e:5c:
ab:99:32:26:45:54:f2:05:56:2e:d5:09:63:5a:a2:54:94:45:
95:06:cf:1e:86:4f:18:0c:ea:8e:9e:f2:70:97:0b:66:ad:2f:
9d:20:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:18:43 2025 by rpki-client