Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IeFUf2Urd1_MSuWy-yNAdqOo5bE.roa
File: IeFUf2Urd1_MSuWy-yNAdqOo5bE.roa (raw, json)
Hash identifier: qXHhDBI6H7MvxJGAmFEu0GUFqZDFV3+DVGyuCWs3Y0A=
Subject key identifier: 21:E1:54:7F:65:2B:77:5F:CC:4A:E5:B2:FB:23:40:76:A3:A8:E5:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018676EA12DED9CE345B576017B82B3FC0B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IeFUf2Urd1_MSuWy-yNAdqOo5bE.roa
Signing time: Wed 22 Feb 2023 02:18:17 +0000
ROA not before: Wed 22 Feb 2023 02:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:76:ea:12:de:d9:ce:34:5b:57:60:17:b8:2b:3f:c0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 02:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21e1547f652b775fcc4ae5b2fb234076a3a8e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:75:30:ce:ad:8f:0c:ef:48:0b:fc:4a:4f:
bd:42:04:2d:b5:a0:56:78:51:aa:dd:12:0f:50:01:
8c:d0:7f:87:c2:18:a7:28:5a:8c:fa:7a:25:07:c9:
a6:7e:4c:fe:57:fe:b4:55:f7:5e:1d:1d:c5:27:2b:
6f:03:d9:38:37:3a:14:4e:e7:ec:de:0a:c8:98:17:
37:ab:54:29:5a:20:6a:5e:82:b2:81:3a:16:84:63:
f9:24:98:55:0c:8a:62:f3:ec:6b:1e:0f:b3:dc:7a:
17:99:82:95:3c:e3:dd:ee:6e:ec:45:aa:97:73:54:
81:6f:25:be:48:b1:65:ba:de:d6:82:f1:ae:0b:11:
3e:87:77:5b:73:19:5b:c3:7e:a4:78:40:5d:00:cc:
bc:75:c9:a4:99:de:9b:85:4c:41:e8:a4:7b:0e:7b:
77:f8:7a:9d:71:da:3b:9c:bf:8b:78:b3:7f:ad:41:
de:16:28:0e:2c:0a:b2:56:42:ab:de:55:21:fe:7d:
e1:a3:95:0b:d2:53:7b:60:b3:1b:0e:ee:3c:2f:b5:
32:8e:c0:c1:a9:fe:5f:51:7f:62:59:b1:98:90:57:
ab:f3:55:d4:86:72:3e:99:33:df:32:69:33:05:51:
6f:01:f1:c2:52:13:50:6f:67:d4:24:f9:f8:1c:f8:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:54:7F:65:2B:77:5F:CC:4A:E5:B2:FB:23:40:76:A3:A8:E5:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IeFUf2Urd1_MSuWy-yNAdqOo5bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:40:46:a0:97:61:84:6a:45:ed:bf:c5:e0:44:17:15:96:e7:
64:b2:ac:bf:3a:a0:82:5e:0f:4d:1d:81:d0:ae:21:fa:b0:2d:
07:93:37:d7:0a:27:e2:39:01:0e:df:a7:94:bc:98:1c:a4:ea:
b9:4a:35:47:9b:7d:7b:13:23:5a:ff:a6:ea:c2:54:16:7e:43:
d5:7a:e0:96:69:95:ff:aa:60:c1:16:bb:c4:55:06:a9:c1:42:
bb:7a:55:50:fc:04:c0:8e:af:d5:68:5a:d9:63:90:0f:0b:96:
5b:9b:6a:25:38:99:83:4a:42:6c:fe:ec:fa:6c:92:26:0b:74:
47:53:23:73:f1:af:67:d9:d4:c9:d7:b4:8d:0a:82:88:cb:74:
4e:42:20:89:51:49:de:fb:97:cf:f7:d4:9a:e0:21:e3:67:fa:
ef:02:53:cb:db:e7:6e:15:8a:57:7b:6a:df:2d:e6:4d:17:81:
ad:fe:bf:93:34:a8:36:54:f1:47:42:2e:87:07:ad:09:95:0c:
70:8d:d3:0d:3a:ff:e9:09:47:1b:fc:3b:14:eb:5f:48:86:91:
ae:31:67:40:a1:50:bf:72:6e:33:4c:30:1b:f8:7a:d1:55:cb:
18:c0:45:b4:64:bf:1a:a6:e6:2f:27:59:95:0d:23:c6:7f:b8:
da:d0:e2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:27 2025 by rpki-client