Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IeMW80qDRUrnfu4I9hSlI6H8A6k.roa
File: IeMW80qDRUrnfu4I9hSlI6H8A6k.roa (raw, json)
Hash identifier: OxWDntBR1Ms0xdPc8yF453TalnCdotZYcpa+6W+jTVM=
Subject key identifier: 21:E3:16:F3:4A:83:45:4A:E7:7E:EE:08:F6:14:A5:23:A1:FC:03:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DBB855787EC6ABFE52D8E105884AAD86
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IeMW80qDRUrnfu4I9hSlI6H8A6k.roa
Signing time: Wed 09 Aug 2023 19:13:58 +0000
ROA not before: Wed 09 Aug 2023 19:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:db:b8:55:78:7e:c6:ab:fe:52:d8:e1:05:88:4a:ad:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 19:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21e316f34a83454ae77eee08f614a523a1fc03a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:84:93:40:35:f5:c3:5e:a0:d5:2a:77:c3:
41:83:f9:f0:d7:0b:78:6c:9a:e2:44:94:67:d1:dd:
9c:e1:e9:3f:59:88:3f:12:50:84:bf:14:82:1c:88:
9b:83:eb:3c:be:b8:49:b0:b2:1b:fd:d0:bd:9a:9d:
a2:92:ea:9f:c9:b5:ff:45:2e:96:eb:38:6c:dd:4e:
c5:9f:c5:88:25:0c:3f:6a:83:da:35:35:52:ed:80:
00:6d:21:97:a8:59:b5:dc:45:73:af:1b:4b:a7:08:
9a:b3:f2:ae:28:52:bc:45:8a:ac:64:6f:0d:a3:ad:
92:01:56:bc:74:45:9c:fd:1b:f9:c9:c9:0a:d3:ac:
1d:8d:e7:d3:f6:7b:42:7f:ad:f5:22:58:d2:22:77:
b8:12:92:e7:d6:b6:a8:26:c2:b9:f1:1a:22:a6:14:
f2:3f:03:94:fb:59:c6:16:9e:65:53:3b:17:f4:bc:
cf:3a:9b:12:92:45:66:0f:8e:99:a1:57:f3:22:35:
27:ce:d0:80:c1:b6:84:bb:e4:98:45:d0:4e:75:7e:
14:27:ff:64:e4:e7:99:c5:95:ff:82:12:ef:c0:3f:
0d:1c:39:4d:72:06:78:19:06:28:e6:36:02:71:05:
a9:2b:0a:98:cc:12:f1:45:88:f9:a3:aa:4a:59:81:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E3:16:F3:4A:83:45:4A:E7:7E:EE:08:F6:14:A5:23:A1:FC:03:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IeMW80qDRUrnfu4I9hSlI6H8A6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:88:86:c7:8a:91:d9:a7:f0:22:71:5e:8c:3f:7d:f1:db:95:
a1:a4:de:6e:c3:0b:de:ab:3c:0d:bb:d3:8a:24:62:e5:4e:b4:
05:53:cc:8d:9c:bd:35:ce:9d:fb:b4:f5:2e:72:eb:4a:e3:8b:
c8:30:33:c0:32:dc:41:55:fd:26:d9:ab:ca:d8:4f:c6:59:9c:
94:23:1a:b4:5f:92:ea:ce:8a:90:6f:e7:fd:1d:5e:b7:6a:56:
45:d4:31:4b:5c:e4:3c:46:97:2e:e5:d0:23:d0:00:a4:a2:6b:
c5:4f:38:36:a7:e6:70:21:55:7b:27:0c:4e:e7:6d:2b:8d:9f:
64:a4:97:6c:73:7c:5a:e7:8a:1e:4a:c8:65:47:7c:0e:dd:de:
d8:c8:50:11:ad:89:8e:2e:ae:c0:dd:b1:b0:b1:36:9a:94:9f:
b0:fd:51:0f:cd:7c:e0:71:a8:3e:47:8a:d1:b3:ea:b6:5f:34:
92:63:32:96:9f:9c:12:fc:12:e2:f8:23:9f:6b:3b:03:ad:62:
08:41:de:36:a8:a1:23:d4:04:b2:6a:7c:83:bc:40:4b:6d:e9:
ec:2f:5d:19:14:06:ff:80:cb:37:d5:7f:d9:db:0c:5f:e5:fd:
c7:6c:b6:ab:40:fc:6f:8f:b0:9f:7e:15:dc:3c:7a:e8:79:d6:
8a:f8:42:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:30:10 2025 by rpki-client