Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IeycdliXkhMgdss5FQexlRjDYTM.roa
File: IeycdliXkhMgdss5FQexlRjDYTM.roa (raw, json)
Hash identifier: yG4EZgmfBqXoG9ny26CKrcfO38/fxfFf2vcgBVyWrhM=
Subject key identifier: 21:EC:9C:76:58:97:92:13:20:76:CB:39:15:07:B1:95:18:C3:61:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188627A57A57025038BB32870A9B8960387
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IeycdliXkhMgdss5FQexlRjDYTM.roa
Signing time: Sun 28 May 2023 13:09:24 +0000
ROA not before: Sun 28 May 2023 13:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:62:7a:57:a5:70:25:03:8b:b3:28:70:a9:b8:96:03:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 13:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21ec9c76589792132076cb391507b19518c36133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c9:1e:e2:ad:98:9b:bb:60:cd:35:1f:4f:84:
5c:fe:94:50:6e:f3:8c:8e:24:41:a6:b7:a2:8c:41:
0f:ad:57:c2:b5:76:e2:88:14:66:52:7a:64:54:37:
92:53:58:f8:55:b3:5b:5d:da:e3:53:4d:e0:57:b6:
b2:3d:87:9e:c3:80:4b:17:cf:e9:07:27:1f:6c:c6:
d6:06:eb:a1:3c:97:f9:3c:dc:f5:be:36:d0:ca:d8:
99:81:5a:37:59:8f:24:86:79:82:80:50:97:e6:34:
09:63:d2:4e:30:ab:38:b7:d9:6b:94:9a:56:cf:59:
1e:c2:12:b5:f1:e9:57:a2:ed:2e:65:16:5b:cb:f8:
d5:2e:c0:bd:41:d1:e9:7b:34:91:b4:8c:7b:8f:60:
c7:a1:83:56:b6:53:04:04:f1:b2:ac:88:90:ac:4a:
51:9e:3a:c1:80:a2:5b:41:2b:14:23:49:f2:6f:cf:
88:7b:63:7d:69:1e:6e:9b:ac:b7:e6:fe:07:b9:6d:
e5:19:b2:e8:9d:b3:27:bb:26:9a:13:b5:3a:64:78:
82:58:48:5f:1d:f3:3c:f8:e9:e7:6d:4a:59:a6:02:
4d:3a:f1:8e:f0:ac:6d:77:8c:5c:08:f0:ce:72:a9:
0e:cf:f8:a3:95:cd:06:4a:4e:ae:3f:ac:de:09:a5:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EC:9C:76:58:97:92:13:20:76:CB:39:15:07:B1:95:18:C3:61:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IeycdliXkhMgdss5FQexlRjDYTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:a5:4a:d1:55:b1:04:7e:72:34:14:9e:9b:ec:27:b4:e1:ff:
88:68:70:c9:72:3d:5d:7c:87:26:f1:73:ed:3b:b6:6d:61:6b:
b9:10:7b:d0:13:e9:85:6f:84:5b:66:e7:27:d5:58:43:9f:1e:
62:23:0d:2a:94:e4:c4:65:1e:38:07:e4:50:30:f1:11:36:54:
5a:75:02:e5:e6:db:de:ac:bc:07:55:ab:d4:24:cf:51:90:5a:
63:f9:d9:f6:56:f1:9e:b2:b8:a0:b0:e8:6c:dd:04:e2:25:f9:
88:85:4f:74:11:7e:4e:e9:e3:97:2b:ad:77:be:47:f7:4b:3d:
c4:00:fd:84:50:2b:52:0f:a6:60:1d:5a:ea:56:53:49:bd:ef:
43:2f:47:66:61:9e:75:48:d4:72:dd:ef:e9:12:87:27:c0:b6:
17:72:01:a3:c9:08:04:ba:7f:47:75:db:3e:80:b4:a1:ab:bb:
0e:9b:dc:7e:c4:46:c4:c6:78:3f:80:41:de:33:d5:d7:7e:ac:
bd:1a:42:83:44:96:59:13:cc:be:bc:69:79:b9:e6:6e:6a:9d:
eb:42:55:c6:75:57:12:f0:ff:02:df:59:8e:75:50:d0:75:88:
1a:3f:90:e0:82:da:3d:6e:ff:64:ce:b4:7f:95:c8:89:86:56:
c1:64:32:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:36:51 2025 by rpki-client