Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfDmdw46ESXsnlQZNGTy4FT_IvA.roa
File: IfDmdw46ESXsnlQZNGTy4FT_IvA.roa (raw, json)
Hash identifier: otXmq/GQqE832gwA3rY+6Wp9RxpTznKaprpPIB7dtj4=
Subject key identifier: 21:F0:E6:77:0E:3A:11:25:EC:9E:54:19:34:64:F2:E0:54:FF:22:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01844DED551A49B240ADB3DE802B4138691E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfDmdw46ESXsnlQZNGTy4FT_IvA.roa
Signing time: Sun 06 Nov 2022 17:11:50 +0000
ROA not before: Sun 06 Nov 2022 17:11:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4d:ed:55:1a:49:b2:40:ad:b3:de:80:2b:41:38:69:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 6 17:11:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21f0e6770e3a1125ec9e54193464f2e054ff22f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:3d:84:fe:99:09:60:55:36:47:85:7c:22:
19:59:be:24:c9:84:82:9d:cf:5c:37:74:5d:58:df:
13:65:e1:a3:e3:9a:ee:5e:ed:24:21:07:ac:21:e8:
5f:4c:62:df:f8:38:e0:b6:e0:d2:46:3c:f0:34:d2:
be:2b:63:68:b7:54:aa:78:ba:d7:ee:c5:29:ea:df:
50:b5:c4:fa:ff:d2:ac:3d:a2:f1:5b:c8:47:6d:bb:
47:34:1c:59:13:fc:ab:1b:6d:67:23:f6:83:40:fb:
da:1b:0c:8f:3f:5f:67:36:be:6e:70:d6:30:ed:87:
7c:e5:78:cc:fb:f5:6b:6e:31:ff:54:24:f3:fb:19:
8f:6f:24:92:a7:b6:6a:65:a3:e9:31:2d:6b:83:3d:
9b:ee:3f:ff:c0:e8:d1:0b:08:b2:2e:6f:83:fb:cd:
68:83:7f:dd:ad:61:ae:50:e0:bd:a2:78:f0:8f:96:
99:24:7b:b4:b9:99:b2:65:04:1b:8a:d8:69:21:cd:
03:8c:55:14:48:38:df:92:20:d1:0c:62:31:e9:17:
84:d5:e9:5e:0a:e9:0a:84:c2:08:7a:60:93:35:8e:
1d:39:5d:2a:dc:e6:4c:4d:d8:25:80:92:2b:f5:06:
5d:da:e6:bc:6b:ed:9b:c0:88:69:b3:b6:74:d6:09:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:E6:77:0E:3A:11:25:EC:9E:54:19:34:64:F2:E0:54:FF:22:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfDmdw46ESXsnlQZNGTy4FT_IvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:48:ef:94:7e:50:47:e3:1d:65:b8:ec:cb:43:78:a3:39:c4:
86:e2:ca:98:11:c9:d3:15:10:b1:0f:28:02:62:4d:22:64:d7:
5d:88:05:9a:92:a9:7c:63:f3:4c:9c:9b:af:57:1b:16:24:f8:
dc:6b:b9:d9:8f:88:f0:a9:f8:88:72:c7:54:9a:82:df:63:65:
6e:92:44:51:ae:74:fd:32:f6:81:e5:61:73:b5:39:11:36:b2:
05:a9:6e:f7:4a:30:53:9e:af:4c:01:94:06:ca:7f:dd:bb:c3:
95:8c:82:28:35:5e:1b:73:9b:75:5b:2e:6f:2c:40:fc:ee:fd:
ab:29:32:75:d2:e5:b5:7b:39:cc:f5:a5:e0:ac:5a:47:1d:4f:
94:78:dd:f7:76:ab:ea:41:e3:41:ea:a3:80:2a:fc:22:da:98:
6e:14:74:9a:92:65:a4:a7:39:cb:37:88:0e:a7:6d:50:f1:6a:
81:5f:46:23:c6:cd:d1:aa:1b:94:97:16:1d:62:3e:cc:af:ac:
1e:5c:85:7d:14:30:47:51:65:10:74:f4:96:69:9e:f1:90:a0:
b2:8c:08:58:3d:83:70:a0:43:13:c2:66:49:75:35:25:d5:67:
80:f4:1c:58:d6:7e:b7:77:e3:40:69:88:f6:fc:fc:8d:63:77:
c2:89:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:15:51 2025 by rpki-client