Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IgJECaA_XXseDXoPGraJMOEMKvo.roa
File: IgJECaA_XXseDXoPGraJMOEMKvo.roa (raw, json)
Hash identifier: 3HdEW0VFLBch0r+nSr5ZaeC03tneu04necGgrcTo75M=
Subject key identifier: 22:02:44:09:A0:3F:5D:7B:1E:0D:7A:0F:1A:B6:89:30:E1:0C:2A:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875F7B34F6501D7BC7C2B82BCF0CF65FD3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IgJECaA_XXseDXoPGraJMOEMKvo.roa
Signing time: Sat 08 Apr 2023 06:08:42 +0000
ROA not before: Sat 08 Apr 2023 06:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:7b:34:f6:50:1d:7b:c7:c2:b8:2b:cf:0c:f6:5f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 06:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22024409a03f5d7b1e0d7a0f1ab68930e10c2afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:bf:fe:65:33:83:3e:58:67:57:03:b6:a2:
8f:bb:6f:c4:d6:b0:4c:92:e2:5a:1b:2e:59:83:69:
d3:1d:2b:64:31:64:75:88:f6:cd:72:6e:4a:c9:1e:
13:4a:1f:6a:8a:fc:27:af:76:53:ce:98:d6:5b:5b:
3d:5c:b5:2c:c4:fb:d9:37:2c:55:e1:a6:0f:f3:e7:
16:df:a0:5c:10:b7:95:a2:41:96:ca:28:89:47:89:
05:df:9d:24:5d:67:fb:78:f9:17:ba:98:77:a8:da:
b4:ef:e3:5b:59:2e:18:40:f6:08:8b:21:8f:30:4e:
53:99:01:a8:68:98:d6:b5:39:f7:5e:cb:a0:f8:e8:
c3:56:97:61:e1:34:13:bd:9c:63:c0:49:06:b9:b2:
b1:a7:97:22:03:f1:36:72:b1:95:83:da:c9:c9:82:
91:e8:73:43:4a:86:c3:d2:8e:ae:6b:88:03:13:16:
f6:6d:70:35:c6:86:55:32:1c:d3:cf:62:97:e6:98:
4e:33:48:e6:74:84:12:ff:6a:0d:8d:99:23:c2:71:
82:9e:e2:07:ac:4b:55:1c:d6:6b:13:23:2b:3f:0c:
f4:81:94:42:73:49:36:93:54:df:a5:5e:7c:fa:82:
2e:56:f9:62:f5:eb:f5:79:0e:8c:19:7b:d3:cb:7b:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:44:09:A0:3F:5D:7B:1E:0D:7A:0F:1A:B6:89:30:E1:0C:2A:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IgJECaA_XXseDXoPGraJMOEMKvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:44:b8:47:59:2d:13:90:25:d3:f5:24:13:d4:9c:9c:6a:b2:
6a:37:72:d5:9f:71:86:28:2e:a1:1d:9d:fd:5c:0a:5a:90:4c:
3e:89:d7:e2:71:89:7b:47:ed:d3:17:0a:94:9e:90:9d:45:d8:
85:c1:c4:24:e9:5f:4b:67:35:86:e8:e9:5e:11:2d:28:94:55:
0d:e9:fa:3c:9a:aa:f3:b8:ee:17:4a:48:b6:63:d8:1d:b2:f9:
64:73:43:9a:47:e7:ff:c9:08:b0:8e:0b:67:81:4a:b5:71:95:
ef:e3:9f:96:84:8a:14:5f:5b:e9:1e:dd:bb:9a:3d:2c:35:7f:
c6:46:03:f8:d2:55:71:21:6a:30:ca:6a:14:8f:35:ce:01:98:
00:16:72:c9:58:b7:bd:26:87:e3:c7:01:b8:dc:e5:bd:b5:53:
38:91:63:a0:fe:7f:7f:47:58:68:73:3c:6f:a0:79:44:0a:f0:
4f:39:17:bb:45:93:77:55:76:e1:58:c0:25:69:e7:a4:e8:67:
0a:91:db:77:4e:8d:bd:6f:00:d8:0a:28:e5:9c:fc:2c:14:66:
7d:36:a7:4b:b7:a3:be:99:4d:37:99:eb:fe:40:2e:a2:89:6a:
4f:18:a5:8d:ca:36:02:22:52:57:cf:e9:e6:25:48:47:ae:1d:
86:3c:bf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:41:48 2025 by rpki-client