Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ih6rdQOB4ecJbGH6zpoQzMQgVls.roa
File: Ih6rdQOB4ecJbGH6zpoQzMQgVls.roa (raw, json)
Hash identifier: yrIJRa86bnr16Qm87eAed0VoAEKtgWwJ0xUgxlXzti8=
Subject key identifier: 22:1E:AB:75:03:81:E1:E7:09:6C:61:FA:CE:9A:10:CC:C4:20:56:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018696A7825EB4B3955A1262DBC2EDBBE825
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ih6rdQOB4ecJbGH6zpoQzMQgVls.roa
Signing time: Tue 28 Feb 2023 06:13:25 +0000
ROA not before: Tue 28 Feb 2023 06:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:96:a7:82:5e:b4:b3:95:5a:12:62:db:c2:ed:bb:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 06:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=221eab750381e1e7096c61face9a10ccc420565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:15:ca:17:11:4c:43:7c:5a:3d:33:aa:85:2e:
8e:c7:b1:61:3b:14:b8:fa:0f:49:5b:31:c4:31:55:
47:aa:c1:76:cb:8f:a9:33:e0:c0:ec:57:1c:21:de:
bd:e9:07:78:a2:72:4f:bd:88:9a:35:51:c7:09:31:
a8:32:96:39:5c:46:1d:d0:43:eb:45:64:70:2b:af:
aa:ca:66:96:44:04:ae:e9:92:30:30:e7:ea:0f:4e:
eb:43:e2:12:c1:96:a3:6d:68:76:70:ac:15:c5:95:
c3:8c:7f:79:e9:15:46:a0:cd:1d:ac:78:fb:f0:07:
b4:75:31:a7:64:01:0d:53:79:1e:99:be:81:e8:dd:
ae:66:c9:85:8c:e7:9a:00:9e:f1:56:a2:bb:f6:04:
f0:61:b6:23:34:f9:57:26:00:04:32:c8:1c:60:b3:
f9:7d:f4:96:73:c8:fd:4f:2a:e4:86:e9:2c:70:ab:
a4:90:27:de:40:7b:23:13:bc:02:30:36:76:af:c3:
83:c6:6b:b7:06:2f:6f:5d:21:35:6e:3a:a2:d9:cd:
d0:aa:a5:c2:b1:bc:0f:31:b4:98:24:e4:43:43:02:
a4:9e:bb:af:94:46:b4:02:b4:52:a6:62:a2:39:1e:
a3:f1:00:05:3d:ab:61:d6:8b:9c:15:93:49:8a:d9:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1E:AB:75:03:81:E1:E7:09:6C:61:FA:CE:9A:10:CC:C4:20:56:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ih6rdQOB4ecJbGH6zpoQzMQgVls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:e8:a4:60:35:87:df:f7:78:08:25:5c:d7:49:1f:41:ae:aa:
bd:62:ff:c7:26:ba:a6:f8:27:fa:4d:87:cc:44:5e:b5:cb:8b:
3b:29:a0:dc:f8:d3:81:82:81:4f:7f:a3:58:7d:3c:f6:9b:db:
2c:72:b1:c1:df:c9:d7:08:a4:8c:85:4e:df:99:d4:ec:b8:83:
ba:67:cc:df:b4:48:09:f4:2f:c0:55:3f:d1:7f:7a:ef:c4:32:
02:aa:93:97:12:32:f6:02:10:79:6a:7b:aa:44:0e:4f:3a:2f:
52:34:36:de:64:78:3e:22:30:f4:8a:47:0b:0d:7a:80:ab:3e:
51:29:39:bc:39:8b:cb:41:d7:2c:89:8a:f0:76:92:54:23:a0:
67:1b:19:63:bb:f2:e2:ec:8d:bc:32:24:23:c7:da:1f:3e:fb:
74:fb:71:bd:03:fb:f8:ad:69:1e:86:53:71:15:fa:4b:7d:20:
19:3b:39:18:19:be:36:2b:b5:55:f8:78:e6:ea:7d:f3:f7:16:
96:cf:85:06:f6:d1:46:21:87:4b:44:92:55:ae:d9:d6:d5:4c:
2f:0e:68:e3:d4:99:af:e0:3c:12:58:93:a4:28:7a:76:17:db:
49:61:a2:c7:c8:40:bd:87:30:86:be:c0:39:68:2c:53:0c:11:
dd:a1:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:33:10 2025 by rpki-client