Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IhdobZB6f7JzFlPidzktHGAj3Bk.roa
File: IhdobZB6f7JzFlPidzktHGAj3Bk.roa (raw, json)
Hash identifier: k0iZXP5eWIVizV8lRVjlMVsHsXq6JqYghtO3hso3Ki0=
Subject key identifier: 22:17:68:6D:90:7A:7F:B2:73:16:53:E2:77:39:2D:1C:60:23:DC:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186469BE94F64A2349F16889B3525564A70
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IhdobZB6f7JzFlPidzktHGAj3Bk.roa
Signing time: Sun 12 Feb 2023 17:11:08 +0000
ROA not before: Sun 12 Feb 2023 17:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:46:9b:e9:4f:64:a2:34:9f:16:88:9b:35:25:56:4a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 17:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2217686d907a7fb2731653e277392d1c6023dc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:ad:08:0d:74:fe:8b:a8:00:e1:78:e4:88:
bd:35:62:81:d3:dc:f2:47:17:01:1a:17:b5:1c:0a:
24:c5:d6:e3:85:6d:93:fb:b9:b0:ce:a2:6a:cb:8c:
e3:6d:40:fd:a3:fd:45:dd:16:2d:98:73:2d:f1:2a:
57:ba:1b:06:b7:53:ee:ff:bf:bb:fb:1c:da:bc:99:
a1:4a:65:c7:51:cc:63:d6:e3:bf:e8:2d:01:da:fd:
0d:0a:33:a6:23:b6:cb:87:d9:13:e0:57:2c:65:a6:
42:72:3b:ad:f9:e3:49:64:36:0c:e2:c0:2b:1a:02:
78:98:56:0a:11:f1:9e:0a:46:b1:e0:d8:cf:d8:da:
64:49:51:05:1c:5d:a5:4b:3d:fc:a7:89:48:62:94:
24:b0:f2:b3:b4:7d:d9:a3:6a:b9:35:44:ba:52:a5:
7c:2b:0a:fc:2e:ba:bf:14:1d:1b:08:08:18:c2:45:
8f:2d:fb:14:62:f6:25:bc:49:cc:e9:b7:a0:a1:54:
54:16:66:b0:fa:7e:83:1a:23:c0:3f:ad:92:0f:c2:
df:42:3e:c8:9a:f2:b8:37:3b:a7:f5:ed:9d:bf:e2:
4a:f1:bf:86:f9:4d:a4:e2:82:59:f5:94:e9:e6:5d:
79:75:fd:b6:41:09:75:d5:2a:6a:c2:f7:aa:e7:65:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:68:6D:90:7A:7F:B2:73:16:53:E2:77:39:2D:1C:60:23:DC:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IhdobZB6f7JzFlPidzktHGAj3Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:eb:43:a3:0b:50:74:90:71:c0:a9:a3:65:42:26:1e:55:1b:
09:37:73:c0:d0:6c:fc:ac:4a:eb:a1:8b:d4:3b:f2:12:3e:8f:
31:d7:e6:c9:5b:dd:5d:cd:e6:a5:45:b8:e0:d7:0a:43:16:f3:
05:9e:b0:66:73:f9:d8:04:38:c7:18:35:4b:bb:46:49:c6:14:
32:21:98:25:fc:a3:c3:b7:c3:06:2e:1b:d6:a8:fa:48:66:c2:
32:66:5b:d0:84:6a:6d:4b:3d:7a:93:92:11:5f:29:d7:af:6b:
6a:85:e9:9c:e6:dd:27:a5:9f:83:79:e0:e3:38:96:5e:7a:0e:
c1:7f:f0:9d:27:ac:72:59:72:7f:b1:ce:49:12:12:96:b2:76:
ff:55:77:de:94:25:e6:29:5f:25:0c:dd:0d:1b:f5:26:fb:78:
2b:ab:5c:1d:6a:50:f9:fd:00:67:dc:88:54:67:bc:40:53:7f:
96:f4:97:41:32:76:d5:16:cf:ea:95:3f:d3:6b:fb:98:d4:cd:
29:2d:5c:44:ca:89:85:aa:c7:84:d9:01:6a:81:33:2d:87:07:
c2:05:34:5c:f7:59:11:4c:3a:35:5a:22:b4:5e:95:01:b7:93:
b5:3f:ac:b5:c9:af:7c:23:30:b4:72:9c:e2:cd:26:af:10:43:
0a:be:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:56 2025 by rpki-client