Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ik6Pei_WN-cru7difuCDWDPf_Lk.roa
File: Ik6Pei_WN-cru7difuCDWDPf_Lk.roa (raw, json)
Hash identifier: OcP7bAPIJQN9EQTqLAF3SGhyZOPiE8ns44DtlqWxz0U=
Subject key identifier: 22:4E:8F:7A:2F:D6:37:E7:2B:BB:B7:62:7E:E0:83:58:33:DF:FC:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C94249BBD8780536597A6A4970CCF256
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ik6Pei_WN-cru7difuCDWDPf_Lk.roa
Signing time: Sat 17 Jun 2023 12:09:04 +0000
ROA not before: Sat 17 Jun 2023 12:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c9:42:49:bb:d8:78:05:36:59:7a:6a:49:70:cc:f2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 12:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=224e8f7a2fd637e72bbbb7627ee0835833dffcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:13:5f:6f:3b:26:7a:b7:57:10:f0:fc:d7:
c0:30:79:0f:2c:32:53:e3:9e:ae:16:d7:5a:16:5b:
ba:4e:59:42:f7:03:11:31:09:8a:14:b1:25:74:4a:
98:0e:7a:20:dc:90:4f:2b:e7:90:a6:5b:30:98:7e:
1c:d8:0c:8a:24:b0:a1:bf:09:d8:5c:af:99:b2:5b:
8c:a5:b5:c8:73:78:e5:82:29:0b:5a:30:c9:ca:95:
b7:52:c8:24:7f:16:b5:cf:2c:c8:04:ad:c0:2c:4c:
44:e3:c4:b1:73:00:02:ab:dd:d5:3a:81:53:97:dc:
3c:88:9d:dc:a1:75:87:76:8c:fc:5b:d8:ac:69:fb:
a1:2b:54:dc:c5:a5:6f:07:92:f1:29:0f:bd:b8:2f:
91:9f:e5:bb:8f:57:16:a2:7a:7b:54:d3:dd:ed:c3:
b0:58:96:7e:22:e5:bd:5b:77:01:d3:37:a7:c1:35:
06:50:51:9a:b5:a7:a6:70:c0:83:fe:63:27:11:83:
87:65:0d:00:b3:01:31:3d:46:49:37:59:39:93:7c:
9d:ec:05:2b:2b:a5:29:ec:f5:3c:ec:a7:d8:88:f8:
6c:86:5d:67:b5:8f:12:96:f3:cd:4e:4c:25:41:ae:
cd:6e:7d:1e:1b:7f:e8:4d:5f:43:1b:6c:76:b2:ab:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4E:8F:7A:2F:D6:37:E7:2B:BB:B7:62:7E:E0:83:58:33:DF:FC:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ik6Pei_WN-cru7difuCDWDPf_Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:39:ca:22:b0:d0:bc:d1:8b:4c:80:07:63:15:c1:84:4c:50:
4e:2e:d8:e1:9d:e5:e9:c8:c5:8b:21:3f:86:34:19:44:8a:4a:
9e:08:ee:b6:31:1f:44:4f:34:ec:d3:ff:5e:eb:b8:c0:9c:39:
05:d8:0d:9c:cb:41:a9:37:63:7d:d6:22:4d:80:50:fe:d9:31:
1a:62:89:a0:60:ac:51:d4:ba:d7:2c:4b:1a:c1:48:2d:22:0f:
a0:d5:49:0e:6d:97:4e:41:d8:b7:c9:82:1b:bd:4d:07:ba:3e:
49:cf:be:42:c6:0b:bd:2e:1d:ea:ef:7e:f6:f5:fa:3f:13:a9:
f5:4b:06:fe:5c:5d:f2:f5:6c:81:b5:73:fa:37:fb:4b:e0:d3:
6a:ba:70:81:73:dd:8b:a9:a7:71:ec:e8:cc:6c:e8:a1:a5:29:
b6:e8:02:07:1c:50:4b:b2:24:d3:9d:22:39:52:9b:39:3e:43:
ce:c3:53:af:8d:e5:ad:00:0a:e9:62:a1:98:fa:46:34:0e:46:
40:fa:c6:1a:d0:a4:eb:52:55:9d:78:7c:34:3c:35:2a:46:4d:
09:d4:4c:a9:87:b8:03:91:d7:ee:bd:93:99:09:f6:a9:21:a7:
03:17:f1:e3:c6:5b:b3:ff:ca:fc:29:ee:4f:66:72:2d:54:c7:
ab:a8:9a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:31 2025 by rpki-client