Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IkD8tID4j_IWxBkJ_zvvkwJ-g-w.roa
File: IkD8tID4j_IWxBkJ_zvvkwJ-g-w.roa (raw, json)
Hash identifier: vb+KpWcxDFXy1y5aAV1qWztdLNvd0Z8uabbtndnAIts=
Subject key identifier: 22:40:FC:B4:80:F8:8F:F2:16:C4:19:09:FF:3B:EF:93:02:7E:83:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187089754559E25271127524A6432AABBAD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IkD8tID4j_IWxBkJ_zvvkwJ-g-w.roa
Signing time: Wed 22 Mar 2023 09:12:27 +0000
ROA not before: Wed 22 Mar 2023 09:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:97:54:55:9e:25:27:11:27:52:4a:64:32:aa:bb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 09:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2240fcb480f88ff216c41909ff3bef93027e83ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:84:69:94:ef:c4:5e:5e:36:57:b9:30:fe:
bc:8e:ce:60:ed:9a:e1:53:6b:d1:84:e3:10:19:00:
0f:5b:fb:bd:c4:5a:6b:75:b1:9a:63:c4:9b:32:5d:
74:db:f1:3c:3e:cf:95:b3:ff:57:d2:a1:d7:3d:0d:
4b:21:5b:55:42:64:6c:a3:82:7c:b1:02:af:be:86:
08:4b:0f:b7:40:21:ed:61:15:65:39:1b:7c:08:a1:
dd:e9:d2:39:d0:0d:4b:39:98:f5:ac:4e:99:12:79:
58:42:97:cd:13:c4:18:2a:de:4f:bd:9c:05:a9:9d:
6c:50:4e:88:8e:13:74:11:a4:04:d7:d6:74:cb:28:
35:5e:2c:1e:1c:e3:40:9b:3c:10:2b:5a:0a:5e:d2:
b0:17:3e:e8:5f:88:86:cd:4e:c9:05:c2:32:ee:36:
f6:95:d9:0d:78:be:bb:1b:e4:71:07:a2:7d:b4:81:
f2:9b:8a:8c:7e:d3:74:2b:3a:45:c6:82:3c:ba:a2:
35:27:f5:01:0a:52:9a:c7:8d:2f:1d:6a:2d:ef:10:
0d:2e:c9:37:0b:99:39:62:ab:89:e6:4a:fb:36:08:
53:84:b4:65:be:84:5d:5f:77:b3:80:b2:d5:80:ba:
cd:64:d9:ed:38:d1:fd:e4:02:0c:fe:ee:d0:cb:19:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:FC:B4:80:F8:8F:F2:16:C4:19:09:FF:3B:EF:93:02:7E:83:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IkD8tID4j_IWxBkJ_zvvkwJ-g-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:e4:74:fe:bb:9b:e4:15:9f:41:72:ef:38:2d:88:07:b1:87:
fa:5b:7f:bc:a0:47:0b:75:8b:98:41:7c:09:c1:27:84:db:7f:
52:20:94:1a:7a:7b:57:58:ff:d0:84:db:d3:b4:96:55:88:39:
fb:1a:5b:37:d6:f2:fb:a2:f3:6c:26:19:bd:23:64:e4:c4:fc:
51:d2:4d:7f:27:94:eb:db:aa:2a:06:54:c6:8f:3c:df:93:e9:
77:1a:5c:bb:b7:29:23:02:fc:e3:29:cf:67:82:73:5f:f3:8a:
88:9a:80:74:5e:c9:18:85:8f:43:88:87:84:9e:67:b7:1f:bf:
98:5a:d0:c9:59:de:e4:c6:54:67:a9:f4:4b:ed:0c:73:c1:c4:
cd:30:c1:c3:9d:61:59:6f:b8:36:46:76:a5:d0:6d:f0:93:57:
75:27:e3:cb:cf:3e:17:e1:28:67:9a:c7:0f:6d:b5:75:30:3d:
7e:d5:ba:c0:3f:9b:cc:4f:f6:4d:aa:bc:16:65:bd:85:a2:0a:
62:4a:aa:00:fe:1e:ef:50:8d:9d:44:37:4f:8b:0c:75:98:8c:
56:07:7b:a2:9c:80:c2:6c:6d:82:aa:df:c0:a2:4a:7a:46:56:
66:26:c1:16:de:4b:49:3f:ac:8b:25:be:66:16:f4:25:96:78:
14:8d:d7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:59:01 2025 by rpki-client