Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IkHMApORjwvw5FRiQKg5d9p2VLg.roa
File: IkHMApORjwvw5FRiQKg5d9p2VLg.roa (raw, json)
Hash identifier: tJwewXAbgFKfaYwvKCFXqTPN5to8Hdw3slRjrZ0vXA0=
Subject key identifier: 22:41:CC:02:93:91:8F:0B:F0:E4:54:62:40:A8:39:77:DA:76:54:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898BE549618EDEC53881DAC8B424FCC8C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IkHMApORjwvw5FRiQKg5d9p2VLg.roa
Signing time: Tue 25 Jul 2023 07:13:26 +0000
ROA not before: Tue 25 Jul 2023 07:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:e5:49:61:8e:de:c5:38:81:da:c8:b4:24:fc:c8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 07:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2241cc0293918f0bf0e4546240a83977da7654b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:ac:13:b2:b8:29:71:58:03:12:14:62:34:
37:21:5a:30:c0:42:f0:a1:08:b3:aa:e6:4e:ce:5d:
eb:fd:07:2d:48:1f:63:73:1a:9a:84:69:fb:1a:67:
52:40:0e:c3:da:03:8c:ae:77:c5:65:bb:66:48:6b:
a5:47:4c:ab:4b:e2:64:7d:ae:1d:0e:89:0b:3c:ae:
cd:89:3a:d6:0b:bf:ca:2c:8e:c5:66:be:14:7d:9a:
43:88:b7:fb:b3:08:5a:ef:b7:63:93:51:bd:db:ab:
89:e5:aa:f4:32:93:fe:63:99:a6:e8:9b:18:b8:63:
bf:a1:25:57:e9:16:1a:1e:a7:03:98:95:88:59:eb:
df:8e:4d:86:24:74:9a:6b:a4:71:79:3e:32:f8:c3:
5b:c6:d9:95:7e:02:56:f6:57:d4:7c:5a:d6:3d:12:
7a:5e:3a:0a:0a:f7:6f:0f:ec:eb:54:c6:cb:b5:b0:
7b:dc:d5:04:55:20:58:0f:c6:0c:72:a6:b1:98:38:
12:b4:eb:e2:b3:8c:fc:43:81:98:e1:a0:f1:54:9b:
5e:7c:55:57:67:04:cc:ae:67:df:81:67:35:a7:49:
c9:0b:d9:2f:9e:e2:fd:c2:6f:94:09:b0:29:4c:3d:
21:d1:71:f1:e7:ba:55:2c:b8:e3:77:6b:d8:e1:c3:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:41:CC:02:93:91:8F:0B:F0:E4:54:62:40:A8:39:77:DA:76:54:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IkHMApORjwvw5FRiQKg5d9p2VLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:46:9f:de:ce:1c:52:66:db:92:10:e9:04:0e:b9:77:4c:12:
7c:a4:54:47:ee:c3:d1:32:b1:21:7f:df:32:0a:03:cc:7f:39:
7a:e9:f6:06:0d:37:0e:ee:81:17:21:96:3c:36:94:73:af:6d:
85:b1:c2:44:ae:bd:0e:0a:95:aa:31:0e:64:2f:14:4a:2e:1d:
0e:70:50:e5:8f:41:b9:59:8a:4d:46:c4:da:12:aa:71:a6:d0:
42:d0:d1:e2:e4:0c:d8:a4:be:b6:ea:f2:0a:de:c7:37:f1:5c:
ca:b6:0b:1b:93:d0:08:dc:87:96:16:7e:d9:c0:e5:88:a4:c9:
de:b4:c9:3d:88:9f:26:5f:e1:1a:fb:2f:ca:c3:ff:57:c3:c4:
90:6b:42:88:ec:9e:8c:e9:4d:88:85:ec:dc:12:87:a0:87:a9:
05:dd:02:96:da:05:9a:5a:8d:6d:47:41:f5:c7:5f:0f:2c:15:
9b:31:66:e8:e5:89:bc:33:2b:6b:7d:a0:b6:36:36:fc:5e:a0:
34:b4:f0:88:3e:c1:b6:7c:fa:c1:51:16:b7:a6:da:85:36:a2:
e8:ea:3f:73:6f:ec:6b:ce:5b:6f:da:09:20:47:25:67:45:cb:
84:a8:08:e5:35:e4:30:76:0d:2c:17:45:d8:d3:d5:ca:a0:93:
48:1c:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:40 2025 by rpki-client