Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IlCcxpmT3lTrAmsTz9nHKezSCYk.roa
File: IlCcxpmT3lTrAmsTz9nHKezSCYk.roa (raw, json)
Hash identifier: HgIafIXPD8Rwcl9AC3YajOIfnlptdzVpm7enW7R2DP0=
Subject key identifier: 22:50:9C:C6:99:93:DE:54:EB:02:6B:13:CF:D9:C7:29:EC:D2:09:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869EC6DC47515533378285E04A6DEE82C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IlCcxpmT3lTrAmsTz9nHKezSCYk.roa
Signing time: Wed 01 Mar 2023 20:04:37 +0000
ROA not before: Wed 01 Mar 2023 20:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:9ec6:89b7/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:c6:dc:47:51:55:33:37:82:85:e0:4a:6d:ee:82:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 20:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22509cc69993de54eb026b13cfd9c729ecd20989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:dc:fa:f4:e4:07:d4:97:2f:2a:a0:ef:77:
b2:85:a1:ae:6d:2a:c6:da:8b:01:d9:fb:40:40:ca:
67:62:5c:f0:64:ee:63:d7:a9:63:3d:66:3a:f9:fa:
55:96:ea:a2:a4:d8:22:db:c9:56:13:ee:33:41:5f:
ea:a5:38:0d:0f:b9:51:b2:b5:f5:a1:0a:3e:f1:c0:
e1:d5:b1:fb:b5:ab:4d:f6:25:e1:0b:7c:c7:1f:c1:
69:97:e7:72:cd:ba:96:1f:49:d9:fb:68:c9:36:56:
47:13:72:50:72:be:2a:c1:a6:21:0c:ec:fe:81:c1:
1e:f6:dd:d9:5f:1a:3c:76:d3:ce:22:f0:e0:89:83:
35:f9:ed:b4:18:02:cf:8e:9f:18:27:06:e1:f2:a6:
b7:6c:30:ec:ec:81:ac:e1:7f:85:57:42:70:bd:9a:
bc:f7:a5:5d:a2:e8:3c:5c:ed:16:e1:cb:ca:7b:c3:
60:aa:db:25:33:c2:71:20:a4:40:d5:c0:28:3f:3b:
38:cf:42:cd:fa:ce:88:6e:b3:92:95:bf:8d:19:d9:
18:65:28:fa:ed:aa:4c:2c:e1:69:4c:7f:bf:a2:dc:
42:cb:33:ee:2c:df:1d:28:61:ff:d0:15:0a:1d:5f:
6a:fa:50:67:ed:08:78:51:e2:95:cb:54:d1:be:9b:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:50:9C:C6:99:93:DE:54:EB:02:6B:13:CF:D9:C7:29:EC:D2:09:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IlCcxpmT3lTrAmsTz9nHKezSCYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:be:05:9d:52:8d:c7:16:d9:f0:98:3c:91:74:f0:99:98:89:
e8:57:31:65:32:04:88:4d:a9:bb:31:7d:89:65:3e:00:ab:8c:
85:0c:72:c1:11:a1:6c:70:ea:04:dc:b7:01:11:14:f5:88:38:
01:e8:80:c3:68:e3:80:a8:99:04:b4:38:74:78:a0:73:ad:9e:
f8:37:80:7d:c6:f3:f6:8b:72:4c:4a:d2:23:1b:55:9f:7b:4d:
5c:5c:6c:c3:86:70:36:e7:cf:ae:1e:ce:75:7f:69:ce:e0:4a:
ba:39:13:81:6e:1b:68:dc:14:52:d3:4b:ae:12:17:ac:40:72:
7a:3d:54:d4:fd:fb:9b:bd:e5:5e:a3:25:49:ac:62:37:1f:02:
72:4a:df:05:cb:13:2e:58:86:bb:47:35:36:29:07:d4:e9:70:
d5:60:10:9e:28:9a:60:71:b7:69:f0:92:70:0d:fc:ce:73:d3:
ba:84:f3:aa:e8:db:ad:13:96:e9:4a:f1:16:6c:78:09:50:5e:
64:37:ae:21:5f:33:30:45:1b:62:1d:e4:28:63:50:28:c8:de:
9a:6f:ed:1f:15:a5:8d:85:7a:81:d5:b5:9b:e9:b8:b3:0b:ab:
a7:6b:ad:ec:27:ba:cd:d0:be:b1:3c:ed:8e:15:0c:59:c4:a7:
af:13:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:59:34 2025 by rpki-client