Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IlEUo7KeELFd2VCwvCrlrMY1iy4.roa
File: IlEUo7KeELFd2VCwvCrlrMY1iy4.roa (raw, json)
Hash identifier: JFUHujdZF9FkDdb/UyT/FK53IwA9tzhLH+0P5zRj43A=
Subject key identifier: 22:51:14:A3:B2:9E:10:B1:5D:D9:50:B0:BC:2A:E5:AC:C6:35:8B:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8EDB5B8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IlEUo7KeELFd2VCwvCrlrMY1iy4.roa
Signing time: Wed 22 Jun 2022 03:09:44 +0000
ROA not before: Wed 22 Jun 2022 03:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2396740490 (0x8edb5b8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 03:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=225114a3b29e10b15dd950b0bc2ae5acc6358b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:79:6f:ca:a2:3d:0c:6c:b1:ed:1a:a2:d8:
ce:70:15:db:6d:65:08:e0:f5:29:ca:7f:73:17:82:
86:26:6b:ed:69:8a:d1:48:58:dd:8d:25:cb:28:83:
54:a0:ac:5a:34:1e:b9:71:a3:a2:01:a4:3a:d1:4d:
88:37:64:fe:aa:1e:43:2a:77:f2:00:ae:7a:d6:42:
53:ca:66:bb:af:e2:0b:11:87:06:de:8e:63:ed:4a:
69:c2:0f:d2:14:8f:1a:a8:8f:e0:f1:02:41:f4:04:
af:d6:cf:45:6a:87:86:24:84:ef:b5:73:b5:a0:e8:
d5:56:03:25:41:cd:ce:da:65:86:33:ff:12:a9:c6:
3c:3f:3e:3a:01:d1:26:66:d2:a8:4f:b3:ee:3b:06:
cd:cd:53:97:8f:14:cb:91:f2:c9:cd:07:be:3a:7f:
26:ee:62:44:cb:2a:b5:16:ed:0a:8d:66:32:d1:a4:
00:e4:e6:67:78:1e:82:4b:c8:6f:09:f4:10:2d:ae:
a0:b2:0f:b9:8a:40:2b:e0:37:60:c1:9d:2c:ca:a8:
2f:19:37:29:f7:62:05:be:cb:79:1b:f3:e4:8f:86:
92:5f:82:00:c8:a5:29:91:d2:70:5c:b6:2b:c6:51:
99:a8:cd:3c:ae:b1:4d:04:17:ad:7f:e2:7b:a5:74:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:14:A3:B2:9E:10:B1:5D:D9:50:B0:BC:2A:E5:AC:C6:35:8B:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IlEUo7KeELFd2VCwvCrlrMY1iy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:bf:89:ff:4b:01:43:ff:5d:cb:a6:84:00:49:f4:a4:4c:fc:
57:e4:de:1b:99:40:cf:d8:f8:ff:5a:c2:24:fb:f2:ef:37:30:
79:3f:94:f6:04:3e:3c:8e:6d:36:68:de:46:7b:e5:67:1a:55:
ca:61:a6:63:12:3c:ce:6d:44:5a:55:b6:c9:9b:e7:71:82:f6:
e9:ff:44:28:4b:5d:f9:8e:44:64:c3:10:1a:67:98:fd:40:03:
8c:f2:0b:3c:21:fc:b1:69:91:1e:10:1e:17:6a:05:40:bb:67:
63:22:42:48:b5:58:89:1d:c0:44:1d:c5:ca:12:d3:72:01:fd:
ed:bd:bb:01:f9:26:e1:13:22:c7:8d:f2:a6:0e:16:df:3d:dd:
05:0e:86:82:e2:79:7b:da:bc:58:60:92:04:b5:c0:05:a1:58:
2c:62:3b:a9:ad:bb:0b:f0:a4:02:6d:9e:0b:35:48:f5:bf:74:
72:d8:d6:75:4c:74:1e:a5:ad:9e:d1:ba:85:56:86:50:3c:a3:
87:c5:17:05:11:bb:e5:1a:f7:34:91:b8:25:a4:2f:57:83:7c:
a4:a8:5f:63:83:25:38:9a:24:a2:c8:81:04:b2:10:79:17:3d:
65:ae:d2:f8:81:9a:75:c6:3d:f6:52:60:fe:db:af:56:a5:b1:
df:79:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:57:25 2025 by rpki-client