Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IoYs6c5SqQuFPERLiYdZmkt5ZOk.roa
File: IoYs6c5SqQuFPERLiYdZmkt5ZOk.roa (raw, json)
Hash identifier: RW2zaFiE38KPLgc3qjGEMl/P1SWdn8+GXLlsJsH0u4w=
Subject key identifier: 22:86:2C:E9:CE:52:A9:0B:85:3C:44:4B:89:87:59:9A:4B:79:64:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018257D48B696139842CD687598C3E70FD59
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IoYs6c5SqQuFPERLiYdZmkt5ZOk.roa
Signing time: Mon 01 Aug 2022 05:15:23 +0000
ROA not before: Mon 01 Aug 2022 05:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:57:d4:8b:69:61:39:84:2c:d6:87:59:8c:3e:70:fd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 05:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22862ce9ce52a90b853c444b8987599a4b7964e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:d8:ec:56:25:18:a8:27:c3:64:c5:f0:d6:
c6:f0:3b:f6:71:5c:6e:f3:2b:68:49:f3:b5:73:a1:
df:f8:ac:c1:79:41:62:cf:d9:75:d1:fd:57:83:c6:
db:72:f0:72:3c:98:5e:25:f0:4d:30:60:6a:52:58:
35:93:40:48:c5:b0:6b:fc:c2:5c:99:9d:48:3a:ed:
7a:24:d6:25:1c:9c:a4:26:f1:50:18:b4:eb:87:db:
94:18:ac:79:c8:33:6e:61:15:c6:38:06:40:7e:29:
39:31:c5:be:45:d1:ee:1a:97:4b:de:72:ac:4c:18:
d4:b9:06:2e:18:b7:6a:27:0c:fb:76:90:cb:1a:cc:
bc:bc:28:96:fe:96:da:31:95:9e:ac:11:59:99:18:
cb:57:4b:79:51:6e:38:fe:a2:4e:fa:83:fc:4a:5e:
91:53:62:e9:47:72:c8:e5:c7:42:85:fe:44:13:85:
89:43:b4:71:1a:e0:78:96:2e:21:b6:78:3f:1f:74:
88:8b:53:a1:21:7e:d9:4e:3a:46:03:dc:32:74:70:
63:36:c3:1e:1d:1f:7d:99:e9:57:ca:ec:b0:10:3a:
99:fb:a7:1b:da:28:cc:47:0b:af:95:10:6a:43:19:
69:c4:da:2d:75:e2:1f:3f:c3:af:8c:1d:ba:74:4f:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:86:2C:E9:CE:52:A9:0B:85:3C:44:4B:89:87:59:9A:4B:79:64:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IoYs6c5SqQuFPERLiYdZmkt5ZOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:68:a6:55:9f:22:b3:a7:3c:e8:53:ec:cd:ba:fb:b2:6b:cc:
2c:93:92:c5:6b:6b:46:f8:05:34:0a:1e:cd:f9:60:16:a4:6d:
e4:55:f9:45:83:82:23:e6:7d:67:59:f9:ea:90:87:6c:92:8c:
59:43:fb:06:7a:b5:63:77:3c:7b:6a:bb:b9:99:9a:69:fd:56:
49:6d:88:82:75:ff:f1:d0:15:bd:6e:dd:74:c0:89:df:67:98:
f8:e1:89:bc:12:c7:ba:44:cb:9b:9d:d6:ce:38:87:b7:19:35:
70:13:3f:25:f0:28:84:f7:2d:07:7b:00:9f:6b:b5:22:43:84:
c0:a0:6e:e2:3a:53:1a:6b:71:70:e4:a6:22:b8:a9:c8:d3:1e:
0c:42:66:34:45:cc:58:4d:d7:ca:81:54:cd:ca:a6:eb:3b:df:
66:ab:51:3f:d0:b8:30:ab:05:9c:10:4c:a5:b7:a7:dc:56:09:
6a:e5:36:c1:cc:dd:2d:6e:c9:31:31:3c:da:8f:b4:19:98:5e:
28:15:d0:1d:00:b3:7d:c9:2b:05:1e:f0:7b:16:4d:f9:d9:b3:
9b:a6:09:3f:14:07:8d:5f:cf:72:a9:68:1e:71:18:56:82:10:
24:2c:50:61:1a:ea:9c:37:85:81:2d:a0:a6:85:ec:b1:0b:97:
1e:a8:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:17 2025 by rpki-client