Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IocCmlak7Up-qOXe8unX7zr8pnM.roa
File: IocCmlak7Up-qOXe8unX7zr8pnM.roa (raw, json)
Hash identifier: karq58zLDCrepicqUTEqB5nxCWTQNG+vUANMF+8RwOk=
Subject key identifier: 22:87:02:9A:56:A4:ED:4A:7E:A8:E5:DE:F2:E9:D7:EF:3A:FC:A6:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825D9FB3017239A02342DB212458D63872
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IocCmlak7Up-qOXe8unX7zr8pnM.roa
Signing time: Tue 02 Aug 2022 08:15:23 +0000
ROA not before: Tue 02 Aug 2022 08:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:9f:b3:01:72:39:a0:23:42:db:21:24:58:d6:38:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 08:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2287029a56a4ed4a7ea8e5def2e9d7ef3afca673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:9c:e5:d2:f9:b2:2b:5e:50:f2:7e:29:7d:
a7:35:58:91:06:01:5f:d5:f1:4f:c0:83:ab:5d:d3:
f4:20:d4:45:37:07:33:2a:4a:a2:65:f2:9e:2a:b4:
d7:a6:9f:da:43:96:39:16:c7:86:b1:11:a3:a3:c8:
01:0e:98:05:06:ef:62:cc:44:f4:a3:07:8f:cf:5d:
3e:7e:3c:1c:f9:d6:ef:f1:84:bc:f4:e5:be:6a:cf:
f1:52:36:10:4c:8f:34:c4:a0:93:dd:bf:58:44:a7:
e4:e5:06:50:c7:1f:ce:3a:86:89:90:06:78:57:07:
ca:1a:4d:41:ef:b5:4d:d8:9b:70:e0:c1:9a:6c:93:
9a:87:a8:71:65:5f:82:35:bd:d0:db:72:8d:9a:fe:
77:21:a8:7d:c4:57:ce:e8:8f:ea:35:a1:93:04:13:
49:63:63:33:4a:e0:77:b3:04:1a:74:17:4b:0b:83:
7b:5e:1f:6f:e2:f1:41:69:02:b4:0c:dd:60:be:e5:
39:90:a2:6e:16:8d:2c:02:1c:9c:ba:72:f6:8b:1d:
77:d1:4a:5c:82:30:f6:0d:59:7b:11:f0:09:9d:9a:
f3:9b:09:0b:60:47:3f:a3:34:5e:21:68:11:2b:40:
a6:00:83:53:71:9d:57:11:2b:d0:b3:b8:c9:7b:7d:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:87:02:9A:56:A4:ED:4A:7E:A8:E5:DE:F2:E9:D7:EF:3A:FC:A6:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IocCmlak7Up-qOXe8unX7zr8pnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:af:d7:a6:bd:20:db:9e:21:a1:b9:c3:85:87:e1:ee:8a:fd:
f5:f7:60:44:5c:e5:8a:61:68:36:e5:48:f9:95:76:0f:49:59:
b9:75:df:ed:c9:07:24:39:e6:0b:d5:1d:94:f4:1d:1c:22:46:
b2:6f:50:0f:9c:71:ed:f7:e7:6e:1a:b9:cb:b9:68:4f:41:ac:
06:94:6f:1f:c3:0b:fd:3e:b1:da:21:9d:cd:c1:44:9d:0d:6e:
66:d2:d4:44:02:fb:f1:a0:ec:71:d3:26:9a:8f:17:f4:4b:fb:
24:81:82:eb:5b:1e:cc:ab:dd:e8:35:30:42:6b:ca:91:b2:e7:
ce:1a:12:b0:a5:90:fc:53:ab:20:c9:e9:5d:15:d6:41:d1:7f:
48:3b:19:5a:d1:8f:8d:59:d5:45:3b:11:00:67:32:c2:db:5c:
53:6b:2c:a2:72:df:d7:86:ff:46:1a:ab:35:7b:bd:c6:b0:1f:
d5:89:b2:0e:97:20:63:26:d9:61:29:50:37:7e:1a:bf:06:f5:
1e:82:b6:69:74:7f:e7:a6:d6:64:d3:b1:9d:08:82:b1:10:6a:
58:51:7e:e9:10:f1:15:ef:55:27:e1:36:c5:ea:2f:37:50:f7:
54:aa:1e:00:75:fc:04:97:7c:61:dc:6c:68:63:ef:04:43:61:
a2:76:ab:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:50:08 2025 by rpki-client