Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IolEBylquNS3ns38Zf2vDkqMGMg.roa
File: IolEBylquNS3ns38Zf2vDkqMGMg.roa (raw, json)
Hash identifier: EPOBmXT7jqjNv3kaw4tv7zPbW35pZYPtpieuprnZx2U=
Subject key identifier: 22:89:44:07:29:6A:B8:D4:B7:9E:CD:FC:65:FD:AF:0E:4A:8C:18:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D594B7412C17386401815C4C3600420A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IolEBylquNS3ns38Zf2vDkqMGMg.roa
Signing time: Fri 14 Oct 2022 08:20:36 +0000
ROA not before: Fri 14 Oct 2022 08:20:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:94:b7:41:2c:17:38:64:01:81:5c:4c:36:00:42:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 14 08:20:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22894407296ab8d4b79ecdfc65fdaf0e4a8c18c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:44:ad:32:f0:99:d7:8b:63:cf:82:6d:83:51:
a3:81:0e:9b:47:06:eb:71:9e:64:1c:7e:37:e7:e3:
f7:bb:57:37:42:ef:25:03:ce:c4:5e:34:1b:15:e3:
96:8e:c1:38:8a:8b:71:d0:8c:db:9b:1a:28:64:f3:
27:35:68:e1:6d:91:82:9e:97:bf:f3:1e:1c:fa:ea:
86:1a:51:c7:2a:cc:b1:c4:75:39:de:81:5f:ef:eb:
45:99:67:1f:c0:46:c4:76:a7:89:a1:e6:55:2b:bc:
89:54:dd:90:ab:bb:1e:91:6a:26:db:44:94:77:17:
d3:53:36:da:0e:ef:43:c2:ad:0c:40:df:45:4f:fa:
f4:1d:71:9d:b0:34:c9:ad:ac:ee:92:81:e4:bd:cb:
6a:ce:14:16:00:d7:34:47:34:86:82:41:04:bd:d0:
e4:40:94:12:93:f1:4c:24:27:9b:9a:34:73:ed:83:
af:8a:67:5f:47:55:47:cf:e1:73:51:e6:f6:25:7a:
f7:85:68:eb:c0:f8:b6:fd:87:c3:b3:7c:f3:40:9b:
28:df:bf:a3:bd:a6:57:9b:d6:12:71:65:22:05:7d:
ec:13:24:8b:b5:66:00:1e:01:de:8d:27:cd:69:ca:
b3:8a:84:33:ff:56:1a:35:d0:b7:86:79:b4:c3:20:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:44:07:29:6A:B8:D4:B7:9E:CD:FC:65:FD:AF:0E:4A:8C:18:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IolEBylquNS3ns38Zf2vDkqMGMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:93:7d:eb:50:7f:82:1f:95:c2:16:20:9a:cd:09:d0:9b:32:
59:12:90:8e:ba:94:2e:d3:bc:f6:dd:b5:80:38:80:c8:d3:2f:
80:28:91:5b:02:b4:60:4e:bb:1f:f4:81:23:29:50:d1:93:8a:
07:41:0c:65:48:36:6c:80:02:71:a7:4e:4d:39:9a:20:2a:39:
0e:c9:5e:a7:4a:8a:b9:92:b6:17:62:5a:b6:41:ba:5b:17:81:
59:f8:fc:61:5c:92:71:33:15:ab:eb:7c:86:7e:a3:69:b9:9d:
b6:2b:02:22:be:96:06:13:83:bb:fb:a4:8b:b2:54:48:62:e0:
19:0d:b7:4c:3a:8d:a9:96:ed:dd:b2:61:fa:82:b9:1d:3b:b0:
44:fc:2f:e2:c7:36:62:5e:7f:8d:13:ce:f9:d8:d6:4a:85:2e:
b1:89:60:4c:b5:46:e6:1d:d7:dd:ca:70:73:fc:67:88:36:bd:
a1:33:b3:32:e6:32:7c:4d:4d:c4:02:80:08:01:e0:7d:fe:78:
f5:f9:16:9d:a4:03:b5:70:b1:d7:b7:f0:dd:8e:59:af:80:7f:
66:75:ee:af:e7:a0:98:46:cc:b2:11:87:83:3f:04:54:d0:eb:
2c:d3:17:ec:b3:a9:e5:d6:20:c4:e8:4b:bf:e4:21:72:cf:e3:
b1:b3:4b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:15:43 2025 by rpki-client