Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IqCA8uPVa3HE2OB82_FBe7g9DYE.roa
File: IqCA8uPVa3HE2OB82_FBe7g9DYE.roa (raw, json)
Hash identifier: f4Zagt1B6OkuiMH2T4u8AV6X5+lvkDK33PJNyadpH3A=
Subject key identifier: 22:A0:80:F2:E3:D5:6B:71:C4:D8:E0:7C:DB:F1:41:7B:B8:3D:0D:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188970C670005FBB38EDD67C16FE0AA7AF0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IqCA8uPVa3HE2OB82_FBe7g9DYE.roa
Signing time: Wed 07 Jun 2023 18:09:12 +0000
ROA not before: Wed 07 Jun 2023 18:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:0c:67:00:05:fb:b3:8e:dd:67:c1:6f:e0:aa:7a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 18:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22a080f2e3d56b71c4d8e07cdbf1417bb83d0d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:31:c7:fe:93:cb:58:aa:1d:12:3e:10:da:
d1:df:c6:6c:ef:79:18:09:e2:98:9b:81:f6:f8:41:
e2:a2:a2:68:f4:fe:f1:2e:b4:1d:51:8f:5a:40:58:
af:54:ac:39:0b:f9:0c:7e:4e:a9:2a:e5:30:f8:29:
67:83:7f:3f:d8:3a:05:3a:31:dd:83:cc:f5:0b:4e:
bd:4b:91:4e:7e:43:96:03:f0:17:7d:4b:5d:e8:69:
99:bc:15:0f:0a:87:1e:77:2a:47:da:88:a0:34:48:
2d:c4:0e:b5:8e:c9:aa:9b:2b:81:97:f3:a6:7e:ce:
e7:d0:e6:9d:96:4b:8d:46:ab:31:d6:da:e4:84:c7:
fa:22:a5:55:12:2c:d3:f8:4e:98:f5:d3:68:aa:c3:
1d:63:6b:bf:cb:2b:f0:a9:68:29:40:23:21:e1:87:
1d:94:81:f8:f9:5c:5f:b6:c6:b3:85:d7:fa:65:dd:
96:62:aa:8f:6c:8d:23:00:c1:69:09:d6:fd:ce:23:
52:46:0f:01:96:02:12:55:5f:ca:a9:59:c3:1e:b6:
49:3e:9b:c3:cf:f5:db:60:98:41:c2:55:92:c4:4d:
d6:70:11:05:4f:c2:ff:b4:7f:db:da:d5:6f:fe:a9:
28:93:5c:96:90:8b:d9:24:de:cd:2f:81:ad:9b:e9:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A0:80:F2:E3:D5:6B:71:C4:D8:E0:7C:DB:F1:41:7B:B8:3D:0D:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IqCA8uPVa3HE2OB82_FBe7g9DYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:6d:71:70:a6:e7:b0:9c:22:b3:96:6f:83:3a:84:f9:bd:e2:
3b:d9:b1:d1:30:f2:b3:03:ec:ab:20:c2:e0:82:9a:55:38:19:
ac:5b:ec:7c:54:6d:31:ef:2a:1e:a4:97:40:03:7e:8d:54:4a:
6e:a9:cd:49:15:4c:57:6c:9f:71:e4:82:1e:c5:2a:11:00:f5:
c6:b5:d7:0d:bf:76:2d:e8:99:2d:d5:10:be:10:49:b0:ec:dd:
a1:59:7f:7f:82:74:d6:30:c8:96:c2:9a:68:03:58:c6:21:5b:
de:9e:74:70:b9:35:d7:47:17:67:35:30:30:0c:4d:c8:bf:ce:
0e:61:4f:6e:b6:ee:f5:4b:97:0b:b0:a6:74:f8:60:d2:d1:ce:
99:a1:4e:86:98:d1:e4:b0:1c:94:a0:94:8c:28:3d:75:27:d6:
7c:d1:dd:96:4c:5e:a0:7e:e6:17:43:65:f3:79:c4:b2:fb:ea:
a2:0d:57:6b:e5:9c:c7:5f:e0:da:8e:16:da:13:09:a7:7b:50:
13:1c:67:3f:4c:83:68:99:05:32:d5:a2:4a:d1:87:06:96:9a:
f2:4e:ca:92:66:c1:ff:8b:f6:b9:6e:b6:67:64:a8:bd:3b:d3:
bf:16:1b:a6:7b:47:72:b3:a5:5c:c6:99:59:9a:32:6e:ad:e1:
f0:35:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:10:38 2025 by rpki-client