Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IqF3G13fBDhGcD0HlLPpB3Ndguo.roa
File: IqF3G13fBDhGcD0HlLPpB3Ndguo.roa (raw, json)
Hash identifier: SndgXOb2jpCdTBX6ImwHsjtIKQJfAk2rSRqp3ILdZm8=
Subject key identifier: 22:A1:77:1B:5D:DF:04:38:46:70:3D:07:94:B3:E9:07:73:5D:82:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E8E211ADB27A2BBD02687D338785EC4B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IqF3G13fBDhGcD0HlLPpB3Ndguo.roa
Signing time: Mon 29 Aug 2022 09:15:05 +0000
ROA not before: Mon 29 Aug 2022 09:15:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:e2:11:ad:b2:7a:2b:bd:02:68:7d:33:87:85:ec:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 09:15:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22a1771b5ddf043846703d0794b3e907735d82ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:00:12:88:ad:de:42:cc:b8:dc:61:a6:84:
f6:c0:2f:bc:cc:32:d4:3e:21:7b:bb:78:8d:c5:ee:
9c:84:80:12:d7:20:8b:b2:7b:2a:36:c9:06:77:0b:
85:91:3b:11:d4:06:25:71:01:0e:d4:47:9b:b4:ff:
23:39:56:78:1d:48:58:e7:c7:85:07:7f:cb:2c:17:
a4:84:b2:49:24:bf:5b:07:dd:e3:a0:ec:23:3c:36:
c0:b1:03:92:64:19:8f:a7:96:d4:05:a4:a4:2e:80:
ad:e5:3f:46:a1:24:d5:ae:27:e2:fe:3d:d3:2e:0e:
f5:e6:86:18:44:f0:63:23:36:72:4e:28:1c:7f:fa:
32:d2:32:03:97:8b:14:8f:31:a7:c0:b1:71:c8:90:
ef:b0:78:b4:0c:8d:53:a4:0c:d5:2b:5f:62:ea:94:
38:2d:0c:d6:fb:b0:50:cd:e3:fa:fb:8f:c1:9a:9c:
c2:af:74:08:44:3e:bf:ac:2e:40:a2:79:35:48:95:
ec:1e:08:14:ed:73:1a:1b:42:fd:a5:14:70:c1:74:
64:73:b9:e7:28:d3:4c:63:43:f3:fb:5a:96:e0:ac:
2d:b8:7f:4b:44:bc:fb:4e:40:22:71:86:a8:87:53:
f8:42:85:27:e4:9e:9c:68:f5:38:82:94:52:dd:e4:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A1:77:1B:5D:DF:04:38:46:70:3D:07:94:B3:E9:07:73:5D:82:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IqF3G13fBDhGcD0HlLPpB3Ndguo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:2c:db:68:30:03:36:0c:ab:18:03:48:b7:28:aa:ab:93:64:
87:9b:16:44:8d:b0:08:5c:ba:d0:7e:24:e1:c9:58:ba:f7:0f:
1e:cd:6f:06:6b:aa:b8:94:ae:cd:3e:65:6f:e8:0d:d6:88:11:
82:82:eb:e5:dd:30:16:12:a1:e5:45:bd:81:e0:7c:32:60:7f:
a7:98:ce:94:45:cc:2e:35:98:ed:44:0d:81:f1:3f:19:11:8b:
b6:c1:62:b9:4e:4a:d3:b2:0c:41:ee:cf:12:82:37:51:25:e7:
67:39:ee:d1:83:4b:d4:d1:07:44:e4:a0:36:c0:c4:25:b1:d0:
d9:f3:52:af:96:a0:ef:3d:e7:75:90:ca:d9:64:8e:64:cf:02:
12:66:66:4a:ad:4a:60:12:2a:9a:c6:04:00:1e:41:12:a4:da:
8f:0f:3a:d0:69:23:b5:d7:20:40:b2:0a:6b:d5:31:76:6b:c7:
02:80:31:53:58:08:d9:bb:de:10:f1:70:5c:1f:a6:87:8c:4d:
76:52:db:0b:66:89:bf:2b:56:c9:fd:25:b1:73:c5:7c:68:72:
cb:96:d4:1f:fb:9a:f1:fc:1f:1c:ed:bb:7e:4f:5d:f6:7c:52:
05:87:94:bc:fc:29:49:37:b6:3b:a8:6e:c8:4b:b2:6c:e2:46:
78:f6:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:53 2025 by rpki-client