Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Iqzys0kyY7aXVT4uLRszh85A1HA.roa
File: Iqzys0kyY7aXVT4uLRszh85A1HA.roa (raw, json)
Hash identifier: lZLeEhYZVa13iwigu/CXoQroEyBRVmTBsAF0Wq5RloY=
Subject key identifier: 22:AC:F2:B3:49:32:63:B6:97:55:3E:2E:2D:1B:33:87:CE:40:D4:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2140F68690B2A1E5C756786468BD88CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Iqzys0kyY7aXVT4uLRszh85A1HA.roa
Signing time: Wed 23 Aug 2023 07:17:00 +0000
ROA not before: Wed 23 Aug 2023 07:17:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:40:f6:86:90:b2:a1:e5:c7:56:78:64:68:bd:88:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 07:17:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22acf2b3493263b697553e2e2d1b3387ce40d470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:38:72:cc:8d:c1:a8:01:9e:9d:e7:80:2b:
09:dc:73:db:a3:64:65:b9:e7:30:b1:87:8c:17:ba:
32:ab:0a:0d:8b:c1:be:b9:f7:fe:f2:e6:8a:20:6a:
14:04:62:19:df:22:bd:32:74:c3:89:fb:ca:d0:bb:
44:64:9f:f7:55:fc:74:51:51:4f:34:99:67:fc:74:
64:b0:d5:88:84:ae:22:2c:da:bc:55:ff:0d:a9:71:
6d:10:b6:43:b8:1a:5c:74:f5:a2:c0:0c:de:04:73:
48:e8:45:11:9b:e2:a2:2e:5e:5d:85:6d:63:d6:ac:
18:9d:fd:cf:8f:5c:4b:6d:5f:30:bc:34:f4:66:7c:
6b:6a:35:7d:d0:03:bc:68:cd:11:34:66:12:2e:14:
04:af:ff:2e:66:b0:e6:8d:6a:a8:ac:48:f0:fe:d9:
6d:1d:3d:9f:50:14:14:ec:62:db:b8:fc:6d:a1:86:
28:1e:0f:16:35:84:d0:dd:78:f8:b5:65:a4:9e:4a:
62:06:96:d0:00:2a:6d:e8:29:dc:a7:2a:c4:7e:65:
b1:e4:01:b2:e7:88:15:fa:b4:77:49:e1:60:8a:13:
ce:05:a7:75:ab:fb:fd:8f:12:3e:25:71:55:7c:aa:
9b:31:7d:54:2e:a8:87:b6:43:be:fe:4f:25:2e:84:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AC:F2:B3:49:32:63:B6:97:55:3E:2E:2D:1B:33:87:CE:40:D4:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Iqzys0kyY7aXVT4uLRszh85A1HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:b5:76:b9:b9:a4:bd:af:a5:9d:96:49:a4:fe:c2:09:43:fb:
db:12:02:43:a5:02:b7:12:c3:40:77:f0:08:5e:ee:73:e0:00:
b7:ad:e6:24:e9:49:2b:f8:43:0d:66:dd:6e:12:5d:64:74:69:
95:37:0d:77:6c:12:6f:ab:ca:b2:7b:7c:9f:2e:ea:ab:b7:6e:
41:c1:5a:f8:6b:c7:a7:03:36:87:ca:29:c6:d5:b1:52:8e:b3:
15:0e:bd:05:6f:bf:a8:45:d3:96:cc:61:ee:fd:ba:32:b2:d8:
9d:b5:af:c7:ee:39:1b:6e:33:5a:5b:99:f0:32:84:ca:9b:33:
4c:ea:84:ff:0f:d9:ff:59:0d:27:99:7f:ad:e2:a2:1a:f3:47:
91:97:6a:d5:4f:33:eb:df:4c:cc:10:20:fd:13:8f:94:3f:f0:
67:9d:8b:89:00:f7:45:07:ea:66:20:0e:a3:20:3c:0b:39:0d:
5d:3e:f5:f1:bb:c9:a7:ea:a6:6f:91:88:6e:9b:e3:a0:a8:bb:
3e:13:e5:c1:6c:03:0b:7a:ac:c0:b5:3b:70:6e:3b:7d:32:a3:
8f:96:f0:e3:23:01:f1:3e:86:e1:f7:92:9b:fc:d0:9f:67:84:
e9:03:30:ca:72:93:f4:a6:e5:1f:b2:b9:7b:54:70:69:e4:bd:
4f:0a:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:40 2025 by rpki-client