Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IsTyLwUee88Loh8iApAfndofcp8.roa
File: IsTyLwUee88Loh8iApAfndofcp8.roa (raw, json)
Hash identifier: hNr20Ikikf9roIaBmRQLbghDmCkPACLItsvnx/gCZMs=
Subject key identifier: 22:C4:F2:2F:05:1E:7B:CF:0B:A2:1F:22:02:90:1F:9D:DA:1F:72:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895CB0B502AAAA30692857972B553677D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IsTyLwUee88Loh8iApAfndofcp8.roa
Signing time: Sun 16 Jul 2023 03:13:51 +0000
ROA not before: Sun 16 Jul 2023 03:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5c:b0:b5:02:aa:aa:30:69:28:57:97:2b:55:36:77:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 03:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22c4f22f051e7bcf0ba21f2202901f9dda1f729f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d7:0a:bf:b0:72:8a:dc:e8:26:45:ea:e8:dd:
29:89:39:06:0c:75:26:25:f6:87:f4:64:34:8b:bf:
46:7e:bc:ce:39:67:36:b8:6a:94:92:1f:69:43:cc:
2c:12:dc:a4:1e:88:98:0d:f1:5a:a1:6a:93:3e:ca:
65:32:51:88:73:09:3e:4b:66:15:52:34:ec:24:9f:
ba:bf:39:3a:f2:00:1a:f5:92:0f:bd:62:06:1c:bb:
b1:1e:18:68:74:53:88:35:0a:2d:5f:7c:90:50:88:
2c:0b:ea:1d:3d:a6:2b:93:80:9a:cc:8a:8f:c8:31:
39:fd:74:44:09:f3:6a:27:df:d7:ba:a5:8a:fa:21:
48:50:3e:58:d5:e5:0f:a7:f0:1d:ee:f2:21:33:81:
fc:93:00:d5:43:e9:fd:ac:6a:c7:52:f2:a4:50:ca:
2e:db:45:17:8f:ba:77:b4:d1:7d:db:11:51:ea:b7:
82:8f:b3:4a:eb:a7:14:07:da:43:4d:84:e7:93:08:
86:9f:e3:54:b1:bb:73:e1:48:51:34:29:92:0a:7c:
1f:b6:42:d5:44:ab:54:c8:02:95:fd:40:e1:59:61:
2e:08:57:76:3a:5b:f5:70:9b:cb:bf:e2:bc:92:f7:
c5:b0:37:ae:05:77:da:52:eb:aa:52:b7:c2:6d:9a:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C4:F2:2F:05:1E:7B:CF:0B:A2:1F:22:02:90:1F:9D:DA:1F:72:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IsTyLwUee88Loh8iApAfndofcp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:29:6a:d5:e9:4a:21:f5:b3:2f:0b:d5:e0:2c:8d:d2:74:fe:
fa:cb:5b:ff:3d:6a:28:f3:a1:20:a2:c1:19:6b:60:9d:ba:84:
a9:22:8f:59:c1:e7:2d:b6:51:ec:d0:6d:51:d2:7f:37:ee:3e:
f5:8d:fe:bc:ba:95:e6:05:ed:20:a8:1b:b5:4a:84:6d:c5:5e:
52:be:5b:5e:b5:77:c8:2c:9d:24:55:64:bb:bb:5e:2a:e7:c9:
f2:d0:bc:f0:83:77:3c:1e:e5:49:47:8e:59:53:db:ab:42:54:
5b:2e:3d:f2:13:e5:fe:89:29:6b:95:e7:28:46:e3:f6:98:97:
6a:cf:be:18:ac:9b:f9:57:26:a0:da:f2:9c:55:9c:41:6c:eb:
b1:f9:f2:c5:03:f7:7f:12:36:6f:b9:1c:2b:b3:8b:8c:a5:57:
90:d0:f8:f3:1a:ef:42:1e:d1:7b:19:54:b6:f4:47:f2:e0:d5:
30:55:00:80:68:dc:6a:e4:1f:45:de:ee:7a:39:da:2e:2b:e5:
32:a2:e4:1c:0a:7c:f7:34:21:52:f0:67:5e:27:36:20:01:4a:
f9:73:7b:60:4e:e7:b5:d6:05:cc:be:62:e5:52:e0:07:32:d7:
0c:58:ef:72:dc:a6:9e:b3:36:86:14:43:7d:3a:29:4d:e7:40:
c6:78:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:59:00 2025 by rpki-client