Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItTKX_U7u7HJTAvPL7TAUmJzBpg.roa
File: ItTKX_U7u7HJTAvPL7TAUmJzBpg.roa (raw, json)
Hash identifier: 4MmUO7HjpoSvLAMAwW1M9olwyUscByI1sBw9i4f36Y8=
Subject key identifier: 22:D4:CA:5F:F5:3B:BB:B1:C9:4C:0B:CF:2F:B4:C0:52:62:73:06:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EF4369ECBBE49119D3637AABF6EBF8CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItTKX_U7u7HJTAvPL7TAUmJzBpg.roa
Signing time: Sat 06 May 2023 04:13:05 +0000
ROA not before: Sat 06 May 2023 04:13:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ef:43:69:ec:bb:e4:91:19:d3:63:7a:ab:f6:eb:f8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 04:13:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22d4ca5ff53bbbb1c94c0bcf2fb4c05262730698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:79:14:7a:24:0a:38:b9:5a:fe:ff:de:bb:
3a:ca:ba:de:52:e9:87:2a:5c:01:4f:0e:8d:18:8d:
3d:c4:e5:ab:d4:c7:d0:aa:4d:c1:03:b5:cd:36:61:
b9:09:1f:54:c9:75:66:15:43:70:30:ee:b3:02:1b:
15:db:6b:b7:c8:f7:f0:6d:48:93:01:48:f0:35:17:
ae:d3:52:13:69:7e:31:23:f2:5a:85:f8:bf:c6:ad:
2b:bb:7a:4e:cd:2b:1b:c7:07:f4:91:13:5b:6f:53:
f6:25:cf:f1:dc:79:cf:af:ce:a7:8a:58:68:30:c4:
04:c5:b2:28:1a:2e:0a:f7:bd:b6:59:65:35:46:a4:
ac:f2:bd:64:3d:9a:e3:d1:b8:f0:aa:5f:cc:21:b8:
9f:7f:7d:39:19:c4:b8:c4:6f:8d:d3:8c:2e:a7:5f:
95:af:4f:28:af:41:dc:d0:4c:00:55:0b:1f:c0:58:
d2:26:2a:42:89:e6:42:bd:a0:20:bb:dd:bd:6e:fd:
32:c8:bb:3a:11:72:04:c2:e8:82:f5:a6:fe:60:70:
50:01:56:e7:ea:97:d0:0a:f9:03:51:db:4f:a5:1b:
d4:7e:43:5d:61:49:fb:16:ae:3b:6b:b4:88:70:a3:
c6:af:98:22:ae:67:fb:a5:a0:ac:5b:cd:a3:b2:ea:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:CA:5F:F5:3B:BB:B1:C9:4C:0B:CF:2F:B4:C0:52:62:73:06:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItTKX_U7u7HJTAvPL7TAUmJzBpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:eb:9d:2b:9f:d2:39:33:3d:37:83:1a:63:1a:a0:a9:e9:35:
78:36:b0:83:59:41:70:4c:93:d1:ee:27:2c:c7:7b:32:f7:9c:
2a:5d:1b:3b:0b:0e:db:52:dd:20:9a:da:b6:0b:40:52:0b:76:
7c:ed:cc:c0:51:8b:f7:64:3f:64:2a:5c:07:7d:15:ff:ac:93:
1e:47:8f:62:e8:9c:69:f2:69:d3:66:1d:76:9f:02:c9:0f:11:
10:5f:7e:06:c9:ba:7f:c5:8e:18:95:b2:59:c4:1f:8b:6f:01:
29:b1:1f:4a:24:a7:0e:2d:d2:37:d1:c2:43:e2:45:f6:2e:e7:
2f:ed:38:5a:c8:33:67:6e:d5:92:17:4c:42:7c:dc:72:ee:96:
c7:8a:da:83:8c:cb:21:ce:76:a5:b6:de:8f:02:f0:6e:de:7c:
77:54:81:73:fa:7a:8c:2a:df:52:c8:95:10:d5:f0:81:c3:98:
92:53:1d:00:82:6f:89:99:3a:f7:f5:2b:d8:f9:79:59:9a:4b:
59:9d:2d:2e:97:88:db:18:31:30:62:13:3b:ac:67:ad:05:44:
84:9f:71:7b:fc:af:74:2e:ee:47:b8:3f:fd:68:3e:8e:29:5d:
f5:d5:d8:3b:8d:6b:36:a9:9a:be:24:f3:3a:da:47:fd:1a:3c:
da:7e:a1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:58 2025 by rpki-client