Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItqYC7rZjzoQKK6dTL4uEJNlnh4.roa
File: ItqYC7rZjzoQKK6dTL4uEJNlnh4.roa (raw, json)
Hash identifier: 7cp+fODq8g0JtwMCiaPG+CopXmhwDO4Ct2t3hFjSXq0=
Subject key identifier: 22:DA:98:0B:BA:D9:8F:3A:10:28:AE:9D:4C:BE:2E:10:93:65:9E:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DC271DCCCC0A58457E9C3F4465594507
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItqYC7rZjzoQKK6dTL4uEJNlnh4.roa
Signing time: Wed 09 Aug 2023 21:14:58 +0000
ROA not before: Wed 09 Aug 2023 21:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dc:27:1d:cc:cc:0a:58:45:7e:9c:3f:44:65:59:45:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 21:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22da980bbad98f3a1028ae9d4cbe2e1093659e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:bc:09:cb:03:e2:60:f8:06:f3:90:61:a8:
c9:58:85:b9:53:de:dc:c6:d3:6e:47:c9:04:86:4e:
52:28:11:74:b2:6c:f4:e9:5a:e3:70:34:e7:98:8e:
b0:44:5d:8e:c8:57:6c:c5:d8:d5:cc:26:ac:27:53:
fb:9f:63:cc:99:bf:9a:90:02:6c:c0:54:81:f1:b7:
3b:ad:ca:9f:58:73:de:4d:10:ac:34:cb:9f:6a:a2:
fe:36:b7:eb:96:64:64:73:ba:f4:9a:cb:27:0d:cd:
02:6c:55:91:98:70:94:2b:8d:ff:30:ef:49:6a:40:
28:73:92:be:25:26:63:70:90:e5:2f:ee:b9:8f:a4:
06:18:75:3e:c4:8f:70:ef:7a:25:38:f8:fd:c7:f9:
34:af:90:ff:7b:8c:18:3d:04:cb:2f:2a:86:6d:db:
9a:75:bc:88:43:06:44:99:6c:3a:77:18:77:1b:b0:
c3:a9:5e:4f:1c:b3:0b:5d:cf:dd:71:a9:98:da:12:
3e:86:f2:c0:1a:e4:6d:02:a2:88:f3:93:27:a7:8b:
0e:fe:0e:bf:2e:df:e4:ce:72:2d:7c:71:65:03:67:
71:86:ad:37:5a:ef:9e:84:5d:59:42:76:06:88:f8:
af:b5:5c:46:91:d5:ed:0d:ff:98:0a:2f:e8:44:24:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:98:0B:BA:D9:8F:3A:10:28:AE:9D:4C:BE:2E:10:93:65:9E:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItqYC7rZjzoQKK6dTL4uEJNlnh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:6b:90:8f:3f:3a:5e:dc:2d:d5:d0:d4:ba:4a:b1:b2:e1:2b:
40:22:78:2a:58:61:1f:2d:5f:3b:60:99:49:8d:ce:f9:b6:d6:
46:09:0f:c2:64:9b:3b:d5:23:47:64:fc:91:06:fe:c6:19:f7:
d8:6a:68:c2:cb:ca:9c:a4:96:3c:36:1b:e3:af:31:6d:bb:b4:
c4:99:08:8a:bb:b0:c1:4f:67:e3:92:28:72:1f:38:0e:cf:d1:
74:27:da:20:05:e1:1f:cd:22:f2:c5:ec:ba:7d:0a:31:cd:64:
3f:06:24:a6:d7:94:c9:97:1b:40:0c:d0:a6:d2:ee:24:15:c0:
1b:13:96:85:5b:05:a9:26:cc:f6:01:8d:4f:77:08:ea:4d:9b:
1a:d5:94:5b:4b:37:7c:63:3b:31:25:1a:0f:fb:5e:3e:1e:99:
c6:db:80:03:6e:f2:b0:2b:00:3c:76:87:b1:fd:2c:a1:40:f0:
d9:e7:22:0c:0b:e9:eb:5e:87:a2:1c:ec:bc:89:21:4c:3d:cf:
44:f8:c3:30:ea:fa:de:b8:94:7a:af:a5:63:52:8e:4f:1b:42:
e4:db:fb:ae:bb:a2:e2:c9:41:85:a9:47:22:02:0f:73:c7:94:
24:c1:92:c7:61:31:88:48:23:be:e2:99:55:f5:69:20:86:f5:
60:6d:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:03:14 2025 by rpki-client