Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItzSEd085QrAiAigVAAynkmRzwE.roa
File: ItzSEd085QrAiAigVAAynkmRzwE.roa (raw, json)
Hash identifier: Z5q0njetZDVdBPN3QUrGY6tXhHLaQRGR+i/qb5yXpM8=
Subject key identifier: 22:DC:D2:11:DD:3C:E5:0A:C0:88:08:A0:54:00:32:9E:49:91:CF:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018728C9D9A7B567C36A2916682BF9B31C04
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItzSEd085QrAiAigVAAynkmRzwE.roa
Signing time: Tue 28 Mar 2023 15:15:29 +0000
ROA not before: Tue 28 Mar 2023 15:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:c9:d9:a7:b5:67:c3:6a:29:16:68:2b:f9:b3:1c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 15:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22dcd211dd3ce50ac08808a05400329e4991cf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a7:49:12:2e:20:2c:3a:e9:9a:24:f6:b7:1c:
e5:35:fa:81:4f:23:34:94:3d:e2:f7:79:c9:e1:a4:
60:95:68:22:bb:5f:18:4a:c8:ce:bc:0c:2f:3e:73:
08:f3:02:d3:23:69:48:d9:9c:b7:a0:6e:45:dc:29:
a1:72:56:55:c4:0e:52:39:ea:c3:94:22:a1:55:98:
76:41:94:c8:ff:89:e4:a5:16:82:52:97:ca:5c:ed:
5b:ff:a6:83:c2:ee:8b:48:57:25:9c:95:18:fe:b4:
b2:3e:a2:98:13:6f:1e:6b:90:79:e6:02:3b:a4:71:
b3:1b:91:6c:24:0e:ca:de:32:14:77:1f:2b:0c:78:
20:53:b3:bb:ad:51:1a:72:2a:80:2a:22:39:4d:77:
c7:25:c1:55:f8:1f:00:2f:e6:45:93:0b:f1:8e:c0:
f8:72:1a:e7:a8:67:15:cb:7f:c5:ad:87:ee:f8:ec:
a4:65:ca:d3:6c:11:bd:d0:04:04:01:a4:6b:8f:79:
a5:df:b3:50:c9:fb:5d:fb:29:f9:e0:2f:4e:94:6c:
68:2d:c7:a2:12:db:c0:6c:2e:ca:4b:c1:57:d8:69:
43:03:be:ac:d1:2e:a1:b5:ce:8a:dd:d0:92:2f:b7:
7e:1d:4b:96:69:8d:35:db:65:57:c8:8c:2b:f8:02:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:D2:11:DD:3C:E5:0A:C0:88:08:A0:54:00:32:9E:49:91:CF:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItzSEd085QrAiAigVAAynkmRzwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:d0:57:dd:13:dd:86:d2:e1:fc:b1:d3:9f:8f:b2:46:18:80:
a8:08:8f:c3:14:11:f4:6d:71:07:bc:a0:7f:18:ec:54:6b:69:
36:65:23:97:ed:71:f4:34:54:b9:ae:e5:8c:a6:42:99:98:85:
37:76:d8:8e:94:a1:a8:9f:ad:ef:9c:63:0d:4f:db:c4:9e:c5:
3c:97:de:11:93:ae:b3:08:17:81:0f:7a:b6:a3:0d:04:89:2c:
be:94:e3:e8:2f:1d:e6:ff:48:5f:8e:6a:b3:ec:82:21:17:f2:
92:51:8c:17:af:ee:04:ce:1b:70:6a:bd:9d:90:88:29:f5:c9:
b4:27:ba:48:5b:30:ec:c5:a5:8a:a3:38:be:b3:54:34:d8:fc:
2d:dc:7e:13:11:ab:4d:bc:8a:a2:6b:be:2b:e6:1c:d2:ec:ab:
18:05:f5:30:c4:be:7e:c0:1e:4a:79:51:c4:87:5f:a6:e9:20:
07:55:90:51:5c:86:7b:4d:55:31:db:5a:0e:57:58:65:29:8d:
f3:14:ee:88:29:5b:5a:e3:2b:63:62:32:c9:95:ff:25:45:fa:
40:b6:ae:7d:ef:33:83:c0:54:95:28:07:4b:ee:79:4a:f3:0f:
89:02:09:a1:83:29:42:68:65:0e:31:bd:06:2b:6d:2f:87:8d:
a8:8e:a0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:33:59 2025 by rpki-client