Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IuTkBGqdPEv2QvCz7W6fTXtleIk.roa
File: IuTkBGqdPEv2QvCz7W6fTXtleIk.roa (raw, json)
Hash identifier: vVJhly7vb6x1k9CGd5SSBF+cLZCNqKlqwHlHzpAiwI8=
Subject key identifier: 22:E4:E4:04:6A:9D:3C:4B:F6:42:F0:B3:ED:6E:9F:4D:7B:65:78:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189788D330D40B4AB19B5A0F9C7B0145F61
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IuTkBGqdPEv2QvCz7W6fTXtleIk.roa
Signing time: Fri 21 Jul 2023 13:04:26 +0000
ROA not before: Fri 21 Jul 2023 13:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:189:788d:844/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:8d:33:0d:40:b4:ab:19:b5:a0:f9:c7:b0:14:5f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 13:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22e4e4046a9d3c4bf642f0b3ed6e9f4d7b657889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:e5:89:38:f3:10:a0:db:18:20:d9:59:7d:
0d:0d:e4:a5:e5:24:d2:d7:07:21:0d:24:04:fe:d7:
65:e1:87:5b:0a:23:3f:fd:48:44:14:41:62:7b:81:
31:fd:e8:22:60:8f:b1:f3:9d:92:2e:e7:f7:12:25:
1c:da:b0:d3:1c:d4:64:11:b1:7b:59:7d:0a:63:8f:
1d:8e:b7:d6:5d:4c:09:13:5b:10:8f:ae:bd:fd:c8:
40:bf:ef:b6:96:9f:44:66:6b:af:01:e4:78:ec:90:
41:fc:1e:3b:f3:6e:93:a0:5d:e0:97:6e:ea:c4:48:
75:6b:d1:10:9f:61:3f:9f:17:a7:f1:65:ab:07:7e:
e0:41:f0:77:bf:5d:c5:6b:8e:27:06:a2:7a:b4:d4:
1a:ad:34:5b:20:81:a1:f0:f1:7b:87:62:73:54:25:
b6:5f:12:0c:e3:e3:03:d2:20:69:31:87:3e:45:04:
cc:eb:38:28:6f:d8:67:cf:63:07:ea:8f:f3:38:25:
57:e2:2c:67:1b:b6:ce:61:1a:4d:5b:e7:42:3e:09:
9e:00:73:8d:70:9b:f0:00:ef:6b:8f:f5:b9:d2:17:
e1:d2:40:2f:9f:a3:35:55:84:51:a3:68:1a:ec:0d:
1a:19:41:a8:b8:47:f5:e6:5b:ee:aa:55:f0:9c:6c:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E4:E4:04:6A:9D:3C:4B:F6:42:F0:B3:ED:6E:9F:4D:7B:65:78:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IuTkBGqdPEv2QvCz7W6fTXtleIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:0e:d0:0f:81:10:d9:59:63:c9:a7:ee:f8:9c:c7:b6:3f:5d:
e6:57:ca:02:83:81:66:31:8a:fd:b3:66:59:13:8e:90:80:78:
41:82:d6:cc:66:fe:46:38:ba:8a:0c:7f:1e:4d:1c:13:4e:ac:
2a:9e:5b:16:e6:6c:19:6e:31:06:81:d4:ea:93:4e:4c:81:a9:
5b:fa:f8:32:8a:e8:05:96:a8:d8:40:6b:a5:a1:26:50:9b:94:
05:c4:c8:d7:5a:35:a1:b1:97:67:7a:ee:89:00:e4:82:c8:32:
16:d0:62:4a:b2:1f:9e:1a:47:b9:dd:c0:2e:01:11:0d:65:77:
75:e8:ef:a2:95:b2:9d:fe:2f:54:12:40:5c:f2:c1:a9:99:e2:
bb:17:84:fc:e8:50:02:e7:f6:f7:ee:79:bb:ba:d1:9c:2d:8b:
d0:ae:a2:62:2a:86:7d:08:82:d9:79:02:77:14:fa:2a:87:00:
3c:1a:cf:d9:ee:6e:f2:d1:47:41:10:c8:ad:a5:37:0c:ef:8b:
b4:d7:d1:dc:7d:44:c7:45:62:b9:de:72:be:fc:6a:89:e5:fa:
3e:13:95:17:21:2e:61:65:21:cd:43:40:c4:d4:17:72:b3:0d:
97:a9:e4:e3:7f:f9:a5:67:c3:ac:14:53:70:bb:2a:f7:fd:ad:
f3:e4:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:18 2025 by rpki-client