Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Iug4o-6IWDws7Z7VcPBP4y454Lg.roa
File: Iug4o-6IWDws7Z7VcPBP4y454Lg.roa (raw, json)
Hash identifier: qx6D55AGOQHc7ECS22JT1U05UbIij3UHHZF4hzQP88Q=
Subject key identifier: 22:E8:38:A3:EE:88:58:3C:2C:ED:9E:D5:70:F0:4F:E3:2E:39:E0:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018685E27098748CF7ABF39294F60951C81F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Iug4o-6IWDws7Z7VcPBP4y454Lg.roa
Signing time: Sat 25 Feb 2023 00:04:15 +0000
ROA not before: Sat 25 Feb 2023 00:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:85e2:6478/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:e2:70:98:74:8c:f7:ab:f3:92:94:f6:09:51:c8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 00:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22e838a3ee88583c2ced9ed570f04fe32e39e0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:79:d6:9a:dc:f1:a7:03:84:56:ec:cb:9c:
52:03:00:80:bd:32:84:74:e8:b7:cd:3a:38:23:87:
51:f7:b6:5f:6e:4d:6f:0e:8f:af:d6:6d:ff:52:d6:
37:d3:22:97:71:fb:bc:23:6c:96:e6:98:e7:64:7e:
57:16:ce:1c:b6:60:d4:8e:02:34:de:b6:18:45:57:
9b:7c:5d:15:d8:03:d3:de:03:aa:bc:79:db:bf:ed:
ab:41:d6:27:31:c8:b9:68:15:2e:0f:39:64:bf:db:
6c:c9:6a:4d:b1:cc:b7:37:76:26:1c:5b:2f:bd:68:
74:ec:23:08:62:fa:0b:61:64:44:d5:42:68:f6:75:
31:79:63:fa:67:66:be:a3:d4:7b:a6:61:65:ce:a1:
a2:12:ed:bb:c2:39:83:91:89:07:ca:73:ba:9a:97:
4a:e0:16:a1:fc:1f:66:05:21:6f:06:e8:8b:fe:82:
80:96:aa:70:7a:b6:09:96:ec:6f:d3:37:65:bd:97:
8a:c4:cf:be:c6:eb:71:fb:ca:18:7c:30:46:c2:a0:
55:43:4f:54:68:c7:67:66:26:ac:6e:57:55:ee:88:
67:fb:8c:e0:61:60:95:01:81:1a:d4:29:7b:93:1b:
36:66:ac:db:32:0c:aa:63:6a:49:6b:75:64:58:f6:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E8:38:A3:EE:88:58:3C:2C:ED:9E:D5:70:F0:4F:E3:2E:39:E0:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Iug4o-6IWDws7Z7VcPBP4y454Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:af:4e:0e:39:fd:ee:9a:7c:52:01:b1:24:6e:71:0c:ba:89:
b7:bd:42:15:e5:c2:36:15:e8:91:0b:2e:2e:fd:f7:7d:7b:12:
eb:cb:37:5f:b1:ab:34:90:1f:9a:9b:ca:f9:3f:8a:48:90:67:
5d:b0:5e:a1:eb:3a:47:ca:bf:70:a1:fc:1f:f2:9b:c4:9b:4d:
1e:9b:e0:c9:da:24:04:6e:12:8f:e0:1f:09:73:b2:64:6b:88:
dc:03:2f:33:48:77:19:a5:0e:13:a3:81:ab:b7:ec:4c:62:0e:
2a:6a:e6:7f:2a:20:08:7b:1a:63:6a:73:5b:12:2d:15:67:8a:
78:b1:22:3a:3c:d3:61:b3:14:aa:23:45:af:47:a1:f5:1f:b8:
e8:89:f8:24:e8:e8:62:f3:de:80:9f:3a:45:73:94:d7:3b:76:
ea:0a:cc:b3:66:dc:3e:e9:1e:ba:b7:e2:9f:47:98:19:af:55:
1b:2d:19:8b:72:f9:85:4b:b7:6d:18:4a:30:5f:b1:06:7f:94:
b4:1a:ec:67:32:11:2d:2c:ae:d8:24:96:cd:5a:c6:2c:b7:13:
83:e1:45:17:cd:1b:e2:fd:fa:c0:39:54:0b:8a:21:f7:29:9b:
05:07:1d:fb:16:89:07:5b:9d:fb:85:3d:71:83:e7:64:cb:2e:
98:65:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:29:25 2025 by rpki-client