Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Iux_R-9Hj8rCVmj7pMmo-5YpTxI.roa
File: Iux_R-9Hj8rCVmj7pMmo-5YpTxI.roa (raw, json)
Hash identifier: FjVCukJoozo5vANpF+uzgcIOXs8G+W8OergirZeWIfs=
Subject key identifier: 22:EC:7F:47:EF:47:8F:CA:C2:56:68:FB:A4:C9:A8:FB:96:29:4F:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187191607A71B3CCF0198429EE9415CABCE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Iux_R-9Hj8rCVmj7pMmo-5YpTxI.roa
Signing time: Sat 25 Mar 2023 14:04:46 +0000
ROA not before: Sat 25 Mar 2023 14:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:1915:89d6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:19:16:07:a7:1b:3c:cf:01:98:42:9e:e9:41:5c:ab:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 14:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22ec7f47ef478fcac25668fba4c9a8fb96294f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:a7:af:ec:16:6a:a1:e1:ed:36:13:4b:c6:
b7:cb:15:ae:25:04:fc:03:cd:45:84:53:d1:cf:e7:
04:23:dd:df:6a:58:ce:70:8b:a2:e6:b2:92:7e:a3:
1e:0b:33:3c:93:cf:dd:ca:72:99:63:45:67:e1:23:
03:dd:08:88:4e:e6:3f:0b:26:23:de:b8:59:5f:76:
15:40:cd:25:2a:a2:20:91:f8:4d:c4:37:69:5e:74:
1a:b7:e9:00:8c:c7:6d:bb:a4:22:0e:9a:36:95:d9:
5a:da:d0:77:cf:2f:c4:81:96:62:d2:f8:4d:4f:e4:
08:2f:e6:07:00:42:8a:cb:4e:02:37:78:fe:e0:95:
2b:50:58:a3:56:42:71:bc:ed:4e:bd:cd:f3:19:bf:
e1:a4:ee:42:23:b8:6e:f8:2b:26:99:81:09:e3:c8:
5e:98:fe:19:19:dd:54:86:f4:5c:4a:24:4d:f4:7b:
37:6b:53:29:37:eb:92:06:77:d8:dd:d2:18:d8:7a:
d1:86:0a:fe:eb:13:e3:66:99:15:86:44:10:2e:7c:
fd:cb:df:2a:83:23:bc:d1:db:b9:2f:b5:38:0b:cb:
65:54:62:01:6f:4e:c1:dd:0d:47:b5:e9:d7:3a:68:
4c:1c:70:11:6c:d5:7e:96:74:84:5c:79:e5:dd:a0:
80:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EC:7F:47:EF:47:8F:CA:C2:56:68:FB:A4:C9:A8:FB:96:29:4F:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Iux_R-9Hj8rCVmj7pMmo-5YpTxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:74:f8:9d:e4:de:9d:86:35:56:96:29:22:ee:d4:79:43:d9:
3c:b9:d0:45:ac:b7:20:6b:d7:23:7e:8f:29:e2:e6:66:78:d7:
66:0b:9b:91:f7:e4:c2:36:24:5d:e2:96:85:ed:da:16:03:65:
3b:de:e7:be:d2:b4:5c:c3:39:67:08:61:c4:1a:2e:9d:52:15:
4e:62:80:63:d7:53:f8:27:4f:89:90:4c:0f:67:fc:94:ce:fd:
1a:5e:2f:8e:04:fc:bd:ce:50:14:de:c1:0f:2d:7f:eb:80:a6:
eb:55:1c:c1:17:be:9b:82:e3:46:53:14:0b:2b:2c:9f:47:2e:
48:88:a1:df:a4:9d:46:5a:3c:c9:b3:c5:69:40:41:58:c9:47:
88:78:21:0b:9d:0b:bc:29:69:f9:8e:eb:c1:2f:13:e5:5f:6a:
8f:82:0f:12:d9:0d:2f:d9:19:8c:27:3a:ac:ee:f2:ba:61:6f:
d3:44:00:06:b7:21:87:0c:01:ff:ff:d1:c8:32:93:2e:36:80:
80:0d:ab:22:4c:d2:28:f8:43:02:d3:12:f4:d0:67:f4:fe:f3:
e3:03:99:33:94:46:c1:b6:16:ce:f4:03:6b:61:d0:8f:55:62:
f3:f4:61:c0:9d:8c:8a:9b:fb:62:76:cb:6c:a1:27:ee:9e:98:
82:cd:f2:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcZFgenGzzPAZhCnulBXKvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI1MTQwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmVjN2Y0N2VmNDc4ZmNhYzI1NjY4ZmJhNGM5YThmYjk2Mjk0ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW6nr+wWaqHh7TYTS8a3yxWuJQT8
A81FhFPRz+cEI93faljOcIui5rKSfqMeCzM8k8/dynKZY0Vn4SMD3QiITuY/CyYj
3rhZX3YVQM0lKqIgkfhNxDdpXnQat+kAjMdtu6QiDpo2ldla2tB3zy/EgZZi0vhN
T+QIL+YHAEKKy04CN3j+4JUrUFijVkJxvO1Ovc3zGb/hpO5CI7hu+CsmmYEJ48he
mP4ZGd1UhvRcSiRN9Hs3a1MpN+uSBnfY3dIY2HrRhgr+6xPjZpkVhkQQLnz9y98q
gyO80du5L7U4C8tlVGIBb07B3Q1HtenXOmhMHHARbNV+lnSEXHnl3aCAmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCLsf0fvR4/KwlZo+6TJqPuWKU8SMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSXV4X1ItOUhqOHJDVm1qN3BNbW8tNVlwVHhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAt0+J3k3p2GNVaWKSLu
1HlD2Ty50EWstyBr1yN+jyni5mZ412YLm5H35MI2JF3iloXt2hYDZTve577StFzD
OWcIYcQaLp1SFU5igGPXU/gnT4mQTA9n/JTO/RpeL44E/L3OUBTewQ8tf+uAputV
HMEXvpuC40ZTFAsrLJ9HLkiIod+knUZaPMmzxWlAQVjJR4h4IQudC7wpafmO68Ev
E+Vfao+CDxLZDS/ZGYwnOqzu8rphb9NEAAa3IYcMAf//0cgyky42gIANqyJM0ij4
QwLTEvTQZ/T+8+MDmTOURsG2Fs70A2th0I9VYvP0YcCdjIqb+2J2y2yhJ+6emILN
8ug=
-----END CERTIFICATE-----
Generated at Thu May 1 23:00:24 2025 by rpki-client