Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IvZe-Amvyg4SxIoRnq7rizm41IA.roa
File: IvZe-Amvyg4SxIoRnq7rizm41IA.roa (raw, json)
Hash identifier: o8e0oSRS5XDEs2kEOBMNUymc6SU238lY7jXfi5PNphc=
Subject key identifier: 22:F6:5E:F8:09:AF:CA:0E:12:C4:8A:11:9E:AE:EB:8B:39:B8:D4:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8BA5BC79
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IvZe-Amvyg4SxIoRnq7rizm41IA.roa
Signing time: Fri 10 Jun 2022 20:11:02 +0000
ROA not before: Fri 10 Jun 2022 20:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342894713 (0x8ba5bc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 20:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22f65ef809afca0e12c48a119eaeeb8b39b8d480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:07:41:21:8e:d4:f5:11:f7:1a:30:00:08:
2a:9f:a6:cb:d4:ad:ea:ec:3a:c5:ec:ef:be:e6:3e:
8e:af:38:f2:0e:b1:e6:ef:dc:70:82:03:24:5a:b5:
e5:01:49:bc:4f:49:11:fd:1e:2f:60:3a:27:4c:f7:
b6:21:0c:4d:fc:1d:cc:49:9b:c7:20:6f:1a:6f:36:
ac:77:95:b6:d4:50:57:24:15:5a:ad:a7:ca:f4:48:
69:69:72:d6:79:07:6a:49:41:e3:c3:44:75:ff:a5:
81:6a:0d:0b:5d:d6:03:e8:1f:1d:ac:70:b5:0b:5d:
7d:d0:5c:e3:aa:17:45:8d:8a:0a:f9:cf:91:96:79:
26:fa:6e:01:0d:3f:08:7b:31:d8:79:d1:2f:a1:24:
7b:d6:3f:58:f2:c5:5a:74:68:cd:a5:f6:ed:e6:ba:
cc:ed:b8:57:52:9e:12:9b:85:77:f6:5f:5d:ee:ab:
1f:e2:44:41:51:61:1d:40:d9:81:57:5b:27:81:81:
be:3f:07:bf:42:9f:65:64:a3:92:88:e6:0a:92:0d:
aa:1f:7b:b9:38:4e:97:9e:24:87:cf:78:15:ff:f2:
e4:95:43:63:5b:18:29:6e:83:7c:a2:4e:7b:e0:7a:
ea:f2:5d:5f:fd:55:f7:2d:80:e7:b2:5b:2e:ed:f7:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F6:5E:F8:09:AF:CA:0E:12:C4:8A:11:9E:AE:EB:8B:39:B8:D4:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IvZe-Amvyg4SxIoRnq7rizm41IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:1f:37:95:ac:0f:6d:65:6a:0a:04:e1:d0:c3:73:4d:f7:65:
8a:18:34:d5:f0:56:a4:d4:8e:7e:81:18:23:44:4d:ec:c1:a1:
e0:5a:ce:bd:1e:36:9a:d0:c9:2e:3e:25:2d:a4:3f:30:e8:b3:
8f:50:21:a9:62:43:05:57:b8:04:94:a7:37:27:a5:b8:32:84:
d2:a1:3d:f1:88:0b:4e:2c:6e:e1:b4:ff:fd:4f:36:8a:f3:5b:
cf:ac:4f:80:a3:72:4f:c4:7a:5c:2c:83:e2:f6:1a:f9:cf:0e:
d1:f0:4b:76:5a:90:b2:57:b3:a0:b4:f4:b4:68:8d:41:20:82:
ed:5a:6a:ca:10:12:5e:96:89:c4:cf:71:0f:67:6e:90:d2:10:
dc:33:08:a0:b1:d5:4d:d0:d4:2a:7f:23:0b:0b:86:8d:33:4a:
29:1b:39:30:63:22:a2:1e:4f:ea:a0:d8:3b:d5:00:f0:ea:68:
11:fb:19:1a:02:80:64:b0:21:1d:b2:17:e5:c6:7d:77:86:05:
95:53:ec:41:a4:35:e2:f4:39:68:81:2e:77:fc:a1:ab:72:62:
e2:c0:ee:d2:1c:b2:3b:2d:af:8f:95:7e:32:3b:27:c0:b9:2f:
69:e7:0c:62:28:54:e5:b2:77:93:a1:ab:09:69:20:ee:14:a8:
6c:56:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:44 2025 by rpki-client