Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IwVeW1az4QRbMoYKO-PLiYLcfak.roa
File: IwVeW1az4QRbMoYKO-PLiYLcfak.roa (raw, json)
Hash identifier: 3ANv/OcLgts8N2AjLoDmjluESVETKfsmd/4pSMZOyeM=
Subject key identifier: 23:05:5E:5B:56:B3:E1:04:5B:32:86:0A:3B:E3:CB:89:82:DC:7D:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182FE904027CE253D8BAF900B2BC87F31D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IwVeW1az4QRbMoYKO-PLiYLcfak.roa
Signing time: Fri 02 Sep 2022 14:17:22 +0000
ROA not before: Fri 02 Sep 2022 14:17:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fe:90:40:27:ce:25:3d:8b:af:90:0b:2b:c8:7f:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 2 14:17:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23055e5b56b3e1045b32860a3be3cb8982dc7da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:27:2c:64:70:2f:29:8f:d8:7e:ff:6b:23:
89:00:70:57:b4:62:88:9d:85:95:c8:68:43:63:ff:
14:b3:99:b5:55:05:c2:7b:7d:9a:84:df:7e:c5:bd:
60:16:7d:2e:a7:14:76:2a:43:77:b6:17:4f:ca:be:
f9:79:c2:68:cd:c8:29:c8:be:f8:85:42:ba:d1:5b:
7c:64:f4:13:0b:fb:d7:05:c5:18:82:b4:76:6d:54:
f7:9f:b9:3c:5c:b3:9a:ad:96:db:4f:d8:c2:36:d7:
8c:40:20:73:a5:5d:ab:9e:b3:1e:53:b6:07:14:6a:
c8:c7:39:e9:f6:b8:ec:71:0e:8c:12:3c:76:30:c9:
01:f7:75:a1:4c:67:66:8d:32:26:3b:67:00:a9:0d:
de:76:31:b9:2d:06:61:f7:ce:c2:d9:59:82:dc:7e:
e3:2b:d9:71:7d:0c:01:28:95:5c:3c:95:78:83:c1:
e5:91:80:e0:a6:97:0f:fb:d6:8a:03:c9:26:dd:f1:
93:f5:41:14:e9:e4:42:8d:9b:04:94:99:c8:17:0a:
1d:68:d7:70:a5:c2:1d:f8:85:5c:84:a2:2b:20:83:
00:88:1b:bb:83:d0:76:cb:a1:89:f5:49:74:ff:0a:
ab:23:aa:54:2e:f5:ac:f4:2b:47:c6:14:90:11:d7:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:5E:5B:56:B3:E1:04:5B:32:86:0A:3B:E3:CB:89:82:DC:7D:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IwVeW1az4QRbMoYKO-PLiYLcfak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:b0:e7:9b:73:00:6e:33:f4:26:80:90:e2:db:e5:6e:63:0d:
d0:4c:7b:1b:ba:24:4c:39:cc:23:e5:0f:09:ae:d3:8c:45:18:
6b:73:05:3f:3a:eb:57:f2:1c:4b:6d:9d:a3:46:7d:8c:6a:d0:
b4:9b:a4:29:26:cc:a7:bf:90:bc:18:9b:d4:ac:8d:e6:07:b8:
dd:74:4b:33:f8:8c:66:7f:31:5d:54:a8:53:b0:0d:80:4b:3a:
79:8d:0f:86:c6:1d:92:3a:3b:f2:3d:13:49:78:3b:53:7c:be:
75:ed:f1:9f:12:57:97:72:7d:52:11:38:f7:f8:c2:f8:4c:bd:
6e:1c:e9:73:3e:a0:a0:28:5b:60:3d:70:dd:40:9f:c7:b1:c1:
2e:0f:0c:4b:18:1f:f0:9d:ef:04:0c:30:0f:e7:8c:86:ae:5e:
be:9b:c1:6c:a3:b8:d0:bd:93:2e:9a:cb:b5:5c:e2:13:e3:16:
1e:2c:4b:e2:e0:7b:42:40:e2:45:f7:8a:a9:71:c2:56:a5:b8:
b1:c2:a0:12:85:c9:8d:16:74:c3:ac:2e:65:ac:ef:a8:ae:00:
f7:dc:fe:2a:ff:8e:4b:c5:64:81:f4:8b:d0:3c:e9:82:2f:85:
54:ba:97:22:9a:5a:dd:6a:97:96:86:95:6f:5f:e2:61:f0:fa:
8d:fa:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:10 2025 by rpki-client