Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_-ia40S3eGw_k3Jc4Y_1TrkTbuE.roa
File: _-ia40S3eGw_k3Jc4Y_1TrkTbuE.roa (raw, json)
Hash identifier: qyYBr6WHbbJPA9fnaJXk343R4QOLfHjru/K+F2GPc7c=
Subject key identifier: FF:E8:9A:E3:44:B7:78:6C:3F:93:72:5C:E1:8F:F5:4E:B9:13:6E:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8135585F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_-ia40S3eGw_k3Jc4Y_1TrkTbuE.roa
Signing time: Wed 04 May 2022 21:10:36 +0000
ROA not before: Wed 04 May 2022 21:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2167756895 (0x8135585f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 21:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffe89ae344b7786c3f93725ce18ff54eb9136ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:b0:89:7f:8f:9b:96:19:15:6b:71:ca:c4:
ce:76:e9:65:f4:bf:04:f7:35:91:c5:1b:05:f3:b5:
79:42:84:5d:dd:45:a3:ca:75:bd:ee:28:09:13:98:
71:55:85:57:d6:93:dc:3c:30:b3:5f:bb:95:b7:31:
12:36:ab:34:d3:a5:d9:c4:a8:0a:aa:44:34:57:95:
4b:d9:60:f2:bd:9f:72:1c:b0:f1:47:00:6a:21:6e:
a4:0a:1c:64:90:26:51:1d:35:d9:a2:58:4e:5f:d5:
12:eb:5e:76:3f:3b:28:8a:2f:f1:9a:8e:10:d0:b1:
dc:da:a4:0d:8f:65:50:d9:bd:83:d9:c5:b7:f0:3f:
e6:9f:7b:ee:07:7b:b1:47:f3:b2:cb:01:3b:51:78:
7b:0d:c1:49:de:f4:90:18:3c:c3:16:4d:1d:90:7b:
47:2d:8a:3c:52:1e:78:e5:e5:2c:4b:fd:a7:8d:6f:
d3:bb:83:b1:5f:e7:1e:cb:2d:62:13:c0:13:09:99:
a2:cd:ed:4a:59:dd:15:2c:1d:71:4d:8a:c6:64:df:
c9:b3:92:e1:35:27:ca:2f:97:3f:60:2c:d2:fa:7d:
75:e2:cb:ae:15:11:1a:ec:72:56:c1:0f:ae:14:1f:
e1:a4:12:ba:a4:2c:f5:38:77:1c:12:85:d5:22:40:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:9A:E3:44:B7:78:6C:3F:93:72:5C:E1:8F:F5:4E:B9:13:6E:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_-ia40S3eGw_k3Jc4Y_1TrkTbuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:ba:fb:37:8d:70:35:b5:68:0e:92:a6:61:5a:64:24:16:6b:
07:c1:8a:f1:c3:fb:00:35:da:e3:71:64:2c:2e:8d:d5:e3:79:
07:38:f2:5e:4a:75:37:38:ea:7f:71:10:33:d1:11:79:2d:81:
15:de:20:32:f4:1d:46:b9:c3:42:69:dc:03:0a:06:e2:d1:b7:
d7:a5:e7:39:db:30:16:1d:fa:a6:a6:d9:3b:c9:69:e4:69:9b:
0e:79:e8:33:69:41:c6:3c:95:34:83:c6:6b:08:2f:4a:75:8c:
4b:c2:46:48:b3:73:4f:e9:ef:95:77:1b:a9:12:a8:80:ac:42:
bd:c7:10:69:36:11:b7:db:ba:07:b6:7c:5a:34:38:be:32:fc:
dd:d5:43:a5:23:0a:3f:f0:12:c6:43:49:e9:d3:4e:ed:76:d8:
05:06:45:20:01:74:fd:68:9f:7f:5d:8f:7b:42:f1:e2:4b:25:
c0:56:4f:c6:e5:b4:89:20:41:b2:09:bc:1e:1c:8e:4e:ba:bf:
14:79:7c:fb:48:50:b2:0e:78:0b:51:1d:11:3d:07:e9:d6:21:
ed:00:05:e6:bf:da:cf:3f:a4:a0:de:a4:cb:3c:24:a2:00:49:
a7:b1:65:b4:36:82:b5:20:65:67:58:02:e2:35:e4:d7:b6:07:
34:4d:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:46 2025 by rpki-client