Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i2JMJj8PJCLwjbcJbUc3BbNRavA.roa
File: i2JMJj8PJCLwjbcJbUc3BbNRavA.roa (raw, json)
Hash identifier: 5BMlESP/DXOE9XM8aB7RGbuvCD7tA2Ku3Kp7/hFjJU4=
Subject key identifier: 8B:62:4C:26:3F:0F:24:22:F0:8D:B7:09:6D:47:37:05:B3:51:6A:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018249AA23A162F7DC9EDD6A7C23A0932337
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i2JMJj8PJCLwjbcJbUc3BbNRavA.roa
Signing time: Fri 29 Jul 2022 11:14:23 +0000
ROA not before: Fri 29 Jul 2022 11:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:aa:23:a1:62:f7:dc:9e:dd:6a:7c:23:a0:93:23:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 11:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b624c263f0f2422f08db7096d473705b3516af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:45:09:9d:07:73:e0:fb:e4:99:7d:a8:f7:
e2:a7:12:c6:74:73:21:a6:9f:9e:77:d8:f1:c7:a7:
53:a7:8b:c0:04:c5:54:4f:c2:f1:9b:0d:c7:3e:81:
08:04:1a:44:30:ed:a5:0c:bd:d7:07:95:66:cb:23:
18:f9:98:30:46:cc:12:77:85:30:b9:43:dd:1d:c7:
3f:77:76:b2:62:c1:18:8f:1d:ac:74:f7:b6:1a:b4:
8e:59:d6:5f:8b:86:2b:9e:df:fe:f5:04:3d:2b:d8:
1c:45:01:ef:93:4e:96:fc:73:a1:a1:f8:7b:5c:b2:
da:67:37:2e:36:de:fe:55:02:b0:9e:b0:73:56:24:
85:3e:00:ac:85:ac:7f:a9:04:13:fe:33:de:58:38:
4a:ca:b9:52:e1:0a:53:83:f9:ec:9f:cd:03:94:ba:
d0:0d:0c:3d:07:72:59:c7:fc:e1:b9:ee:63:b3:67:
af:c8:37:77:4f:5a:da:b4:76:de:43:26:85:81:13:
0c:b4:62:7b:cd:23:9c:0c:b3:c6:ae:a5:8b:66:1a:
4f:3b:7b:a9:40:8a:b9:c5:01:cc:a8:92:f9:77:de:
4a:55:9a:51:55:8c:d7:13:91:5f:50:3c:9f:47:e6:
4a:72:f8:a0:38:22:77:2c:5e:c7:41:c2:2d:e8:de:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:62:4C:26:3F:0F:24:22:F0:8D:B7:09:6D:47:37:05:B3:51:6A:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i2JMJj8PJCLwjbcJbUc3BbNRavA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:75:e5:ac:65:95:80:ea:d8:e1:03:d3:9b:35:cb:b8:bc:ee:
87:df:30:7b:86:3a:50:e6:42:5f:f7:28:ad:85:12:36:95:c8:
67:dd:45:91:ae:58:f4:04:6c:a5:87:2c:a5:dd:52:f6:65:43:
50:a1:65:bd:28:97:ce:93:62:0d:81:97:0a:ac:f0:b0:bd:ff:
0e:41:8f:89:c5:de:7f:51:64:c0:69:f6:50:b3:a5:27:9b:7a:
a6:9d:32:a6:a6:67:d9:7f:d0:c6:ff:45:8e:cc:8c:db:76:25:
ab:30:95:cd:65:73:66:50:82:aa:fb:bf:21:f3:e9:92:3c:f5:
97:76:5c:57:0b:e1:ae:41:33:bb:cc:1f:8c:27:f9:61:74:69:
1e:28:9f:2a:58:3a:37:c2:56:59:b3:62:cc:4b:3c:b0:6b:41:
a4:73:cb:b0:00:d5:64:2d:71:78:c8:7d:42:cd:47:08:06:53:
7a:d0:25:8c:37:58:ec:dd:54:8b:e2:e2:a1:1b:78:0e:40:57:
dc:38:9f:20:d0:56:bb:62:92:b9:da:43:3c:fd:f7:23:1d:f3:
1f:37:63:14:ae:66:a9:16:45:a7:c8:c9:e2:88:f0:a2:25:93:
ba:ce:52:28:8b:75:b9:2e:ef:6f:1c:16:b7:d4:bc:d2:aa:90:
85:e0:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:36:22 2025 by rpki-client