Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i2SOeOIp7l897iui6b-oIAtyBFw.roa
File: i2SOeOIp7l897iui6b-oIAtyBFw.roa (raw, json)
Hash identifier: cSsdsKv9V0SdXLkfeT6aBQGRidWwdnu75g9c1AR9ook=
Subject key identifier: 8B:64:8E:78:E2:29:EE:5F:3D:EE:2B:A2:E9:BF:A8:20:0B:72:04:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A07480064894A901330365F26B2505266
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i2SOeOIp7l897iui6b-oIAtyBFw.roa
Signing time: Fri 18 Aug 2023 06:14:33 +0000
ROA not before: Fri 18 Aug 2023 06:14:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:48:00:64:89:4a:90:13:30:36:5f:26:b2:50:52:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 06:14:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b648e78e229ee5f3dee2ba2e9bfa8200b72045c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:f3:01:a2:5e:2e:b9:b9:64:bb:ca:4d:7a:
7f:6d:0b:75:63:5d:33:dd:30:a1:dc:5d:a6:e4:1a:
db:59:3e:cb:a3:e5:75:5c:5f:4d:d8:8a:ca:84:ee:
e9:a3:44:2b:44:a3:7b:98:bd:d5:bc:0a:6a:86:61:
75:26:a8:9c:34:eb:dd:1b:f2:ac:15:76:42:e6:b9:
6a:f5:12:1d:da:54:89:97:36:72:a4:8f:0f:04:b6:
4d:2e:ab:72:55:1a:82:31:39:b0:5e:50:0b:17:68:
65:36:24:33:99:eb:cc:0c:ec:51:21:62:e5:ae:94:
52:a2:9e:44:e3:3c:e0:b0:56:bd:a8:11:37:b7:ee:
52:e0:89:29:75:3b:60:df:d7:93:ba:75:14:67:ac:
c7:e0:bd:97:6c:b8:07:1b:0a:89:ca:6a:42:3d:bc:
1f:a7:04:ba:b7:a6:1b:20:da:d0:26:89:a9:f5:6c:
d8:7d:32:03:4a:07:c8:68:7f:3d:3a:e4:ca:1f:70:
d5:b4:cf:d2:58:84:4a:89:54:a0:34:0f:8d:36:79:
5e:8b:0f:32:f3:b2:2e:7c:0a:6c:1b:1c:1e:78:55:
2b:1d:51:39:ab:d4:65:cb:63:b0:04:fb:59:7d:33:
61:ac:99:c6:ca:28:c5:28:89:5d:82:09:89:91:e9:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:64:8E:78:E2:29:EE:5F:3D:EE:2B:A2:E9:BF:A8:20:0B:72:04:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i2SOeOIp7l897iui6b-oIAtyBFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:90:09:58:f5:66:de:9d:d1:c2:34:d9:73:61:8c:bb:3b:f0:
b4:bb:92:60:cf:47:5b:a4:5c:ed:3a:3e:72:fd:bd:f3:62:c6:
d2:30:0b:a9:cb:de:84:e7:64:97:35:9d:25:d0:69:3c:28:9f:
4f:4a:43:07:02:18:2d:6f:99:f4:79:d8:e5:1f:38:9d:16:85:
c9:22:2b:4e:10:8e:2b:b6:00:12:67:b1:ce:3b:a2:12:36:cd:
a2:47:52:54:50:ac:14:b8:6a:c7:68:35:10:4f:fc:13:43:0f:
be:1b:82:22:4d:c7:f4:67:49:4c:ba:96:cd:f6:97:5b:1f:1f:
27:3e:5a:f2:3d:aa:6e:51:14:7f:ef:15:cc:ca:f3:6a:7e:09:
b1:61:3f:18:75:66:3b:69:d9:c3:e0:99:8d:f8:98:f3:78:5d:
2c:b5:a1:9d:35:30:dd:7c:b2:56:8f:1c:0f:5e:12:9f:22:8a:
73:88:2b:16:a9:b2:b9:88:1b:ed:48:29:a5:b2:9e:de:61:b1:
1e:df:b2:31:b6:28:48:84:54:45:2b:31:de:f4:fa:10:83:de:
52:00:65:cf:d9:06:7d:c0:da:a7:4f:db:18:8f:d8:50:24:2d:
eb:3f:f4:cc:80:cd:9f:2a:ce:2c:f7:86:de:0f:5b:11:7b:82:
49:9f:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:58 2025 by rpki-client