Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i3qlcXfVMjjc5_4SxVJB9ttjqnk.roa
File: i3qlcXfVMjjc5_4SxVJB9ttjqnk.roa (raw, json)
Hash identifier: 3iEYbX+jQx6vcn+nXzasPAvIQlr12qA4wMuyaGwY5yU=
Subject key identifier: 8B:7A:A5:71:77:D5:32:38:DC:E7:FE:12:C5:52:41:F6:DB:63:AA:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018850A66F26929A1BE43D3047A2FB82D2C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i3qlcXfVMjjc5_4SxVJB9ttjqnk.roa
Signing time: Thu 25 May 2023 02:04:24 +0000
ROA not before: Thu 25 May 2023 02:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:188:50a6:6733/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:50:a6:6f:26:92:9a:1b:e4:3d:30:47:a2:fb:82:d2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 02:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b7aa57177d53238dce7fe12c55241f6db63aa79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:3c:1f:30:ca:04:cd:3f:e9:f4:f6:8b:69:
1a:01:19:50:98:45:f3:f3:c3:33:a4:3d:23:7f:f7:
b0:72:41:57:05:0c:d1:fd:eb:27:18:17:14:b9:e7:
15:17:30:27:d3:a3:e1:38:95:38:fd:f1:8f:bd:40:
d9:8e:64:77:11:7d:28:e1:7e:b5:d9:c3:9d:97:56:
7d:0c:fa:cb:36:fa:7d:88:0d:9d:d6:9a:1b:34:13:
9b:6c:34:ec:4b:1c:36:b3:ae:d7:7f:23:00:f7:87:
5d:2e:fb:ae:38:eb:29:af:80:43:50:b1:99:81:20:
7a:14:83:a0:3a:bb:b6:ec:63:24:ec:a8:42:a4:d2:
31:fe:15:31:bf:95:77:a3:9b:6a:27:47:55:88:31:
44:38:02:45:03:bd:39:bc:c3:62:2a:fd:60:82:d2:
6d:44:7b:27:1e:21:9d:77:81:72:0d:11:97:3b:c0:
4a:64:65:15:56:f1:66:32:5b:79:c5:ca:1f:34:0a:
7e:89:4d:7a:41:16:f0:71:e3:62:f2:a0:80:68:3c:
2d:c9:c7:a3:c1:60:cb:72:34:af:5e:2a:88:bb:a6:
41:d6:3a:9a:f3:41:51:a3:cd:8c:54:94:4d:ff:b0:
8a:7c:a8:9d:10:6b:4b:79:dc:12:b7:13:54:b2:ad:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:A5:71:77:D5:32:38:DC:E7:FE:12:C5:52:41:F6:DB:63:AA:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i3qlcXfVMjjc5_4SxVJB9ttjqnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:0b:a2:17:69:ab:99:70:b6:7c:e8:4f:b6:b5:db:e3:07:50:
53:8e:f5:e5:00:30:13:6a:21:be:fe:a7:d6:9b:49:1f:bb:d7:
f6:ba:0c:d1:77:d4:7f:85:59:01:b7:56:8e:d0:50:e6:40:79:
5c:05:b3:37:0c:35:13:47:ec:5e:d9:31:0a:11:dd:32:b8:bd:
21:11:fe:13:ea:96:1e:40:e0:eb:20:33:1d:81:d4:16:b8:6a:
c5:cc:58:47:86:32:2c:b3:a6:16:db:38:b7:b3:0e:eb:ad:f4:
67:64:11:96:11:a2:1d:4b:52:36:49:74:9c:85:86:3e:14:25:
96:6d:20:6c:81:6c:ab:64:85:fe:04:fd:42:b0:12:68:fa:b7:
13:4c:12:a5:53:25:77:f6:bb:e9:a4:0b:5c:4b:9a:65:ef:71:
f7:75:ba:eb:d7:c3:c5:e1:40:46:c9:89:f5:d9:42:d4:64:31:
21:54:c6:6a:18:50:f7:12:46:c0:a5:c3:03:1b:89:f2:8a:0b:
af:e2:8a:3b:0c:54:49:52:f5:32:f5:9f:b0:dd:80:48:0c:10:
58:30:44:5c:13:df:4f:f4:f1:4a:f9:4f:4e:52:0a:aa:43:2b:
5e:33:a8:83:28:d3:ef:85:29:52:ed:62:cd:2f:02:89:f7:bc:
5b:55:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:28:26 2025 by rpki-client