Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iBh-x6u-JhmiHxRctUW30hvw7MQ.roa
File: iBh-x6u-JhmiHxRctUW30hvw7MQ.roa (raw, json)
Hash identifier: 0E/xnX3IsjWldKpvg6YHbgHKehFV0BGk+2ykfuSLl3c=
Subject key identifier: 88:18:7E:C7:AB:BE:26:19:A2:1F:14:5C:B5:45:B7:D2:1B:F0:EC:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885119CBD0F046F5316876402A493F2340
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iBh-x6u-JhmiHxRctUW30hvw7MQ.roa
Signing time: Thu 25 May 2023 04:10:24 +0000
ROA not before: Thu 25 May 2023 04:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:19:cb:d0:f0:46:f5:31:68:76:40:2a:49:3f:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 04:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88187ec7abbe2619a21f145cb545b7d21bf0ecc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:05:6f:50:03:86:6c:46:4d:1d:69:21:f3:
9a:68:62:76:c6:f4:2f:eb:bb:1c:69:3b:be:99:86:
50:f4:46:99:1f:cc:78:0f:58:f8:69:d3:32:49:79:
52:e6:89:3f:95:69:f5:ed:f8:de:f5:8e:fd:88:5f:
4f:0d:5c:b2:80:d5:cd:6d:d0:1e:67:2e:00:1c:e4:
93:85:7b:3c:e4:9e:36:c6:db:32:ca:16:15:3d:01:
90:58:53:7c:80:e1:50:e0:2f:f2:e9:62:6b:49:a5:
72:e8:32:20:ba:8e:19:39:e8:a6:58:07:dd:b3:ff:
63:19:75:fb:af:cf:d3:b6:57:9b:d5:84:d1:64:15:
83:41:ce:d1:f5:7e:9b:63:f4:ab:23:9a:1c:f1:08:
b1:93:27:bd:fa:c0:a4:da:a8:94:27:0e:c9:57:33:
e2:87:a6:ca:b0:d7:e6:a7:20:9a:d9:94:d8:1b:04:
81:4e:b9:e8:f4:b7:c0:99:64:e6:5e:19:b8:a2:8b:
92:7a:ef:b6:60:f7:2a:d0:6d:b8:cc:bb:2c:5a:b8:
f2:e2:55:9b:44:d3:c8:a8:66:22:1e:9f:74:0b:39:
c3:50:34:8c:88:49:33:85:62:80:a7:a9:a4:b6:49:
df:a8:e3:58:d5:21:1f:95:55:ca:c2:89:7b:af:49:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:18:7E:C7:AB:BE:26:19:A2:1F:14:5C:B5:45:B7:D2:1B:F0:EC:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iBh-x6u-JhmiHxRctUW30hvw7MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:25:91:fa:5b:d7:3c:7d:ea:df:95:18:90:82:fe:27:4b:66:
cf:33:83:77:b0:ff:03:bd:e7:93:fd:74:5b:36:a4:bc:35:0a:
c8:48:33:c8:e4:c3:dd:a7:fb:25:3c:ad:7e:a2:02:7a:8f:6c:
7a:8a:08:1a:cb:7f:c2:fd:c8:2f:bf:5a:79:62:4e:ad:52:9c:
ca:e4:95:cc:71:b3:1d:51:1f:82:8e:cb:db:3a:0b:5d:81:55:
aa:e0:3e:78:72:53:f7:60:48:dd:4b:a0:4e:33:98:9b:2c:21:
0f:c8:81:ae:42:1b:df:50:63:e9:97:56:64:bd:0b:ec:a4:bc:
a2:21:10:03:40:ac:8a:4c:af:bd:a5:58:43:68:4c:b7:6b:53:
86:bc:58:ea:2b:48:41:87:89:ec:7f:f8:f9:fa:fb:db:fa:66:
6f:03:8d:8a:29:e5:0a:1b:4c:c9:f7:53:e1:4b:55:15:6a:fd:
95:6d:c7:6b:db:63:58:4f:b3:57:61:22:e0:b0:37:ea:af:93:
49:62:62:e3:ef:74:dc:89:c1:44:18:b9:db:40:25:52:5d:7f:
15:9e:67:1c:93:1a:7c:8b:c5:bd:bf:e3:f6:39:17:5a:db:9f:
73:30:bb:e5:c7:46:cb:96:4e:30:9b:d5:d4:e4:91:2d:60:43:
8f:ec:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:30:24 2025 by rpki-client