Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iCeiyzVysIWZcaqE6EVeBGXDA-E.roa
File: iCeiyzVysIWZcaqE6EVeBGXDA-E.roa (raw, json)
Hash identifier: Y9aIJ8R+2jiecNLZ2E4VKOQJ/crqklF82QguKjzmrSg=
Subject key identifier: 88:27:A2:CB:35:72:B0:85:99:71:AA:84:E8:45:5E:04:65:C3:03:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E37CDE5ADB5CFBA20B1103D6D6D50072
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iCeiyzVysIWZcaqE6EVeBGXDA-E.roa
Signing time: Mon 17 Oct 2022 01:09:14 +0000
ROA not before: Mon 17 Oct 2022 01:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:e379:17aa/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e3:7c:de:5a:db:5c:fb:a2:0b:11:03:d6:d6:d5:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 17 01:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8827a2cb3572b0859971aa84e8455e0465c303e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:76:e2:69:be:6d:f2:e5:11:fa:65:f7:16:
87:86:61:bd:45:33:22:a6:33:12:66:9c:66:f1:58:
9c:fa:f6:d5:51:a3:20:15:96:37:74:ed:51:5c:ac:
ad:3e:20:1c:31:39:3a:8e:49:29:fb:35:6e:a4:bb:
d7:22:a9:37:a1:f0:28:98:bd:01:c3:97:9e:65:97:
80:61:b5:f4:d1:07:01:a4:39:af:d8:df:f6:bc:3b:
32:ac:45:14:6f:38:29:19:ac:0c:43:df:b3:d8:02:
80:4d:98:20:ba:d6:6b:f8:9b:64:59:c8:7c:27:9a:
1e:4c:ba:b3:2b:05:1d:1a:de:62:34:a7:80:cd:a3:
38:9b:1a:58:59:a9:04:bd:5c:35:9b:03:dc:de:68:
3e:e2:13:1f:9f:a9:19:ee:b2:26:3b:27:9f:0e:c6:
55:b4:99:7a:34:63:c0:53:1e:17:06:e3:cc:65:1f:
23:f9:3f:29:81:de:24:05:28:4c:be:05:fb:c0:3e:
99:39:6f:8f:36:04:b2:5b:e8:15:17:c5:40:6c:25:
36:04:e2:65:4e:59:2a:4a:51:c9:7a:2e:4c:9c:c4:
9c:e6:60:20:8a:b3:df:11:8b:cd:c0:9b:28:83:9c:
a5:da:18:1c:51:53:20:30:7d:90:04:a6:d1:f4:54:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:27:A2:CB:35:72:B0:85:99:71:AA:84:E8:45:5E:04:65:C3:03:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iCeiyzVysIWZcaqE6EVeBGXDA-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:2f:06:49:e8:33:9f:f1:0e:49:17:d4:19:c8:85:4c:7c:da:
4b:ff:d6:ef:61:f9:6e:c5:e0:c8:d8:3e:d8:79:36:ad:2c:a2:
62:25:b1:e6:a6:6e:e6:ce:f2:f9:5d:73:50:6c:bc:0e:09:b8:
86:26:cd:51:72:a5:ed:5b:7f:29:1b:1c:44:44:5e:9c:63:53:
be:b2:37:1c:b1:da:f8:77:dd:d0:db:85:c1:f2:65:43:3c:47:
a5:12:b5:42:36:c0:41:9c:f4:63:42:b0:4a:5b:66:81:4e:2d:
ec:91:54:ad:43:66:d1:8b:4f:b4:d3:cd:a3:ad:32:3c:7a:3b:
60:de:f0:b4:a2:4b:6b:42:9e:fd:c0:ce:dc:cc:e5:95:33:cf:
0e:09:12:b9:b4:53:0e:66:a7:2c:42:89:c1:50:48:9a:83:2c:
69:00:6c:26:89:0b:55:75:2c:35:20:a0:f8:a8:1a:44:5d:88:
38:ca:0e:f1:49:ea:c1:25:ad:76:21:2e:3d:78:2b:10:b7:e5:
73:49:c1:e9:e6:32:b7:27:6e:c9:a3:ea:b1:34:52:65:db:d8:
11:41:b3:51:46:ce:28:27:76:22:52:09:db:07:31:16:83:b5:
ef:86:7b:ba:18:80:8b:1a:3d:09:fd:d3:bd:e8:16:fb:b7:32:
eb:1c:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:24:49 2025 by rpki-client