Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iEBNvReQGIzvkek0DCyU5ouU6nE.roa
File: iEBNvReQGIzvkek0DCyU5ouU6nE.roa (raw, json)
Hash identifier: F1PeQrxhkRw5mL4CLbIZ3jrIIKMkYSA4oAXnm6Xnxno=
Subject key identifier: 88:40:4D:BD:17:90:18:8C:EF:91:E9:34:0C:2C:94:E6:8B:94:EA:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A26A1EC8964BFB1D3E76EAB6504D669F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iEBNvReQGIzvkek0DCyU5ouU6nE.roa
Signing time: Thu 24 Aug 2023 08:21:00 +0000
ROA not before: Thu 24 Aug 2023 08:21:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:a1:ec:89:64:bf:b1:d3:e7:6e:ab:65:04:d6:69:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 08:21:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88404dbd1790188cef91e9340c2c94e68b94ea71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fa:59:ed:83:98:06:95:ed:0a:62:a7:ca:12:
3c:ad:22:e7:43:ce:03:0a:6b:3d:22:af:8c:b7:33:
78:6e:8a:e1:a9:31:c3:35:06:93:52:d7:53:a4:48:
94:a3:14:da:6f:2f:5b:e7:59:27:ff:54:12:a1:31:
32:c1:cf:47:bd:25:57:63:b8:11:3b:f9:fa:59:ec:
f0:d7:fd:71:b5:fb:f0:b7:e6:b7:7c:2a:66:c1:23:
d2:00:39:45:9c:5d:7c:04:c8:58:4c:d3:54:1e:00:
5c:0d:8f:71:de:1c:b7:0a:0d:99:9e:c2:34:d7:14:
aa:7d:7b:7e:f5:db:e9:c0:1d:4c:87:e4:8a:0e:55:
6b:ae:d9:cf:51:e3:c5:6f:9e:67:02:3a:82:b2:03:
bc:dd:6b:a9:b8:b7:d6:34:ff:9e:ae:93:7c:97:44:
29:55:22:f9:67:83:e7:40:e3:f0:01:c4:0b:27:55:
38:1c:2c:08:8e:ed:5b:26:a3:8c:4f:09:f1:1b:78:
ba:40:a9:a6:72:02:89:10:8b:d2:e7:68:c2:c4:51:
8f:54:93:c9:2b:1d:dd:9e:99:c6:6f:d4:8c:06:8e:
3d:79:11:c6:0d:ec:6e:c8:94:3e:92:bc:b4:01:47:
01:ce:87:50:7f:58:82:ae:92:a6:16:0d:55:77:50:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:4D:BD:17:90:18:8C:EF:91:E9:34:0C:2C:94:E6:8B:94:EA:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iEBNvReQGIzvkek0DCyU5ouU6nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:08:84:82:a5:e4:27:0d:a4:31:02:10:7c:0e:91:c0:62:49:
2f:9f:cd:9d:b3:c0:d5:4e:a4:66:41:39:d5:ad:05:79:49:e3:
cc:36:de:59:71:d5:a9:86:0b:01:c8:8a:39:9f:02:86:fd:89:
c5:e4:c5:e2:2a:e9:77:83:aa:11:1b:95:85:14:35:99:42:04:
cd:35:8d:c5:54:26:08:0b:a8:72:b5:66:28:7a:b9:95:c5:d6:
af:13:2a:08:cf:e5:64:2a:b0:96:1e:5e:a3:6d:a7:ec:3a:56:
03:3d:4f:ba:d6:c0:2e:77:b1:2c:48:19:ca:29:bb:33:41:bb:
3d:19:40:69:e4:c0:fb:8e:60:fc:2a:90:c6:c7:35:e5:1b:f6:
3b:9e:93:f3:ee:d1:1c:b4:5a:fa:08:a7:f6:28:d4:58:7b:cd:
d5:0c:5a:d3:b0:74:30:3a:68:e9:ba:24:6c:20:ee:87:e7:25:
0a:a7:51:dd:64:63:d8:8c:d7:a8:be:f9:e3:71:5d:06:b8:1c:
19:42:0a:c3:17:97:0d:19:af:3b:04:5e:96:88:6e:e7:74:50:
8f:95:ff:37:c9:d6:ac:0b:d3:47:1d:84:57:16:93:ed:bd:6c:
58:9f:5d:05:8c:ac:71:c0:bd:e3:c0:72:7e:00:79:88:c9:c9:
44:94:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:18:54 2025 by rpki-client