Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iGim2psEVsU8peEt22lfoI3f4Lc.roa
File: iGim2psEVsU8peEt22lfoI3f4Lc.roa (raw, json)
Hash identifier: SY7UKqeFi0B8BBSia+c0PYX/QfqA2z+TFmVmq2tRBt0=
Subject key identifier: 88:68:A6:DA:9B:04:56:C5:3C:A5:E1:2D:DB:69:5F:A0:8D:DF:E0:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877E99325B08F92F86F8F8C890FF70D572
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iGim2psEVsU8peEt22lfoI3f4Lc.roa
Signing time: Fri 14 Apr 2023 07:09:41 +0000
ROA not before: Fri 14 Apr 2023 07:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:99:32:5b:08:f9:2f:86:f8:f8:c8:90:ff:70:d5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 07:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8868a6da9b0456c53ca5e12ddb695fa08ddfe0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:db:f6:b0:62:e1:3a:c4:00:46:97:a6:8a:84:
9c:51:69:8d:92:bf:17:08:84:1d:aa:76:14:20:ce:
1e:d5:99:c8:3a:38:2f:af:76:46:34:f9:ea:53:53:
16:e5:38:2e:52:79:03:bf:24:81:73:03:ef:16:b2:
56:00:17:2e:05:31:37:d2:4c:f5:ea:32:32:ab:04:
98:d6:62:c5:f2:95:26:82:60:4c:c2:6b:9c:5c:de:
b4:14:7d:6f:44:fe:44:c2:4f:df:a4:66:78:68:d4:
27:ab:a4:96:29:be:b7:2c:2e:db:61:c1:fb:12:f6:
e3:b7:cc:14:dc:ab:44:f1:64:f0:e1:78:0f:f8:8a:
fd:a0:39:6f:63:0b:bb:c2:57:68:0d:18:94:95:be:
de:f2:19:9c:1a:4f:a2:3f:1e:61:54:e1:7c:3c:a1:
b3:c1:ff:3d:5e:3e:87:5f:60:6d:e4:b1:f2:f7:68:
d1:a6:69:13:88:78:90:2d:45:5b:61:b3:18:99:e3:
79:54:49:46:bb:d3:fc:01:e2:70:ff:50:4c:c2:b9:
f5:bf:eb:0b:10:ea:a1:18:95:7a:7a:cd:20:c3:6a:
a7:09:eb:b1:44:b6:fb:54:8a:9e:71:79:e1:6f:ac:
5f:9e:fb:f2:5b:a7:a6:81:ed:b4:55:01:9e:f3:86:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:68:A6:DA:9B:04:56:C5:3C:A5:E1:2D:DB:69:5F:A0:8D:DF:E0:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iGim2psEVsU8peEt22lfoI3f4Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:e8:62:ba:14:01:0c:be:12:65:9c:ae:99:e0:53:74:71:9d:
72:86:65:4e:17:4f:1f:97:e6:d2:3c:71:25:e7:51:7b:89:3a:
7c:3c:98:b0:1b:29:9d:ab:57:bf:78:bc:5b:69:4d:db:16:e1:
8f:b9:59:4f:e3:4b:4b:42:7e:b7:01:2c:5d:cf:8e:95:08:d0:
c4:2c:0a:db:c9:d2:54:d4:81:2a:f4:f6:e2:73:b9:ad:09:2e:
07:39:5a:d4:c5:d1:4a:ab:56:99:0a:cf:fc:26:90:08:be:46:
25:29:ec:52:7e:34:71:36:3d:2a:93:ff:62:bc:ec:35:91:e7:
38:37:b9:f5:db:76:ed:79:4f:c4:e6:f6:79:3d:59:6b:3f:1d:
6f:a3:81:31:6b:a7:6c:75:bc:03:f4:0c:09:d3:9d:f1:11:28:
86:4c:08:36:23:73:da:ab:19:ab:37:1d:14:f6:a9:b3:c9:4f:
aa:cf:8b:83:77:29:dc:25:8c:0b:5f:06:07:3c:8f:7d:f0:28:
3f:a0:fc:eb:26:4d:d1:aa:a8:a9:64:14:26:e8:d1:bc:82:25:
d0:a7:f5:04:54:0a:c3:bd:d8:08:2f:a6:04:30:11:87:3e:41:
05:79:c8:01:c6:9e:39:da:c0:0f:35:8b:aa:ba:30:f8:fc:ff:
59:cf:6b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:12 2025 by rpki-client