Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iHeowBCT91WabNvK8yjFBTn4cBg.roa
File: iHeowBCT91WabNvK8yjFBTn4cBg.roa (raw, json)
Hash identifier: KI09O/2l+BB5yy3uVKLotHdvgO5B7fscTYn6Ya25HlM=
Subject key identifier: 88:77:A8:C0:10:93:F7:55:9A:6C:DB:CA:F3:28:C5:05:39:F8:70:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C5D9DA9B2276D6558829D53C1C44DB90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iHeowBCT91WabNvK8yjFBTn4cBg.roa
Signing time: Wed 18 Jan 2023 17:07:46 +0000
ROA not before: Wed 18 Jan 2023 17:07:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:c5d6:955b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:d9:da:9b:22:76:d6:55:88:29:d5:3c:1c:44:db:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 17:07:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8877a8c01093f7559a6cdbcaf328c50539f87018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:05:a5:f3:e9:20:19:11:3d:b0:b3:c5:c1:
98:f4:e2:df:7c:78:67:4f:b0:c4:00:84:37:4e:69:
f8:0c:de:f5:4c:73:35:9c:80:ea:c8:89:94:e1:15:
80:2b:e3:20:dc:16:2c:ad:a5:28:d9:54:bd:d7:f1:
ec:e4:0a:83:f3:b4:40:67:b1:64:60:4a:e5:8b:c8:
06:e4:6b:cd:9a:e0:cb:4c:b7:9e:dd:78:41:58:60:
d7:1e:f6:c0:27:93:a6:c4:24:2e:0e:86:c6:24:c2:
5f:85:73:c9:5d:1c:6b:db:fe:7f:89:c9:0d:60:e1:
50:b5:d8:d6:05:4b:12:ad:79:85:c7:83:d4:dc:63:
65:2d:56:1a:4e:79:92:39:93:3a:8c:56:6c:0c:67:
27:12:fe:d2:fd:44:ac:38:1e:9d:8d:cb:76:47:b4:
3b:df:6d:6f:99:2e:59:30:8e:c4:c0:ad:61:47:40:
b7:80:f2:09:dc:63:a0:5b:a8:a4:c3:cc:72:0a:40:
0e:77:11:22:e6:ac:5b:30:50:1f:07:4e:03:f4:fb:
fc:93:27:b1:f2:54:16:53:54:8b:10:c1:55:e0:98:
cb:d1:20:53:37:1d:cc:85:46:b6:d0:0d:c0:4b:1e:
da:b4:1b:61:da:b9:5e:5e:11:46:84:7c:bc:4e:59:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:77:A8:C0:10:93:F7:55:9A:6C:DB:CA:F3:28:C5:05:39:F8:70:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iHeowBCT91WabNvK8yjFBTn4cBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:1a:02:e8:04:9a:5b:ae:fd:28:93:ee:bd:c9:74:83:49:e9:
7e:e7:44:f3:7b:7f:eb:6b:b3:10:c0:62:92:76:53:b7:ed:50:
52:32:6b:08:01:23:06:5a:53:1c:b5:fb:6d:cd:6f:c6:87:10:
e3:81:11:df:d3:7c:08:a7:86:c6:a6:4f:41:1b:37:c0:2f:ca:
bb:af:ca:0b:99:d7:0e:db:91:29:96:0b:6a:af:1c:79:2b:6b:
23:f8:fa:a0:41:a7:11:23:26:37:86:c1:63:ff:1d:fb:57:ed:
70:29:6c:61:68:29:dc:9a:73:dd:c0:99:b6:d8:57:f2:34:14:
7f:db:a2:41:41:98:ce:f0:97:82:79:8f:ec:26:ff:c1:b7:ee:
2f:f6:d6:63:06:b2:1b:4b:94:39:84:39:a6:b0:7a:c7:ff:9f:
d1:41:0a:25:7a:0a:59:e9:5f:b6:b8:35:b6:a3:57:36:96:86:
15:13:42:b9:83:33:8e:7e:40:ce:e3:a3:63:74:42:29:e1:eb:
45:d5:0a:52:74:4b:4d:8b:2c:94:a6:c4:4e:cb:3e:ec:2f:3a:
1d:d9:b8:24:e3:da:51:33:82:68:7a:2f:33:27:3a:0f:4d:c2:
04:d1:ac:31:6a:92:82:78:c7:e2:0b:c6:5e:9a:0d:c6:1c:5b:
24:b7:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:50:07 2025 by rpki-client