Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iIj60p3XsynGa8Xwc4R2C1Wpr10.roa
File: iIj60p3XsynGa8Xwc4R2C1Wpr10.roa (raw, json)
Hash identifier: 0mmJ4s6J+pOMNkFA919kjACA01lkSDsxLOugnCQu3UA=
Subject key identifier: 88:88:FA:D2:9D:D7:B3:29:C6:6B:C5:F0:73:84:76:0B:55:A9:AF:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73885992
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iIj60p3XsynGa8Xwc4R2C1Wpr10.roa
Signing time: Fri 18 Mar 2022 13:10:36 +0000
ROA not before: Fri 18 Mar 2022 13:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1938315666 (0x73885992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 13:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8888fad29dd7b329c66bc5f07384760b55a9af5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:78:61:f8:db:92:ae:e2:58:61:8b:f9:0e:
93:a2:0f:65:69:82:68:2a:2f:3e:fd:e0:9b:ea:f7:
e8:e1:f6:e4:7f:42:04:2a:8f:ef:a5:80:e6:56:d5:
d8:80:5f:bb:c4:5b:69:ad:69:52:f3:32:a6:d4:25:
72:5f:0a:ff:34:69:6c:f3:e5:82:4d:d7:db:8f:79:
38:38:fc:5d:29:32:ca:1b:62:9e:d8:55:83:d0:a6:
1c:4e:aa:91:5f:29:d1:66:cb:dc:44:11:65:29:df:
5d:10:25:5f:08:8b:03:66:0a:1d:bc:4a:d4:18:51:
6c:f0:93:36:5d:01:66:12:c6:54:3a:fa:76:c1:6e:
c3:d0:c9:0f:a7:eb:70:10:38:84:bb:bc:b4:f2:94:
95:9f:bb:e8:e9:e5:9c:9f:72:45:ff:59:8c:b0:ce:
9d:e1:0e:5e:57:a3:9a:90:16:99:ef:0d:f6:f2:23:
80:51:16:8a:dc:72:17:1c:c7:aa:91:00:a7:7e:37:
4a:9b:44:8b:d7:27:32:ab:62:ad:2e:a0:f9:3f:aa:
56:b3:f6:69:03:cc:9a:68:55:11:4a:41:ed:6b:d6:
e5:8b:78:14:aa:e9:f1:1a:3a:35:fc:8a:56:3f:91:
9a:9f:9b:04:67:14:31:0a:43:81:e7:70:fd:6f:c0:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:88:FA:D2:9D:D7:B3:29:C6:6B:C5:F0:73:84:76:0B:55:A9:AF:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iIj60p3XsynGa8Xwc4R2C1Wpr10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:81:fc:74:c9:e5:37:ff:b0:f3:a0:ca:78:a4:68:c3:2b:91:
5c:71:4d:2a:8c:fc:73:6b:50:65:a8:44:5a:0e:86:4f:f5:31:
c1:bf:10:fa:5a:72:c1:1f:e6:37:18:c6:37:d2:2c:f8:39:f7:
19:bf:8c:10:f9:ed:b7:35:b9:8e:ec:38:11:27:fe:90:34:fd:
bd:13:1c:b6:0c:af:d9:86:10:1d:23:b0:59:80:5b:e0:da:71:
23:35:c2:62:d4:02:aa:8e:1f:c1:ad:cf:f7:54:a9:0b:63:e8:
fc:58:ad:8e:c4:db:90:df:90:e8:f5:82:6d:cd:cb:71:73:7c:
05:cb:51:b5:a3:57:1e:52:8b:9e:bf:80:d9:a2:fc:a6:e8:53:
e8:c0:16:b1:5f:75:3a:aa:e2:ae:bd:10:92:93:58:25:ca:e2:
1e:56:b5:a5:a8:a4:f4:d2:d6:7a:de:cd:87:2f:ac:db:bc:1b:
ad:14:4f:b4:e4:de:ca:1e:db:9b:70:8d:d3:e4:7a:b3:fa:dd:
26:2e:fa:d8:ac:e1:dc:51:ab:57:2b:e3:59:5e:25:ee:cf:52:
96:83:ac:e5:4b:12:c6:09:39:86:65:1b:7f:dd:95:1f:ad:cf:
a6:57:48:8a:8e:28:52:d2:74:f8:c9:26:e5:35:83:ab:54:ff:
76:14:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:12 2025 by rpki-client