Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iJM9g92VWNO6XZ6rxrGknywH1x4.roa
File: iJM9g92VWNO6XZ6rxrGknywH1x4.roa (raw, json)
Hash identifier: B/TTqxs8shxEPK8kn8X6rFp2EMmSlELLB+5AlwqfT3U=
Subject key identifier: 88:93:3D:83:DD:95:58:D3:BA:5D:9E:AB:C6:B1:A4:9F:2C:07:D7:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857A1BD3409B5908AAAFD79D86A04D9087
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iJM9g92VWNO6XZ6rxrGknywH1x4.roa
Signing time: Wed 04 Jan 2023 00:08:41 +0000
ROA not before: Wed 04 Jan 2023 00:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7a:1b:d3:40:9b:59:08:aa:af:d7:9d:86:a0:4d:90:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 4 00:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88933d83dd9558d3ba5d9eabc6b1a49f2c07d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9a:9d:5f:f2:33:53:da:2b:c7:22:16:67:97:
d2:06:07:ac:fd:23:a3:69:ca:ac:e2:0f:2f:f6:7f:
29:08:22:8a:d6:be:01:55:33:ec:33:69:ff:e5:a6:
dc:55:22:39:d9:1f:ce:de:2d:84:99:6c:86:2e:d3:
06:04:23:02:7b:12:eb:3a:6e:23:95:d0:2d:db:64:
5c:44:6f:74:55:9c:15:19:fe:7a:47:15:d3:d0:2e:
a5:3f:3e:2e:aa:9d:6f:55:2a:70:69:4c:5c:1e:05:
33:cb:87:a4:10:74:38:a0:5b:87:f2:ee:38:fd:fc:
7a:10:26:24:0a:35:bf:d8:3d:e2:b9:ea:91:27:e6:
6a:ca:5b:13:3c:88:05:19:13:ca:d9:e7:38:3d:54:
06:b0:03:f7:6c:be:23:56:36:9e:a5:a7:05:9f:86:
58:6c:68:2c:16:0d:3a:cf:4c:47:7f:ff:69:49:c0:
8f:ff:56:94:2f:26:43:5b:62:ef:7c:a8:8f:db:73:
de:1d:b2:ff:bb:40:42:14:6a:90:ec:15:9d:06:68:
2f:db:2d:91:8f:cf:ae:22:90:85:66:6c:7f:87:41:
5a:1a:e8:28:1f:39:57:26:43:c6:1b:bf:1e:78:15:
13:44:60:59:98:68:59:39:cd:94:00:17:9e:0f:29:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:93:3D:83:DD:95:58:D3:BA:5D:9E:AB:C6:B1:A4:9F:2C:07:D7:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iJM9g92VWNO6XZ6rxrGknywH1x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:b2:d7:a4:fe:ca:48:7d:0e:1b:ab:f1:41:26:a8:72:d8:50:
19:3c:37:1f:68:eb:db:2f:f1:86:21:06:60:39:72:ca:4f:45:
99:48:09:0b:c3:66:f7:07:53:ec:81:03:14:72:e2:ea:41:e2:
45:cf:f8:4d:84:53:1b:84:a7:15:63:16:c8:d8:1a:c8:91:3f:
2d:58:d0:b3:ca:a2:43:05:a4:fe:9e:9b:03:dd:1b:83:c8:2e:
40:23:b3:61:b5:76:f8:f6:1a:dc:fd:f2:d6:56:1c:98:63:c8:
36:fc:0b:ef:e1:6b:76:49:35:09:3c:2e:84:c2:ec:bc:02:7e:
c9:44:3c:26:ac:d6:5f:b1:47:6b:e6:58:cd:fe:5e:c2:a2:e6:
dd:ad:ba:82:e3:04:0f:35:a4:78:98:56:8b:c7:99:71:93:14:
0d:56:c3:c5:93:0e:f6:f2:0d:46:6b:ab:33:61:73:e2:ac:23:
b8:96:8d:f3:31:19:19:61:1d:bd:f2:e5:4d:52:fb:fc:18:c8:
57:5a:f4:f9:58:e4:d5:6c:29:55:1b:c4:57:ad:1f:81:45:67:
d1:a5:f6:aa:d9:ac:79:20:26:05:25:5b:52:99:37:89:24:5b:
e7:22:ca:c8:53:2e:10:4f:88:63:c9:1d:c9:87:75:16:86:59:
a3:6a:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:27:11 2025 by rpki-client