Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iK9SCYgGAqgG-IM8LhIBGIgXxwg.roa
File: iK9SCYgGAqgG-IM8LhIBGIgXxwg.roa (raw, json)
Hash identifier: fBxEl36N3U6vBHaAqJMi9Q5fR9u3UaIlb8fJ/zF5awc=
Subject key identifier: 88:AF:52:09:88:06:02:A8:06:F8:83:3C:2E:12:01:18:88:17:C7:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186179DE8A0C7371D20FF85B6F9F914E6A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iK9SCYgGAqgG-IM8LhIBGIgXxwg.roa
Signing time: Fri 03 Feb 2023 14:11:10 +0000
ROA not before: Fri 03 Feb 2023 14:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:9d:e8:a0:c7:37:1d:20:ff:85:b6:f9:f9:14:e6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 14:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88af5209880602a806f8833c2e1201188817c708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:ac:ee:e5:f5:c0:17:47:0b:c5:65:31:ca:
2e:0f:85:dc:56:66:cb:35:47:ce:36:cf:c3:f9:84:
a5:0d:c7:2c:c7:ba:cc:cd:7b:28:b7:9b:14:cc:13:
ac:0d:56:a0:a9:e1:15:a2:b6:e7:85:6d:59:ed:95:
2c:e1:78:5a:d0:ba:aa:2d:51:ed:1e:0f:ff:89:27:
63:85:41:fc:6c:7a:21:94:05:e8:6e:86:05:60:bd:
5e:98:b5:99:44:d8:fd:25:2f:03:2e:7b:86:1b:db:
55:54:65:4d:b3:99:0d:2b:0f:9a:b6:7f:b7:8e:90:
15:0a:74:16:53:16:da:54:9f:ed:5b:1c:aa:61:97:
59:b7:ce:b1:4c:ea:96:aa:4f:32:59:e2:f8:32:35:
5c:12:be:ed:ec:84:2a:cc:aa:5b:85:d8:fb:d8:06:
86:75:df:c6:94:13:64:3d:b1:9e:93:0c:4d:f0:7f:
f8:7f:cf:e1:9a:a0:72:eb:03:a0:56:ac:4b:bb:0c:
85:fe:fb:3a:60:b2:97:d0:53:37:be:3d:59:b8:5b:
f3:fe:fc:b4:1a:e1:2e:68:2a:9d:1d:81:11:16:3a:
61:34:cb:a4:f0:b8:d4:98:5f:d0:da:a7:10:ed:14:
f9:f4:0a:56:5f:65:29:2c:03:21:40:24:ef:ae:57:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:52:09:88:06:02:A8:06:F8:83:3C:2E:12:01:18:88:17:C7:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iK9SCYgGAqgG-IM8LhIBGIgXxwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:d5:34:78:fc:3c:fe:1e:2d:9a:14:30:19:44:68:38:a1:73:
8a:2f:7f:62:f2:ea:eb:ee:f9:5e:02:6b:21:1e:88:1f:4b:c1:
4c:a3:48:64:0d:2f:0d:67:c9:82:d8:44:62:37:94:84:eb:4c:
bb:eb:68:6b:fb:8b:ac:5a:b7:cf:f3:c7:78:cd:9f:f9:bb:ec:
2e:52:09:7f:5d:2d:0f:66:25:0d:e1:c4:8d:b8:63:7c:c7:b2:
d5:12:0f:b2:1a:81:b7:3f:8c:db:be:d2:48:9d:2c:a4:0b:53:
95:a8:1d:76:f9:91:cd:fc:7a:73:b0:1c:3d:13:ba:4e:45:75:
ca:c3:ee:37:68:e2:4c:3f:45:ac:35:ee:be:8d:3c:ab:4e:b8:
02:a1:67:96:aa:34:b7:e3:17:99:a5:ae:7e:39:2a:96:0e:06:
f2:2a:6a:fd:cd:03:f8:1a:5c:f8:2e:ac:f1:70:81:d9:40:18:
29:be:1c:a0:ee:ce:70:7b:1a:23:f0:c5:bc:59:72:15:d3:1c:
67:7f:81:2a:ee:e8:b5:91:6d:e7:dd:c1:0b:cf:21:24:2f:2e:
a2:49:94:8f:82:07:d2:fd:6f:57:4a:b4:61:d9:dc:1e:73:41:
0a:4d:5b:56:01:fb:a0:73:2b:7d:9b:f1:e1:cc:a7:9b:69:22:
e9:07:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:25:45 2025 by rpki-client