Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iKEjYUl7saXFkQiq4qd4KQ9_4dY.roa
File: iKEjYUl7saXFkQiq4qd4KQ9_4dY.roa (raw, json)
Hash identifier: OKW4QuUBasD6eCU01jIGf7fFNOSkQQHdHx96vJQdnWc=
Subject key identifier: 88:A1:23:61:49:7B:B1:A5:C5:91:08:AA:E2:A7:78:29:0F:7F:E1:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B586E16F056ADFBAA1323523BD5A8AAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iKEjYUl7saXFkQiq4qd4KQ9_4dY.roa
Signing time: Mon 06 Mar 2023 06:06:00 +0000
ROA not before: Mon 06 Mar 2023 06:06:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:b586:122b/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b5:86:e1:6f:05:6a:df:ba:a1:32:35:23:bd:5a:8a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 06:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88a12361497bb1a5c59108aae2a778290f7fe1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:b0:b9:24:20:ea:e7:7a:3d:eb:de:bf:dd:
07:d0:f6:88:60:d1:e7:3c:bd:53:c8:8f:87:89:21:
70:ed:06:10:f3:2f:47:fc:03:41:4d:f9:d5:62:0f:
47:9d:9a:16:1b:16:dc:27:a8:b1:77:73:53:7d:ef:
fe:d5:18:b8:a2:86:02:9f:05:9c:ac:79:17:0e:14:
de:04:46:ff:29:0c:c8:3c:22:dd:60:15:9e:c5:73:
55:2d:25:14:ea:03:5e:54:0b:3d:ce:38:dc:fe:ba:
d6:b2:48:cd:cd:15:ce:b7:16:7b:32:e9:2a:25:cf:
50:a6:fb:15:72:ff:14:83:db:90:96:14:36:b3:4d:
2b:a2:53:d7:51:7e:bc:37:02:f7:60:e5:de:6c:60:
e6:ff:f2:89:e0:4d:2f:84:f1:66:42:da:4c:31:d9:
d2:bc:95:bc:cd:83:4f:28:f2:58:1f:a0:cb:fd:4c:
ac:6c:83:a1:bd:af:25:ed:d2:21:1b:07:1c:5e:20:
13:7d:37:2a:38:32:e1:c3:10:77:f9:d7:1f:e7:cc:
78:94:14:5e:f7:14:2e:fd:5f:b7:89:66:68:92:82:
a4:98:08:ba:8e:d6:63:92:32:ed:92:c0:92:49:a9:
87:d0:7a:a0:a5:9a:ab:60:aa:6e:e6:24:55:6d:bd:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A1:23:61:49:7B:B1:A5:C5:91:08:AA:E2:A7:78:29:0F:7F:E1:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iKEjYUl7saXFkQiq4qd4KQ9_4dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:9c:3d:9f:23:df:46:c2:86:a7:f0:fa:e5:99:f6:b7:aa:01:
93:c3:31:3d:40:3e:bc:a5:53:00:c9:ac:d6:45:12:b8:f2:f2:
33:6b:96:4e:e5:9d:12:9e:1d:1b:d5:e6:89:90:7c:e4:48:42:
1b:10:52:19:a2:17:78:69:6d:0a:b2:c2:0d:0d:af:70:f7:95:
0d:85:82:5a:15:d1:b1:20:9b:d3:dc:69:88:a6:e7:e4:1f:41:
24:26:a9:b2:a5:76:27:0d:04:81:14:b2:0a:7e:73:d0:96:db:
64:2d:b8:5b:9d:42:3f:c5:2c:0a:d2:53:7a:b4:92:79:78:b7:
7b:39:c7:80:6e:67:79:fd:fe:44:43:dd:d3:c4:da:5d:3f:24:
2f:fa:7f:27:a2:e9:f8:45:8d:f0:21:58:1d:b5:c8:98:3c:37:
69:07:f2:66:79:64:15:7e:83:89:59:66:c9:b4:27:50:c5:80:
c4:27:ee:44:2a:49:23:b7:25:56:96:6d:a1:86:ad:25:2d:97:
84:17:d9:9c:96:d8:4e:6a:6d:f6:4b:0e:7f:a2:c1:8f:50:9e:
54:62:b8:31:09:6b:d6:39:ce:2d:54:be:81:74:5a:d5:73:8c:
43:2b:a2:ce:0f:25:fb:c2:90:b9:7d:4e:73:63:40:9b:f4:e2:
e9:74:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:59:27 2025 by rpki-client