Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iKZ_fZsdc__2kYKBSogp43NHzfI.roa
File: iKZ_fZsdc__2kYKBSogp43NHzfI.roa (raw, json)
Hash identifier: SVNYuwTfFVmi4YzpTNCf1IovJw76tihL7xB28/JEwwc=
Subject key identifier: 88:A6:7F:7D:9B:1D:73:FF:F6:91:82:81:4A:88:29:E3:73:47:CD:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7137181C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iKZ_fZsdc__2kYKBSogp43NHzfI.roa
Signing time: Thu 10 Mar 2022 05:09:35 +0000
ROA not before: Thu 10 Mar 2022 05:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899436060 (0x7137181c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 05:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88a67f7d9b1d73fff69182814a8829e37347cdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:fc:79:53:1c:b1:2e:d1:89:73:e7:0d:5a:
50:1e:2f:17:7c:a6:fa:0d:6b:17:9b:e3:13:17:55:
a5:0e:65:50:aa:5b:a0:8b:c8:ba:37:25:6a:76:85:
79:7c:54:f6:64:9b:d7:fd:13:d0:eb:a5:42:23:89:
17:22:c9:69:87:0e:a3:61:e2:4d:4f:2d:39:68:a5:
b2:68:d1:78:47:dc:8c:c0:2f:6d:d4:ed:87:e1:22:
26:93:dd:fb:7c:a0:ad:58:e5:57:4f:97:0c:49:29:
f3:c2:34:da:3c:b4:a5:14:00:7c:56:d3:86:9a:b2:
13:e5:d0:b4:52:e4:de:30:01:45:6c:91:d9:f0:7f:
bd:b2:b6:c6:6e:13:e2:da:84:5a:cf:60:ae:3d:43:
f3:44:63:56:ff:e1:fe:5b:57:45:ae:d2:c6:ce:81:
0a:5c:4c:f0:04:a4:1f:f2:ac:9f:01:90:c1:65:5c:
d6:85:77:bc:16:94:66:9e:d4:9e:23:74:74:bc:07:
e6:6e:e1:4c:92:41:bc:f8:7e:47:1a:05:84:ed:89:
97:09:af:fe:2a:de:87:1e:b7:9e:19:21:dc:01:2d:
f2:17:40:88:af:d9:1c:c9:fe:ba:1d:89:1a:f8:dc:
3f:49:35:ce:4f:4c:9d:34:de:e8:54:72:32:70:d7:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A6:7F:7D:9B:1D:73:FF:F6:91:82:81:4A:88:29:E3:73:47:CD:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iKZ_fZsdc__2kYKBSogp43NHzfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:b2:89:33:52:29:4d:10:9b:65:67:13:5e:d7:ee:00:00:ca:
74:2e:d7:f9:59:b0:2b:15:89:bd:10:23:9b:95:3e:29:e7:95:
70:66:e7:d2:78:cf:b2:8e:7b:8c:89:7a:a6:8f:64:83:ee:12:
ee:76:ed:7c:fd:49:85:4e:fb:78:0d:73:dd:4b:88:f4:e3:01:
77:2c:fe:62:2e:ba:54:fb:90:11:58:8d:01:7b:07:47:ea:17:
90:1b:21:e9:1d:93:2f:b1:47:0c:9e:99:c1:8c:4f:ad:71:f1:
35:d5:aa:45:51:ed:c4:60:e6:72:09:5b:2b:db:a1:89:5e:e5:
90:12:4b:75:c5:3f:37:78:c5:13:dc:68:6c:a6:c6:8d:bb:d6:
03:2a:9f:62:11:e8:ca:0a:cd:8c:fd:8c:ba:8c:58:65:7c:ad:
5f:6f:7b:59:62:87:f1:5a:b3:e4:ed:76:24:88:59:a4:85:7d:
e3:07:33:d5:f8:34:b5:3c:47:ce:ba:1b:9e:c5:47:ee:8d:84:
81:4c:e4:f1:99:54:9b:a9:7f:c3:87:e3:08:80:a6:85:cb:a5:
62:34:77:c9:de:42:86:a1:27:a5:a4:9a:3d:de:d7:20:0d:80:
c2:9f:76:5c:26:95:eb:a9:4b:63:ed:e9:e0:9a:3f:ae:78:26:
69:c3:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:07:37 2025 by rpki-client