Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iLbj-EYShgvnR5Cll2x7l3TgNTQ.roa
File: iLbj-EYShgvnR5Cll2x7l3TgNTQ.roa (raw, json)
Hash identifier: LuWbGmd/tlN3kuxAz2LxBBaC+pPLgw6I6QR6EqfZaMo=
Subject key identifier: 88:B6:E3:F8:46:12:86:0B:E7:47:90:A5:97:6C:7B:97:74:E0:35:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AEAACBD322A9262FC729B3AFD9616819
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iLbj-EYShgvnR5Cll2x7l3TgNTQ.roa
Signing time: Sun 23 Apr 2023 15:10:41 +0000
ROA not before: Sun 23 Apr 2023 15:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ae:aa:cb:d3:22:a9:26:2f:c7:29:b3:af:d9:61:68:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 15:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88b6e3f84612860be74790a5976c7b9774e03534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:22:8e:6a:35:0e:d2:15:49:fc:e5:c3:4f:
f6:88:ff:05:d9:1d:b7:89:0c:0f:fc:85:af:8c:db:
84:51:94:2a:e0:68:77:6a:1f:61:39:9f:75:7a:cd:
df:9a:d5:d2:54:56:4e:b0:15:ea:cd:e2:91:ad:bc:
e1:bb:d2:b7:21:28:cb:e6:78:1a:4e:33:dc:44:f3:
66:9b:79:41:e1:71:e9:5f:a5:15:79:22:1e:a1:e8:
7e:dc:d9:f9:1d:a5:b7:c0:60:4a:5c:bc:07:29:26:
82:b7:98:46:7e:4e:7a:68:87:e0:e4:02:fe:65:84:
39:58:69:ed:dc:0b:c6:c2:83:22:24:80:fb:4c:ee:
55:79:01:e9:4b:9e:b7:8b:e3:13:fa:cc:4c:d7:65:
73:1f:03:20:49:a1:4b:7f:7f:1e:a5:7d:41:f6:77:
7b:dd:e4:cb:f1:dc:89:e4:24:7a:e9:18:19:38:8d:
3f:ad:71:08:d6:8c:2a:b7:3a:28:3a:4e:6a:87:41:
0a:72:8d:48:56:1a:51:b3:0f:5c:cb:9c:2d:d7:54:
85:cc:b4:ca:5e:19:00:d2:e5:b6:4d:cc:4d:a5:41:
e9:1e:85:19:00:10:cd:8b:34:0c:af:5f:a8:5a:48:
72:a3:c8:f5:f5:46:40:7e:e4:e9:bb:2d:2d:02:39:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B6:E3:F8:46:12:86:0B:E7:47:90:A5:97:6C:7B:97:74:E0:35:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iLbj-EYShgvnR5Cll2x7l3TgNTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:b3:a8:09:af:1d:e7:0a:28:b6:cb:a0:0a:3c:85:70:61:01:
95:3a:57:bc:cb:c7:2a:09:29:8e:a5:f4:b6:03:eb:f0:fd:95:
47:35:d8:22:6d:9b:83:b9:dc:38:88:f2:07:77:5e:45:ec:8e:
6c:57:4b:03:11:b9:63:9e:6e:a0:76:c5:ac:96:05:d6:d3:45:
db:a5:96:8b:24:02:dc:26:9b:9a:18:a6:31:12:ba:b2:d1:f3:
6c:7b:1a:f3:4c:85:43:fe:ae:ee:66:01:94:78:01:ad:e8:56:
24:1f:f2:ea:31:5c:8e:42:b1:ab:5c:9a:73:65:e1:f6:21:ac:
5f:f2:e9:61:8b:79:28:aa:6a:3b:09:cc:31:89:e2:12:cd:53:
52:43:a3:d4:60:74:8a:f8:3e:64:06:cb:f5:19:41:d2:89:40:
c7:f3:d9:ad:27:0d:a1:84:b6:fb:43:26:d7:92:2a:f8:8e:15:
23:ef:4c:14:ad:91:69:0d:68:0b:4d:9f:3b:66:4c:ed:f4:58:
4b:75:ec:c6:80:ad:34:53:f7:61:96:9c:eb:ad:31:88:1e:e9:
c9:ed:5b:ea:fd:0a:01:87:8d:00:fa:6b:e8:d8:35:c7:6f:7a:
4e:73:fb:b6:2a:15:fd:ae:fe:f6:87:8a:f2:31:bf:17:b2:d1:
50:49:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:48:09 2025 by rpki-client