Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iOekE7MA8-JVQK0E6bMzi3hnZgQ.roa
File: iOekE7MA8-JVQK0E6bMzi3hnZgQ.roa (raw, json)
Hash identifier: QBEwiuK8/NZF2krdCzvjY9r4XLvGShZwdVm+6XroQBI=
Subject key identifier: 88:E7:A4:13:B3:00:F3:E2:55:40:AD:04:E9:B3:33:8B:78:67:66:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B527AA4D4B4291E5C4D36BB6CE13B399
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iOekE7MA8-JVQK0E6bMzi3hnZgQ.roa
Signing time: Mon 06 Mar 2023 04:22:00 +0000
ROA not before: Mon 06 Mar 2023 04:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b5:27:aa:4d:4b:42:91:e5:c4:d3:6b:b6:ce:13:b3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 04:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88e7a413b300f3e25540ad04e9b3338b78676604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:df:36:30:4b:63:df:db:9c:ea:58:44:da:1b:
32:55:b0:7e:41:0a:d1:d7:b0:7f:3b:ad:9e:cf:61:
e8:24:51:28:fb:54:7a:9c:02:63:0b:d3:70:da:af:
9d:53:77:b1:52:b0:4f:10:5e:bd:ef:f9:6c:8b:fd:
3e:58:09:cc:ea:6d:c1:64:e3:85:6a:9f:f4:97:bd:
39:7f:d5:f6:a7:6f:44:38:71:ce:73:68:40:c5:d6:
ba:84:85:2d:ab:73:7c:e1:60:4d:d7:8d:92:fd:12:
d0:72:23:0f:9e:fb:ed:65:4b:b3:59:07:16:aa:e6:
5f:35:30:cd:3f:fa:e2:3e:30:13:43:90:04:58:9d:
47:92:e2:59:cd:5d:6e:fe:05:6f:00:18:32:1b:66:
2b:0b:7d:fc:19:a0:2c:63:f4:e0:53:90:31:b5:6f:
43:06:87:71:49:a9:e5:c2:82:d2:f0:94:ed:d3:6c:
2b:a7:29:b2:e3:ec:38:bc:75:95:db:17:9d:85:03:
ae:01:26:6a:04:fe:82:aa:b1:7d:b5:b0:9d:fe:78:
a5:8b:19:fa:52:53:53:82:06:3a:12:aa:c8:0d:b1:
8e:b6:1c:0a:67:dd:d1:b5:81:28:3f:05:10:bf:e3:
55:31:05:5c:72:0b:03:e6:8e:c0:74:a2:08:9f:2c:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:A4:13:B3:00:F3:E2:55:40:AD:04:E9:B3:33:8B:78:67:66:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iOekE7MA8-JVQK0E6bMzi3hnZgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:aa:76:7f:0a:ee:d5:6d:3b:18:51:17:e2:a0:e5:1d:93:37:
1a:56:bc:3e:35:b7:70:52:c9:cf:0a:c9:d8:32:eb:30:07:1a:
6a:92:3a:23:28:99:e3:d6:64:7f:30:8c:e2:49:1b:11:8e:c1:
08:ae:39:24:6d:e3:40:ff:4d:36:ee:29:75:8d:29:1d:86:eb:
2f:01:62:93:37:01:02:60:91:7d:7e:56:c2:1f:e4:c4:f9:cd:
87:86:81:5d:68:f8:45:77:10:f5:f5:ab:03:cf:d3:a1:bc:d5:
37:5d:14:44:ca:91:91:2e:08:ab:07:71:63:43:35:ee:c9:da:
ab:7d:5c:7e:36:78:3e:1e:6e:8e:35:8b:48:6e:ac:3d:ea:09:
20:14:ff:93:a6:1c:e3:fd:b1:c8:26:c4:c1:d3:88:53:db:a3:
e9:15:c5:aa:aa:ba:6d:9a:ee:92:de:8d:df:ee:77:a5:93:5e:
43:cc:85:b5:8d:0f:60:b4:6f:10:ae:37:df:82:47:e2:27:6a:
4c:a1:d7:50:56:dd:05:4c:2f:ec:0f:86:17:3b:e6:71:46:d9:
17:12:38:6f:c5:02:eb:7f:f9:de:bf:7b:3b:03:79:a0:4f:65:
0c:a3:62:68:a2:7b:76:cd:4b:7a:0c:5c:8c:9b:2d:47:eb:24:
86:e9:9b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:01:41 2025 by rpki-client