Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSOhIGCFr7uRUzwCdv6iQwGbK3Q.roa
File: iSOhIGCFr7uRUzwCdv6iQwGbK3Q.roa (raw, json)
Hash identifier: HoVb/k1enE/AEwX4kXz6fshEZVIVRe4JR98ru27KTk8=
Subject key identifier: 89:23:A1:20:60:85:AF:BB:91:53:3C:02:76:FE:A2:43:01:9B:2B:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831512E5AB039DE15BF63C46E448F7090F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSOhIGCFr7uRUzwCdv6iQwGbK3Q.roa
Signing time: Tue 06 Sep 2022 23:11:43 +0000
ROA not before: Tue 06 Sep 2022 23:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:15:12:e5:ab:03:9d:e1:5b:f6:3c:46:e4:48:f7:09:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 6 23:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8923a1206085afbb91533c0276fea243019b2b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:87:cc:e1:8f:cf:6e:e1:9f:55:3b:5c:5c:
02:8f:0d:00:0c:a4:1d:54:45:f7:62:aa:00:2b:cf:
05:87:68:0b:a6:50:3d:bb:53:95:ef:c1:55:0b:e7:
00:8c:7f:88:b2:89:ab:0a:f3:b0:85:77:7c:10:ae:
87:72:09:6a:97:42:01:5d:c6:19:82:94:fc:9d:85:
a6:db:71:a4:1d:33:f7:6f:4d:87:67:5d:87:ce:eb:
11:b8:3d:42:c4:32:2d:c6:dd:e9:c0:7b:82:19:9c:
28:e9:ca:2d:68:1b:81:43:45:a5:04:c4:b0:71:f9:
b8:3b:a0:b9:b0:ee:7c:03:65:92:67:f6:91:53:43:
9c:d1:f7:b1:42:cd:37:21:15:18:05:0c:fc:8d:db:
f6:81:57:e0:45:e5:b9:6b:14:e0:cd:52:75:ea:49:
dd:bb:65:cb:9b:ed:87:4a:f4:61:47:04:28:c5:fd:
64:b6:3e:1f:47:cf:78:11:37:9b:a7:3d:92:2c:0c:
a7:12:c4:4a:85:2c:27:6f:d2:7e:2d:27:35:60:bf:
14:98:c3:f1:5f:aa:55:98:60:c4:12:51:34:95:2c:
2b:32:de:e7:c8:bd:97:9c:1c:e3:0b:cd:25:29:10:
1d:ea:cd:39:e1:d7:b1:05:9c:30:a4:ac:4a:d8:9f:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:23:A1:20:60:85:AF:BB:91:53:3C:02:76:FE:A2:43:01:9B:2B:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSOhIGCFr7uRUzwCdv6iQwGbK3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:f7:2c:47:47:b3:e0:73:6b:51:ff:d1:94:60:10:7e:09:34:
a8:7f:ac:d8:59:1a:ed:39:15:1d:51:dc:5a:21:53:23:b5:1f:
f3:b9:bb:c7:de:87:33:cb:3c:2b:8f:60:b0:6b:de:02:7d:fc:
0b:ea:f0:8f:4d:d4:54:4a:c6:e4:27:0c:d0:89:83:cf:66:4b:
d9:ec:0f:49:c6:48:86:94:c4:98:76:48:e1:f7:4b:d6:52:dd:
93:ed:1a:d9:48:eb:2f:43:f3:60:cf:9d:69:db:91:25:8b:25:
9e:ad:d8:19:f5:d9:bb:ee:75:c1:0c:23:0d:fd:e5:67:0a:b6:
bf:54:68:c9:1a:17:5b:b3:ba:d9:28:f9:ef:a3:f3:a7:5c:92:
dd:0d:8d:45:cf:bf:d9:3e:2c:e0:21:37:e7:68:7a:0b:46:db:
2e:2d:a6:c1:eb:57:8f:9a:61:58:80:18:c2:6e:3f:a9:a8:d3:
1a:04:66:03:15:3f:6f:f3:80:96:6d:40:07:43:c8:2c:6c:e2:
8c:c6:f6:a8:5f:22:15:8c:f0:a1:41:68:7f:1a:8a:50:e1:2e:
05:73:e2:64:4f:18:54:09:e8:6e:92:c1:30:58:d6:07:fc:46:
99:4c:d6:94:07:47:14:e0:5b:02:17:2a:52:07:60:b0:3e:1f:
92:39:c1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:19:08 2025 by rpki-client