Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSqz6p9mIHKBkLyaudo2bkDczU4.roa
File: iSqz6p9mIHKBkLyaudo2bkDczU4.roa (raw, json)
Hash identifier: 4WgMRbf8H7wDbmw6SgD56ysrOInrgyWp0P4COa0Qkj8=
Subject key identifier: 89:2A:B3:EA:9F:66:20:72:81:90:BC:9A:B9:DA:36:6E:40:DC:CD:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A2043C0FDDB55245AD39304CF19E4B0A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSqz6p9mIHKBkLyaudo2bkDczU4.roa
Signing time: Wed 11 Jan 2023 18:07:44 +0000
ROA not before: Wed 11 Jan 2023 18:07:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a2:04:3c:0f:dd:b5:52:45:ad:39:30:4c:f1:9e:4b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 11 18:07:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=892ab3ea9f6620728190bc9ab9da366e40dccd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:ca:d2:11:3d:3a:a9:dd:37:00:c1:01:69:
9c:df:05:ad:8c:86:48:fd:83:8f:f8:29:9a:0b:6e:
86:bd:e6:44:e0:46:5f:38:de:bf:13:7e:7d:81:c0:
2b:13:a0:19:02:b9:8f:35:e6:5d:d6:7f:91:92:99:
a9:cf:59:07:ff:8a:39:d1:cf:dd:23:e6:fe:10:f6:
10:d2:d3:0c:ba:ef:9c:a2:06:7e:f9:05:28:97:b8:
f4:b1:3f:44:79:1d:6d:39:73:59:15:da:9d:17:cf:
40:0b:97:0b:5d:43:81:66:1e:9d:37:d4:d0:cc:28:
f8:95:0f:e1:8a:ac:57:c5:ec:59:ca:2e:e4:a9:9f:
9e:51:c8:91:18:0b:bb:15:70:6a:07:43:66:8e:8f:
43:9e:05:b4:c2:2f:24:a3:3f:8f:38:cd:20:d6:06:
9f:15:c5:bd:d9:a5:29:44:b1:42:13:45:21:d9:1c:
2e:11:92:7c:50:e0:35:81:7f:fa:8f:f0:f8:d3:61:
46:9b:1d:00:db:dd:25:dc:bc:87:70:c1:0f:49:b5:
78:ef:61:14:94:d9:30:ef:e5:c5:b3:e3:4d:e4:c4:
a3:d4:d6:c6:95:a7:c3:f5:ce:48:fa:36:ca:8d:7f:
67:1a:29:53:3b:15:ab:5d:11:98:a8:65:f1:9e:9d:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2A:B3:EA:9F:66:20:72:81:90:BC:9A:B9:DA:36:6E:40:DC:CD:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSqz6p9mIHKBkLyaudo2bkDczU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:15:a3:a1:6e:67:21:09:47:45:c6:4d:fb:ea:f9:d8:5e:58:
4c:a5:2c:42:5c:72:f3:92:eb:cb:89:48:4a:93:51:19:75:af:
97:32:25:e9:33:35:a2:c3:69:46:bd:f1:5b:23:d4:ed:2e:5f:
94:22:84:70:4d:7c:c0:ba:48:ca:c7:ad:c5:f8:60:c9:e1:84:
6d:0a:c5:77:4f:ef:01:d0:b0:3c:37:fb:11:10:01:f0:86:40:
45:32:4a:09:af:34:6c:e3:84:db:78:87:bb:1a:be:41:3b:39:
e8:91:08:b8:1c:dc:cd:52:03:87:28:bf:93:50:18:d4:61:52:
a2:33:80:34:63:b2:01:a5:1c:e1:d7:94:1c:b1:5e:e5:91:03:
87:92:c0:82:91:46:1a:ba:9d:a5:7c:d9:46:88:5f:ed:1b:8b:
27:06:72:18:bf:2f:ec:fd:db:ef:95:38:4a:05:5b:e4:2b:95:
cb:b4:3d:85:02:71:44:7f:bd:c1:95:21:46:de:ca:6c:0e:7f:
bb:e5:af:9a:db:57:eb:bc:f7:4e:99:57:11:c5:ee:5e:88:df:
a9:3d:98:8c:d8:59:7a:77:1d:94:2e:7e:15:8e:18:b3:a3:16:
09:31:a0:7c:dd:a5:95:4e:42:14:ec:35:a7:38:7a:ac:60:c4:
5b:46:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:25:58 2025 by rpki-client