Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iVDxkb2K5aABsfAuBgcUGeE0tCw.roa
File: iVDxkb2K5aABsfAuBgcUGeE0tCw.roa (raw, json)
Hash identifier: 5PoAax4d3f1voTtkWfuAQY3lhUKrJ9UWWAHKy0TY8ik=
Subject key identifier: 89:50:F1:91:BD:8A:E5:A0:01:B1:F0:2E:06:07:14:19:E1:34:B4:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188115EDDABA75788B5EE794E2C49713396
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iVDxkb2K5aABsfAuBgcUGeE0tCw.roa
Signing time: Fri 12 May 2023 19:10:09 +0000
ROA not before: Fri 12 May 2023 19:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:11:5e:dd:ab:a7:57:88:b5:ee:79:4e:2c:49:71:33:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 19:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8950f191bd8ae5a001b1f02e06071419e134b42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:1b:ad:d9:d9:ca:bb:15:71:8a:f5:a4:37:
3c:90:8d:86:cf:5f:f7:9f:e8:38:1c:49:81:49:28:
6f:d0:8a:d9:b9:59:cd:89:2f:4c:1f:05:c0:55:71:
0c:94:62:dd:1d:07:46:64:92:bc:ce:0d:1b:bf:25:
23:1e:b7:2e:69:88:22:47:c9:be:53:ef:b8:a6:3b:
b5:89:f3:13:d6:b5:e3:a1:c2:3a:d3:71:48:d0:eb:
83:de:d7:cd:40:47:8f:7b:00:26:28:8d:b5:15:f9:
de:c2:4f:35:3c:d3:ad:03:7a:b1:3b:f4:65:6a:c9:
3b:b1:bf:d4:76:c9:f9:fa:b4:75:2a:6b:84:96:05:
23:4e:82:18:0d:78:d3:4f:f0:e7:e3:cf:84:a7:00:
2e:8e:33:a4:dd:82:ae:93:83:06:51:a9:be:e0:97:
49:c2:d2:f0:9f:2a:db:db:26:c2:af:ec:b5:7a:ca:
50:35:63:60:6b:5e:5f:fc:db:4f:a6:32:3b:f6:91:
32:bc:a2:93:71:c9:60:7c:f2:e8:01:b2:cc:50:aa:
d3:b2:ef:9f:3d:d3:1a:4d:79:47:2a:66:d7:68:e8:
d1:d9:d5:53:a5:59:67:b0:03:cc:47:73:46:17:b8:
33:05:70:ec:e2:30:a7:4f:94:75:87:e3:ce:f8:99:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:F1:91:BD:8A:E5:A0:01:B1:F0:2E:06:07:14:19:E1:34:B4:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iVDxkb2K5aABsfAuBgcUGeE0tCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:71:e3:53:28:29:ac:fa:c6:ff:5c:4c:8c:34:cf:fb:54:8a:
58:67:62:cf:fa:3d:c7:aa:6b:31:4c:47:20:5a:31:70:58:f1:
ea:ee:e0:5d:da:2b:b8:fd:78:40:3e:3c:b4:23:8f:14:51:7e:
ee:8a:4f:0b:e4:2a:07:3d:b1:83:d2:9a:a1:9d:54:fd:31:cc:
75:c6:91:c5:96:18:dc:e3:27:9f:53:8d:1a:3e:60:3a:22:81:
0b:18:44:4a:31:73:21:ba:02:2d:26:ce:73:40:5b:6c:4a:93:
c5:28:8f:12:c2:78:7a:0e:0a:f7:0c:98:e1:06:f4:d6:ae:a2:
43:c7:d2:11:bb:e9:38:4e:fd:34:b3:f3:89:02:6a:97:f9:98:
84:84:db:c5:f9:84:e5:91:f7:5a:1c:b5:03:11:b0:4b:d7:ce:
e9:a8:d8:ad:a4:13:95:93:7c:c1:34:94:19:a1:fa:a7:4e:4c:
e1:6d:5f:a3:38:eb:a1:af:ae:dc:c8:b4:5e:00:c0:bb:8d:3d:
25:76:eb:fc:07:6b:8f:01:2f:1d:50:47:91:85:79:cd:54:73:
ec:ec:99:b7:b9:55:3b:34:17:56:b3:37:28:cf:f1:71:3a:1d:
14:14:b8:90:15:27:73:70:e4:4c:f1:20:55:06:04:d6:f6:f1:
43:dc:04:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:26:08 2025 by rpki-client