Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iVI-uwvFOXd1KWl0cgsVgLIubiY.roa
File: iVI-uwvFOXd1KWl0cgsVgLIubiY.roa (raw, json)
Hash identifier: Oh+477xrX+wQKD2x9Au8sSH59rh+difNWk1OJExVsFU=
Subject key identifier: 89:52:3E:BB:0B:C5:39:77:75:29:69:74:72:0B:15:80:B2:2E:6E:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894EBD3C1FFCEE8ADDF142F7AA47293476
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iVI-uwvFOXd1KWl0cgsVgLIubiY.roa
Signing time: Thu 13 Jul 2023 10:12:51 +0000
ROA not before: Thu 13 Jul 2023 10:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:bd:3c:1f:fc:ee:8a:dd:f1:42:f7:aa:47:29:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 10:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89523ebb0bc5397775296974720b1580b22e6e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:11:f5:a2:0e:9a:9f:c6:6d:1c:ab:c5:21:
bf:d7:55:e6:5a:a9:f7:34:72:63:e3:7e:80:1e:bf:
bd:c7:b5:b1:10:b5:25:e2:b6:14:a6:c5:76:3b:00:
54:44:5d:8b:9e:b0:cb:db:02:43:8d:fb:ae:58:13:
b3:9a:f6:19:ba:86:2d:33:88:32:b8:8a:e7:ec:c7:
d0:f4:f3:b6:09:ea:c5:09:38:5e:06:23:12:8c:16:
ab:8b:cb:98:c9:26:25:b0:df:7b:9d:04:47:00:29:
74:97:9b:2e:42:aa:26:5d:05:94:2f:cf:58:27:58:
35:12:44:12:33:e2:87:0f:69:fb:56:1b:ae:7a:f0:
0c:59:b4:d3:4e:bd:95:e8:9a:91:79:8d:86:9d:33:
ac:a9:b2:41:04:0c:be:90:fa:30:70:aa:af:a7:29:
b8:0a:49:e9:26:24:27:6a:70:8d:0f:64:71:4d:65:
b9:47:79:29:85:9e:0d:69:d9:6a:70:9f:26:31:cd:
6c:14:96:3f:65:d1:c5:b5:13:f5:9c:50:58:14:e5:
fc:2a:ec:d3:cc:35:1b:8b:d6:d9:1c:c5:3b:27:1f:
cf:55:24:96:d1:1a:d7:5e:b6:a2:7f:a2:3f:c7:38:
24:b0:fd:9c:d9:09:aa:e6:28:e4:69:d9:28:6a:bc:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:3E:BB:0B:C5:39:77:75:29:69:74:72:0B:15:80:B2:2E:6E:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iVI-uwvFOXd1KWl0cgsVgLIubiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:3e:17:7c:4a:5a:7e:81:44:97:15:97:f5:c4:03:c2:4c:2a:
3e:53:3c:1b:37:15:09:9f:7d:2d:2e:64:62:7e:40:89:f5:cd:
5b:95:2b:2b:c7:83:eb:ce:e6:9e:5d:17:04:e0:4e:7e:9e:cf:
10:47:76:96:c6:5f:46:98:4d:3e:36:e8:c3:8d:ee:d7:ef:1a:
45:e0:4a:bd:6e:b4:77:0c:23:1c:40:7c:f1:5e:a4:41:4c:3f:
76:c1:b2:e5:b5:08:c4:98:1d:3e:84:2b:02:47:b1:a6:ab:99:
19:31:fc:79:c6:80:6c:f4:fb:89:82:8b:71:0d:06:33:27:81:
98:fc:82:c0:32:bd:c1:6c:9a:4b:2c:5d:b8:ea:37:43:05:7f:
05:e9:e5:0b:c2:37:2c:1a:e6:3e:b5:15:cc:0c:2a:62:86:58:
3d:11:f3:6d:62:db:8c:8a:26:6b:0e:a4:1b:fa:30:b6:5f:f9:
d9:ff:ad:73:36:8c:f7:d8:7f:f8:17:7e:e2:8d:6d:b5:cc:1a:
68:dc:fe:a7:ca:c1:fc:37:b8:c1:4e:7e:d9:77:f6:42:84:5f:
9e:c6:51:82:03:9f:55:37:9d:cd:62:4d:0b:3f:83:6a:43:0a:
4c:a5:67:69:01:50:33:95:1b:e4:15:df:3c:fa:9f:44:ff:da:
d3:08:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:44:44 2025 by rpki-client