Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iX3ZBr2lprVKxLiJLHGmfmQpjmk.roa
File: iX3ZBr2lprVKxLiJLHGmfmQpjmk.roa (raw, json)
Hash identifier: iMhQ4D6gy67dCBWuIvVgbdvths38vot3ptSOWAhkGLQ=
Subject key identifier: 89:7D:D9:06:BD:A5:A6:B5:4A:C4:B8:89:2C:71:A6:7E:64:29:8E:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82B13E93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iX3ZBr2lprVKxLiJLHGmfmQpjmk.roa
Signing time: Tue 10 May 2022 05:12:45 +0000
ROA not before: Tue 10 May 2022 05:12:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192653971 (0x82b13e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 05:12:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=897dd906bda5a6b54ac4b8892c71a67e64298e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:ea:76:79:f2:c9:20:22:9c:73:19:41:bf:
4e:90:79:ed:82:4a:b1:16:27:e0:b8:b5:b2:34:57:
2c:72:7a:c2:74:f9:51:b1:1c:f9:e9:8f:3d:f5:26:
05:0b:90:73:45:37:43:f1:78:fd:e9:3f:06:05:91:
c1:fd:f4:3b:2a:47:68:0c:df:de:8d:6a:f3:5f:66:
21:25:6a:e7:51:c2:fd:aa:2e:6f:84:8b:d6:05:11:
e4:24:26:1d:c2:c3:58:bc:bd:ab:33:dd:e3:17:d4:
76:52:d1:80:1e:0c:96:68:42:3b:5f:f5:d6:55:b6:
5d:2f:ca:9e:3c:a4:5d:67:16:49:60:25:9e:81:f0:
63:d3:a0:d7:28:90:29:93:b8:fe:ae:1b:4e:2e:7b:
e1:67:36:58:2a:90:6f:b7:77:58:5e:ce:f6:55:e1:
f0:93:f9:57:8a:ab:6b:b3:2f:23:48:d8:b6:27:0b:
00:4b:5e:7e:bb:22:d2:38:d5:59:df:e3:4d:d2:74:
c4:9e:8a:f0:12:c9:40:5d:04:32:99:c1:0b:30:5f:
e8:e3:74:1a:9e:36:92:35:e6:47:a7:64:bc:62:dc:
93:7f:7d:5a:6a:6b:cb:cf:02:73:66:f7:14:ba:92:
9a:08:33:8d:c7:f6:60:2b:60:e6:3a:61:56:23:1c:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7D:D9:06:BD:A5:A6:B5:4A:C4:B8:89:2C:71:A6:7E:64:29:8E:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iX3ZBr2lprVKxLiJLHGmfmQpjmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:4d:a7:c7:03:95:a8:a7:30:11:0c:52:50:eb:77:f3:0a:0e:
69:e8:62:59:87:52:a0:8a:b8:8b:39:b6:2a:74:cc:85:d1:c6:
00:3b:0d:7c:61:09:d0:af:ff:90:a4:ab:32:a7:75:80:2f:26:
f5:41:4c:6f:af:a1:55:f2:d1:10:fb:d6:ec:ce:f8:d9:aa:08:
4a:44:7e:9f:af:19:87:ba:52:69:96:4b:71:35:5c:de:94:37:
8d:42:ec:40:2b:02:e1:54:f6:4b:68:54:6f:7a:29:9c:54:07:
f5:b0:5e:73:5b:92:54:ae:b1:f6:40:7a:5a:a3:40:c1:a5:70:
9a:d6:77:7a:0b:05:f9:91:3e:fd:88:8a:17:4f:ad:b4:71:18:
0e:a1:9b:b1:c4:e5:16:88:54:85:88:c1:60:aa:61:cd:f6:fe:
56:11:49:f5:1b:92:ce:4e:e0:12:80:9e:94:07:a4:c2:82:cc:
25:df:e6:24:26:63:41:a4:99:1f:12:94:9c:50:0f:67:2b:4c:
39:b4:70:e0:14:1f:e3:4a:f6:e7:b3:b1:da:bf:86:8d:1c:f8:
2b:88:81:38:f9:3d:ef:29:fd:ff:c7:d5:70:76:28:96:9e:84:
00:c4:04:3f:33:8c:da:a4:67:79:88:d9:4c:82:3e:fb:19:df:
cd:ee:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:47:34 2025 by rpki-client