Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ia0bCD1plbxmLv_aaa7HGCAeNHQ.roa
File: ia0bCD1plbxmLv_aaa7HGCAeNHQ.roa (raw, json)
Hash identifier: nkTscmTWtA3/V209u1s5xHJp7GqoigDJfGRE2GBV6ak=
Subject key identifier: 89:AD:1B:08:3D:69:95:BC:66:2E:FF:DA:69:AE:C7:18:20:1E:34:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 80264952
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ia0bCD1plbxmLv_aaa7HGCAeNHQ.roa
Signing time: Sun 01 May 2022 13:11:42 +0000
ROA not before: Sun 01 May 2022 13:11:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149992786 (0x80264952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 13:11:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89ad1b083d6995bc662effda69aec718201e3474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:ef:54:c5:0c:94:e1:b1:a5:2c:48:6a:7b:
4d:25:d8:28:46:04:a4:1b:0e:a6:4d:c4:a9:08:63:
a1:db:6a:0a:a5:9a:f9:e2:b1:55:91:5e:0f:df:73:
97:78:b6:c0:28:45:83:c6:84:89:af:d5:d0:a1:b7:
80:74:78:7f:c7:6f:b2:15:a1:75:71:21:c6:6b:ee:
4a:51:99:cd:24:51:32:6a:03:73:2c:6f:1e:d7:cf:
a0:9e:02:a1:65:c9:99:97:aa:d7:50:4f:a5:fe:8a:
48:45:aa:44:a9:63:40:ba:87:90:26:7a:36:ca:c0:
17:8c:d4:64:1d:f8:82:3a:97:75:24:eb:5d:44:7f:
d5:80:77:57:bd:de:de:32:6c:60:1e:62:a7:5f:f3:
06:6c:ad:ec:c8:d2:49:ce:f5:a3:03:36:cb:02:5a:
00:76:95:c9:89:d4:fa:1a:2b:5e:8a:a8:c7:2e:aa:
06:e6:ac:a6:fc:9d:fe:97:5a:e5:c6:51:2e:71:67:
e4:f1:97:ba:5c:09:64:7d:93:83:cb:72:07:22:24:
44:5c:e0:50:39:bd:2a:50:a3:4f:f1:dc:3f:eb:31:
e2:2c:ca:5e:0f:dd:c6:b1:a0:e3:94:21:44:ca:b8:
16:e8:cc:40:83:14:b2:d7:fc:8f:fb:74:3b:9f:a5:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AD:1B:08:3D:69:95:BC:66:2E:FF:DA:69:AE:C7:18:20:1E:34:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ia0bCD1plbxmLv_aaa7HGCAeNHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:b9:62:d1:8e:07:ff:e7:64:0e:5e:b7:71:4a:2e:1e:c6:c4:
08:fe:e7:73:62:68:4a:0d:22:85:25:ad:5c:f9:3d:62:08:c4:
d1:17:92:be:92:9b:a6:5f:bc:cd:8c:3b:64:b8:2b:25:87:ce:
3e:91:33:da:38:1b:38:7b:3d:61:5e:03:08:ab:bd:25:28:5f:
63:52:b7:c7:87:39:35:7f:60:60:74:7a:50:ce:95:2a:c4:9a:
c2:f7:e9:e9:5a:cd:ed:2f:c1:31:ab:c5:73:6e:d8:54:26:6d:
ce:b3:85:da:f5:88:5d:1c:4e:90:98:5e:a5:55:84:36:2e:ed:
f7:31:14:58:84:0c:59:df:ff:68:bf:b5:4d:85:83:f9:88:6a:
6f:f7:5d:4a:7b:5d:bc:da:29:6b:2f:53:94:d5:9c:e0:d8:90:
cb:06:13:cc:ef:71:b1:10:15:12:f5:00:07:4d:f0:cb:4a:5f:
5c:ff:3a:3f:48:82:85:82:e3:fe:0f:08:aa:89:29:a3:6e:d4:
35:d8:cf:0a:27:74:62:a7:4c:ba:45:08:5c:c1:a9:ab:99:2a:
c9:8b:65:84:43:d7:ee:a2:e5:34:ca:fc:f2:ba:e8:18:46:f9:
9d:c3:fe:13:13:4f:9a:83:d3:80:aa:95:89:29:71:09:92:ec:
0c:d7:2b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:40 2025 by rpki-client