Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iaAY00YNQJyPUij58CJZKDHojsg.roa
File: iaAY00YNQJyPUij58CJZKDHojsg.roa (raw, json)
Hash identifier: /rDFuj272VEvbUoea5oAZZVyurK4r0ADaHQZqtpf+MY=
Subject key identifier: 89:A0:18:D3:46:0D:40:9C:8F:52:28:F9:F0:22:59:28:31:E8:8E:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018858648E2F90F2FFEB630E411526538FB5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iaAY00YNQJyPUij58CJZKDHojsg.roa
Signing time: Fri 26 May 2023 14:09:24 +0000
ROA not before: Fri 26 May 2023 14:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:64:8e:2f:90:f2:ff:eb:63:0e:41:15:26:53:8f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 14:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89a018d3460d409c8f5228f9f022592831e88ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:ad:3d:0d:6d:9b:8c:e8:47:1a:6d:c9:83:
4e:42:42:33:0b:ad:8e:2e:6d:7d:4a:f9:e9:b4:5a:
59:81:d8:b8:4e:75:e1:8c:b9:e6:71:b1:0c:39:ce:
3a:33:00:16:fd:f8:1f:af:6b:9b:ab:39:9d:ba:c7:
ef:34:e1:23:99:eb:3e:78:8c:a4:c4:b5:fa:7f:14:
75:ae:aa:21:b6:c4:5b:d0:dd:ca:88:21:7f:15:dd:
2d:b3:4f:58:66:6c:1d:86:ec:3b:62:ce:79:a1:af:
ba:bf:dc:35:63:8e:54:5b:6a:d9:8d:17:d9:be:03:
31:4e:63:30:f9:a3:81:bb:12:9f:80:bc:41:96:3e:
3f:f7:17:82:6b:f4:e4:53:21:41:e0:1d:fb:6a:58:
12:0a:ad:f9:72:15:b9:f2:8a:7d:b0:38:99:87:41:
e4:ae:04:91:e2:30:72:09:91:2e:7b:47:71:02:99:
19:c7:3f:a9:fb:03:fd:8c:eb:4d:4f:e5:12:2b:94:
43:86:9a:e4:11:d3:bb:e6:f9:87:13:91:59:c0:5d:
3c:3e:47:f2:76:cb:7b:4e:db:eb:2d:36:d9:06:86:
b7:d2:44:35:2d:41:86:36:b6:7b:85:78:4a:48:d3:
09:42:80:36:8f:6e:34:77:23:88:9b:72:39:99:40:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:18:D3:46:0D:40:9C:8F:52:28:F9:F0:22:59:28:31:E8:8E:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iaAY00YNQJyPUij58CJZKDHojsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:bf:fa:f9:56:f7:88:64:2c:be:28:60:51:3d:d5:9d:31:1a:
aa:96:df:f6:5f:b3:c7:49:a8:93:74:a9:0c:4f:b6:cf:3a:bd:
83:27:aa:a2:1a:98:10:42:5d:1d:eb:30:1c:a4:2a:68:12:14:
3e:27:17:c8:62:65:7c:82:44:13:b3:19:0a:fd:31:43:af:cb:
b5:fa:4f:fb:82:c1:63:9a:0b:c5:4a:19:d8:da:ff:c3:f5:60:
12:68:28:6a:68:32:79:37:9d:e4:b3:1b:f8:8b:ac:25:6b:48:
04:c2:be:c2:38:ee:de:ba:e9:45:23:b8:80:ef:d7:21:7a:3c:
71:6a:68:2e:27:28:78:61:2f:4b:f4:77:50:98:f2:37:8e:f7:
64:04:bd:e4:8f:5d:2e:ac:a6:82:69:4b:00:c9:eb:8f:e2:05:
ab:aa:a6:c3:12:cd:ae:a9:16:68:1e:a0:2b:4d:4f:36:23:74:
88:ea:c7:df:fa:36:a5:c5:fa:ab:89:0a:bd:f1:bf:ae:01:55:
6f:91:b6:77:bc:a5:f9:f8:76:9e:ed:b4:cb:94:b3:f7:67:4d:
39:fc:bb:12:cb:d6:9f:8c:bc:f2:ba:31:a6:bc:4a:96:08:63:
28:d1:21:1d:08:b9:c4:0e:ff:e0:23:2f:2b:ea:85:95:c7:f0:
91:25:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:00:45 2025 by rpki-client