Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibG8NwXssL2uZdMbCqX-n7hdNuI.roa
File: ibG8NwXssL2uZdMbCqX-n7hdNuI.roa (raw, json)
Hash identifier: z7noZE9L0oWbJeQC2BsHVsZqRjybtZQtaOawYxFFZtI=
Subject key identifier: 89:B1:BC:37:05:EC:B0:BD:AE:65:D3:1B:0A:A5:FE:9F:B8:5D:36:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8F2468F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibG8NwXssL2uZdMbCqX-n7hdNuI.roa
Signing time: Thu 23 Jun 2022 03:09:32 +0000
ROA not before: Thu 23 Jun 2022 03:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:8d72:6191/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401528050 (0x8f2468f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 23 03:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89b1bc3705ecb0bdae65d31b0aa5fe9fb85d36e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:f4:c6:5f:83:f9:62:ce:82:5f:25:b2:74:
6c:a8:c5:3b:a5:d2:af:7f:46:6a:a1:b3:48:47:c7:
77:f7:35:41:b2:a1:51:d3:8a:e8:e8:44:1a:49:a7:
d4:f4:8e:2d:91:56:71:c6:f0:b3:ae:59:b6:89:d6:
ad:cd:a7:34:7a:b4:ef:ce:54:93:76:b1:17:1b:64:
51:e1:14:2e:9e:d6:2f:5e:c9:59:ae:ed:08:3d:19:
0c:e7:8c:e3:bc:d0:84:d5:dc:8b:86:d4:0d:6b:21:
93:0d:05:94:a1:c3:d0:b1:6c:77:1b:65:41:68:5c:
77:30:e8:d1:b6:ea:45:fe:35:a3:7a:a7:11:ab:28:
e7:df:7f:da:83:1f:9d:c2:39:e1:62:03:64:5f:36:
55:e1:1a:a8:2d:b1:98:56:67:99:89:bc:09:c0:18:
5a:ce:b2:f6:0b:88:d0:9e:69:24:aa:a2:92:77:f7:
c1:dc:72:d2:d4:88:6b:c4:cf:f8:b9:ed:06:71:30:
e2:82:48:cb:2e:0a:d0:dc:15:ff:ee:1c:86:9e:f8:
00:92:a3:1f:e4:08:b6:02:62:b5:f0:ee:14:f2:53:
96:6a:cf:68:5c:81:03:85:fb:f7:21:81:86:10:57:
92:2c:ad:64:4b:4f:7a:c5:92:f8:fc:3f:1e:1b:65:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B1:BC:37:05:EC:B0:BD:AE:65:D3:1B:0A:A5:FE:9F:B8:5D:36:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibG8NwXssL2uZdMbCqX-n7hdNuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:ae:07:66:26:2f:7d:78:89:58:ab:99:7f:25:63:5b:82:26:
44:91:7f:7a:e9:7b:b7:dc:57:18:19:b2:a8:38:8b:4b:8c:37:
9a:42:df:a7:89:58:44:8d:93:48:04:eb:46:a4:c9:93:5a:fe:
da:f6:10:87:b3:2a:07:03:56:d7:74:5c:ab:48:0b:01:ef:e6:
cd:49:28:51:49:4e:11:7e:ea:47:f9:d9:01:ef:57:b9:17:98:
57:ea:58:e9:14:e4:29:ec:14:b9:79:be:d6:38:3c:85:24:88:
3c:b8:d6:c3:10:78:5f:7e:7c:a2:40:c0:d3:d9:6b:1f:89:37:
55:4b:cf:7f:a6:37:da:a5:6f:c8:78:de:22:49:d4:f4:9f:a4:
08:5f:f9:5a:25:bc:c1:f1:87:14:ea:56:4d:a3:37:f2:38:ef:
11:1d:09:55:97:44:13:35:f5:48:d9:03:d6:09:f9:01:70:dc:
26:26:c8:42:f3:25:25:a5:bb:59:68:42:45:c8:95:b5:6f:a2:
f3:05:9f:57:b0:37:bc:96:a2:4b:1d:c2:09:a3:8b:05:d3:83:
be:70:f4:1a:e7:a2:bb:f9:e4:d2:d9:fd:d1:c0:db:96:d0:49:
0a:4d:75:c1:71:06:7f:8e:ea:82:65:18:a3:53:7e:1c:00:53:
5b:31:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:31:57 2025 by rpki-client