Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibGMx6LX197EkLcHAB3K6dUpUjY.roa
File: ibGMx6LX197EkLcHAB3K6dUpUjY.roa (raw, json)
Hash identifier: 9Q3nITlKjL2oT71Ehn1bujHwPXnZJz6D7z30uTOCq8c=
Subject key identifier: 89:B1:8C:C7:A2:D7:D7:DE:C4:90:B7:07:00:1D:CA:E9:D5:29:52:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855F1359BDA4C8FCCACBA223503C11FDAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibGMx6LX197EkLcHAB3K6dUpUjY.roa
Signing time: Thu 29 Dec 2022 18:09:41 +0000
ROA not before: Thu 29 Dec 2022 18:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:13:59:bd:a4:c8:fc:ca:cb:a2:23:50:3c:11:fd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 18:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89b18cc7a2d7d7dec490b707001dcae9d5295236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:04:f9:f7:cc:f3:3a:d5:a4:37:0f:c2:30:
e2:3e:17:50:9f:40:75:a3:50:44:de:6f:1f:4b:8e:
55:d1:5c:24:e5:23:e5:02:f6:ae:32:18:95:e7:1e:
ed:ce:b3:e0:70:00:05:f8:fa:7b:2c:38:aa:82:4b:
2c:4c:6e:7c:79:ac:be:20:08:a4:60:f8:77:94:9b:
82:5c:84:54:cc:f4:ea:e7:44:7c:df:d7:59:9b:fb:
90:54:19:d2:93:4d:61:88:39:e0:f0:bb:95:bb:f4:
86:1a:b0:ba:a6:cb:42:76:db:a8:95:b8:e8:c1:93:
07:cd:e8:31:87:a7:27:29:49:f3:9a:f1:a8:59:16:
a6:59:a3:5c:59:79:96:de:bf:00:99:5a:fc:28:7b:
85:0d:b8:94:02:e3:6c:f7:8b:96:71:bd:db:0b:3e:
c2:76:1b:d7:82:7a:34:73:bb:7a:75:be:d1:4a:78:
2f:7b:4a:2f:81:c2:35:bb:23:d6:9e:79:db:1c:a8:
99:c8:10:6c:33:1a:f9:91:b5:da:a5:17:3e:88:fe:
62:27:76:de:f2:8d:c6:8b:54:9d:1f:87:d4:55:ab:
82:7c:04:fd:54:05:47:2b:3c:8b:58:7f:bc:f5:c6:
d5:63:c2:79:ff:13:13:27:01:0d:1c:1f:9d:f3:56:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B1:8C:C7:A2:D7:D7:DE:C4:90:B7:07:00:1D:CA:E9:D5:29:52:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibGMx6LX197EkLcHAB3K6dUpUjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:ea:ee:97:ed:09:fb:c3:0a:10:5c:85:0a:c5:a8:a4:84:46:
60:26:c4:cb:64:9a:66:e1:50:d8:5d:13:e9:5a:7f:f7:43:36:
c1:e2:dc:d3:2b:e4:02:b4:81:7c:2e:18:45:ce:7c:2c:9e:1b:
1c:dc:57:e7:12:0a:00:d1:9f:7f:3f:aa:b3:d4:39:e7:14:85:
dc:7f:c0:d8:e2:ae:17:a8:ce:a1:bb:77:e4:28:51:dd:c4:8c:
87:10:59:1f:2c:18:e9:a1:d6:21:88:26:2b:4b:ff:4f:e1:a7:
09:09:e7:08:eb:fe:10:80:a1:97:0b:ec:d9:2e:e8:06:78:0a:
c9:a8:43:c4:71:a3:90:80:c6:ae:a5:18:e2:45:73:1e:d6:d8:
3a:83:dc:95:f7:5c:17:27:06:01:f9:ca:70:ab:8b:6d:be:34:
62:a5:8f:e4:97:93:d0:09:90:ab:2a:f5:c5:3f:a5:18:16:2f:
c4:55:69:a5:ce:0c:f9:f9:8e:88:4e:6e:c7:c3:5e:b1:5f:e4:
29:4c:df:41:ea:5b:1e:ab:09:12:d7:5e:43:fb:cb:36:09:33:
6e:8d:3f:3c:7c:89:9a:66:0b:b1:94:38:e8:2e:c3:43:7a:56:
5a:16:d9:b8:11:25:0d:3c:f9:53:75:8a:be:11:54:b9:97:c5:
66:aa:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:52 2025 by rpki-client