Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibK5VRd5IvhMv0wnv43lt2LAN24.roa
File: ibK5VRd5IvhMv0wnv43lt2LAN24.roa (raw, json)
Hash identifier: M06dntma0VRZDhPVQ7CHAGfaAWYqNatHYAKYst2+cqU=
Subject key identifier: 89:B2:B9:55:17:79:22:F8:4C:BF:4C:27:BF:8D:E5:B7:62:C0:37:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880D143AF8D7935AA3CE31520DC33453D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibK5VRd5IvhMv0wnv43lt2LAN24.roa
Signing time: Thu 11 May 2023 23:10:09 +0000
ROA not before: Thu 11 May 2023 23:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0d:14:3a:f8:d7:93:5a:a3:ce:31:52:0d:c3:34:53:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 23:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89b2b955177922f84cbf4c27bf8de5b762c0376e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b4:50:fb:41:fb:45:34:f0:eb:9b:d1:94:fa:
f6:3f:99:83:9f:a7:40:13:af:47:9a:af:9e:62:b8:
49:0b:7f:15:8c:08:88:1d:0d:27:c1:db:e8:6c:71:
2c:a8:1f:13:c2:0e:eb:cb:ca:b8:3d:0f:54:71:03:
40:e3:1e:75:9f:ac:7c:27:45:75:a7:f1:fa:09:61:
71:a2:bd:4c:74:e9:d0:68:7f:60:b5:28:55:61:ba:
50:d7:31:8c:a7:1e:85:41:26:31:d0:00:83:d1:79:
d3:4d:38:43:e6:c8:2c:a3:44:ae:e1:b9:0e:53:37:
7e:f5:98:64:b8:b4:e3:7a:a7:9d:bf:12:be:0c:b8:
99:64:5c:26:03:9b:81:62:58:af:58:b5:17:48:69:
17:62:6c:71:43:56:48:9b:d5:a7:6a:e3:e6:d1:4f:
b4:33:7c:50:cd:08:d4:75:12:43:37:47:70:2d:db:
d4:4c:09:30:93:9b:b6:47:4f:f7:28:df:3d:5d:cf:
3f:1e:f7:0a:1a:30:74:4a:94:0d:ed:91:49:85:46:
6a:9f:a6:ae:75:b6:b8:48:ea:8c:c3:af:b3:b1:58:
a3:e7:b4:0a:bb:21:78:44:c7:12:0b:29:a9:af:1c:
24:a9:2d:eb:64:ae:1f:da:9f:bd:88:2b:44:e1:3b:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:B9:55:17:79:22:F8:4C:BF:4C:27:BF:8D:E5:B7:62:C0:37:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibK5VRd5IvhMv0wnv43lt2LAN24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:48:25:27:de:f2:db:24:cd:60:09:38:f4:b4:19:03:f0:95:
d8:98:09:ff:c7:9d:c4:78:c4:20:8a:2e:5f:09:6d:62:77:48:
75:58:f3:0d:aa:68:49:34:69:62:ee:39:6e:1e:ec:82:1e:1f:
60:60:2a:71:27:2e:48:5d:f2:60:c3:bd:22:37:01:e7:ab:6b:
70:f4:bf:e2:5b:4b:f5:19:f6:2d:fe:3a:93:a2:30:f8:79:63:
86:a3:60:e9:e0:42:d0:1a:68:c1:f1:2b:dc:de:8e:fa:77:b9:
11:b8:44:d7:21:13:5b:4a:50:9f:0b:3f:66:3e:0e:51:c4:e5:
75:67:5c:f3:fa:ca:62:9d:89:3e:0b:3d:03:80:ff:8e:a4:21:
05:6c:75:45:3a:33:48:9d:2f:87:e6:a2:7f:be:1a:cf:f4:31:
4f:a7:ba:08:56:6e:82:b2:eb:5c:cb:ff:fd:3e:a8:d8:e6:13:
d5:4d:1f:b5:a5:41:1a:aa:28:28:34:89:37:25:d7:27:24:f0:
23:07:9c:ae:74:19:de:97:99:88:54:27:0d:e4:94:7b:c8:40:
2c:09:f2:8f:3d:18:ef:51:36:63:62:e2:2b:d3:39:10:b4:af:
36:23:c2:34:1e:18:c7:6e:ec:78:d9:41:4a:08:67:4c:75:8a:
da:36:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:22 2025 by rpki-client