Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibUYc9I5NaEKSRRfJ8AxVfCi73E.roa
File: ibUYc9I5NaEKSRRfJ8AxVfCi73E.roa (raw, json)
Hash identifier: ouiwp15gTHmWtOFrZUFLtJSmwPUzq48YCxa5DU7cKas=
Subject key identifier: 89:B5:18:73:D2:39:35:A1:0A:49:14:5F:27:C0:31:55:F0:A2:EF:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 84D48AB8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibUYc9I5NaEKSRRfJ8AxVfCi73E.roa
Signing time: Tue 17 May 2022 11:10:30 +0000
ROA not before: Tue 17 May 2022 11:10:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228521656 (0x84d48ab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 11:10:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89b51873d23935a10a49145f27c03155f0a2ef71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:0d:e9:74:e9:5e:fc:1f:f1:6a:c7:5a:aa:
d2:70:69:1c:7d:83:5b:10:a1:3d:43:fa:0e:83:28:
b7:e7:aa:45:03:a8:63:cd:66:d3:8b:fd:00:cb:47:
48:bc:05:ac:f3:25:82:52:bc:40:dd:89:b4:6d:98:
d3:0e:87:a1:ff:65:3a:a6:28:d1:c7:a4:bd:9d:de:
4f:9e:7b:88:8d:2b:0e:65:c9:92:eb:67:0e:19:d2:
8b:14:46:78:4e:99:07:75:9a:58:42:37:58:bc:3f:
08:58:58:36:36:08:a9:49:b0:46:96:33:df:d8:cc:
17:55:b4:5c:be:ab:8e:61:dd:be:06:25:97:39:c0:
6f:74:98:4c:6e:e9:1d:cc:0e:7b:5b:2e:b3:c1:f4:
81:ee:6a:72:3f:de:7f:1d:62:db:0a:b8:ee:e3:a5:
a2:38:d5:57:0b:d5:8d:bf:e6:c9:43:50:f9:fa:e4:
35:43:30:bb:60:b9:d5:14:6f:53:92:05:33:01:eb:
c6:cd:49:71:3b:df:6c:11:4e:5e:4b:76:c4:d6:cd:
b2:7f:d2:ea:0a:3e:8a:a6:05:16:a4:f2:95:08:ac:
df:d6:d9:40:c4:8d:be:8d:60:9c:aa:94:f9:a6:d9:
ee:f8:00:a5:84:b2:5f:fd:cc:ea:25:da:7d:45:28:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:18:73:D2:39:35:A1:0A:49:14:5F:27:C0:31:55:F0:A2:EF:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ibUYc9I5NaEKSRRfJ8AxVfCi73E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:b3:fd:34:6f:47:9a:d9:b7:da:3f:cb:c6:56:fb:8a:75:33:
12:32:06:e9:62:62:e6:0c:e9:31:26:b2:fd:4c:e2:6c:8e:a2:
ad:11:ab:2a:64:ab:ef:98:47:b5:c1:b2:64:29:86:f9:6e:09:
24:00:08:40:9d:00:3a:36:3b:c2:69:84:c5:c0:b8:8e:30:18:
96:e3:4f:3a:cc:aa:79:29:7f:90:b0:27:90:ee:ae:d4:f5:0c:
f4:82:69:8c:c6:98:2b:2e:6a:a8:79:08:b3:87:1c:27:43:74:
c2:9f:2e:ee:cd:bd:c2:69:fd:f3:a5:24:bd:1e:a0:61:b1:d9:
bf:37:71:80:90:be:07:57:4b:ff:f8:c4:01:2b:b5:b5:74:15:
2a:1a:3a:b4:fe:f7:69:74:a5:57:1d:4f:6a:33:05:88:f6:21:
15:b4:d9:da:7f:ef:23:92:64:2f:4f:19:82:0a:97:02:4d:74:
7a:7d:76:f8:d9:0b:00:b6:63:30:e0:28:8f:c1:68:93:a5:c0:
e5:73:9c:76:0b:84:17:65:ae:ea:89:6f:67:c1:99:aa:15:1d:
3f:bf:a8:d1:d2:8f:34:a8:db:55:9e:71:e8:2e:aa:ec:5b:aa:
e7:5c:3c:9a:f0:ee:c6:39:99:4c:9d:fc:02:23:64:11:c5:3f:
29:8f:e2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:20:26 2025 by rpki-client