Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ie3_NCtFItvA_K-_U1-f2qvo2R0.roa
File: ie3_NCtFItvA_K-_U1-f2qvo2R0.roa (raw, json)
Hash identifier: oJQQS85xlMsKMXj+XYe3Ow6FGZOYeE4zPbj8osRPsMM=
Subject key identifier: 89:ED:FF:34:2B:45:22:DB:C0:FC:AF:BF:53:5F:9F:DA:AB:E8:D9:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898C8BEC08AC34263BD40D9277E06B98EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ie3_NCtFItvA_K-_U1-f2qvo2R0.roa
Signing time: Tue 25 Jul 2023 10:15:27 +0000
ROA not before: Tue 25 Jul 2023 10:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:8b:ec:08:ac:34:26:3b:d4:0d:92:77:e0:6b:98:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 10:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89edff342b4522dbc0fcafbf535f9fdaabe8d91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:4c:3f:1f:96:c9:51:cd:f5:2b:90:f1:59:
61:fd:76:14:8e:de:2a:5b:4e:03:21:ec:ee:41:bb:
be:99:fc:f2:cf:dd:9d:e5:3d:bb:71:d4:42:72:fd:
f4:39:47:cd:59:f2:ac:62:b7:da:3c:f9:41:ad:28:
ab:07:7e:d4:d3:82:b4:b7:bd:71:16:fd:e1:3b:08:
92:ca:29:be:ff:4b:11:e6:e1:11:2d:4a:e9:f7:af:
33:e9:42:5d:8d:18:fc:1f:71:7b:61:12:d2:9d:12:
d1:49:b8:18:c4:a8:49:80:25:0e:23:cf:16:b7:a2:
23:b1:e2:7a:b1:95:60:10:8a:2e:88:94:77:a1:e9:
3f:ed:91:39:f8:bf:47:ee:da:74:6b:14:6a:62:61:
7b:14:1c:9a:0b:75:54:7f:e5:b4:89:70:46:92:40:
8c:6f:47:a9:1c:5c:b1:25:a9:f9:07:35:42:94:b2:
11:7f:1e:c1:7e:4a:ed:cc:29:a5:4c:7c:46:74:68:
73:ce:bb:e5:1e:c0:de:16:a5:f3:de:0a:ef:51:33:
d9:46:3e:6c:a5:11:6d:81:5a:16:b1:1e:af:8e:14:
e6:e1:ac:07:56:18:2d:06:d7:d8:7c:00:66:de:27:
a0:79:53:c0:e6:60:f2:33:4a:a5:ba:ce:f5:cc:af:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:ED:FF:34:2B:45:22:DB:C0:FC:AF:BF:53:5F:9F:DA:AB:E8:D9:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ie3_NCtFItvA_K-_U1-f2qvo2R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:b0:b5:8a:ac:41:a0:7b:c1:7d:a6:a2:91:04:6c:54:69:85:
a1:ef:43:90:11:ea:21:7c:9b:7c:98:ec:11:be:eb:86:88:e0:
74:d9:90:36:4a:e3:74:18:63:c2:d5:05:08:b3:43:c9:39:94:
ae:80:56:16:c2:e6:6c:3d:18:87:d4:4f:2e:59:51:ea:cb:69:
0f:9d:4d:69:be:bd:9c:7e:19:af:87:76:df:e7:eb:93:57:28:
38:d2:03:e9:f2:be:ac:7f:f6:64:8c:65:75:6a:3f:45:07:c9:
33:d2:0b:42:f4:75:ff:45:95:28:34:06:c0:9a:ef:b9:ec:10:
bc:b7:d6:41:48:62:e3:52:57:54:fc:b7:5e:4e:8a:91:b4:70:
c5:0b:b1:ce:b1:3d:61:d1:8a:c6:84:cc:05:3c:4f:a3:e4:ef:
b1:ea:39:53:1b:72:6c:df:da:f7:3b:90:db:d0:04:31:b4:7e:
c2:10:31:67:d2:6a:70:d2:fb:57:b8:1f:56:5e:e0:14:72:ba:
2c:f3:be:98:ba:b1:37:23:aa:88:5c:fb:32:1c:96:63:0a:81:
ad:f1:0c:cc:43:5f:e0:f7:0c:d0:c4:93:2f:e9:2d:9d:bf:8a:
e5:99:04:fc:9c:b6:98:dc:c5:36:0e:53:ed:5d:f5:5b:23:04:
7b:b0:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:11 2025 by rpki-client