Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ie4918HrhoJX44q_al3e3tR1hRc.roa
File: ie4918HrhoJX44q_al3e3tR1hRc.roa (raw, json)
Hash identifier: ND7JWACe0GtIMSw6y4CtfcJ8z1oqTZEDuADi8wMgqj8=
Subject key identifier: 89:EE:3D:D7:C1:EB:86:82:57:E3:8A:BF:6A:5D:DE:DE:D4:75:85:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 663B1220
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ie4918HrhoJX44q_al3e3tR1hRc.roa
Signing time: Sun 30 Jan 2022 02:09:27 +0000
ROA not before: Sun 30 Jan 2022 02:09:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715147296 (0x663b1220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 02:09:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89ee3dd7c1eb868257e38abf6a5ddeded4758517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:ac:59:16:1f:b8:8d:cf:1e:1e:bb:2a:f0:
30:80:7d:d4:3c:2c:eb:96:29:ea:6b:3f:0f:8c:0d:
6d:f8:e0:f7:35:68:3b:08:3f:16:13:45:60:fb:1d:
11:c6:e8:72:fa:0d:37:03:98:4e:63:06:31:61:95:
02:04:23:c2:f5:fd:43:3b:87:62:86:ff:88:83:b3:
10:95:cc:ee:2c:be:44:06:df:9d:c4:80:76:ea:2a:
6a:b1:cf:d3:62:b3:f4:68:09:3c:5a:23:35:75:8f:
ba:2b:97:ac:1a:1c:e6:9e:12:a1:0f:fd:eb:be:41:
04:29:9e:bf:9d:ec:d6:38:55:06:e8:6b:c4:73:1e:
df:fd:45:ae:7d:a4:c1:07:46:4c:d4:f4:3b:97:85:
2d:22:be:da:63:04:ad:50:36:0a:cb:f0:c9:50:e7:
a1:d2:c7:4f:e7:e3:cf:9b:af:8a:d2:15:c3:45:76:
4f:24:fa:d5:25:e3:37:48:6b:c4:ce:3a:0a:9f:76:
06:e4:bf:c2:04:a7:8d:68:64:f6:8e:bd:3c:fd:36:
ba:f4:01:e6:a2:ce:6f:a2:8e:f3:45:8d:8d:c8:54:
40:4b:73:2a:98:42:50:ee:cf:98:92:e8:5a:ba:d2:
10:e8:11:8e:9b:82:4d:e7:18:1a:90:4b:1a:49:47:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:3D:D7:C1:EB:86:82:57:E3:8A:BF:6A:5D:DE:DE:D4:75:85:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ie4918HrhoJX44q_al3e3tR1hRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:fa:a3:97:4c:b0:ee:17:06:1e:8e:ad:00:f3:21:3e:06:36:
d6:7b:5a:32:93:69:71:11:30:54:c0:18:c1:74:ee:04:53:7c:
4f:c0:3a:6a:fd:2c:7a:aa:84:aa:85:7d:77:4f:d9:09:6d:6f:
09:f0:18:c0:94:2d:97:f9:af:81:a4:22:4c:0b:03:dc:fe:9b:
5b:c3:e2:b2:93:c4:f2:d0:04:58:9f:e1:01:84:ad:26:c5:9a:
49:41:90:9a:37:a0:e7:4d:22:34:f2:14:b4:b2:42:cd:1c:b7:
2b:c6:30:a9:61:88:cc:7c:59:13:c0:27:6b:13:13:cc:44:1a:
8f:f3:c7:60:42:0b:02:2e:40:f2:2e:e6:b0:65:fd:8c:1a:a8:
24:77:d8:80:16:26:ed:8b:5b:8c:fb:67:76:15:21:48:20:ab:
aa:85:36:0f:03:32:e0:aa:91:df:a9:f5:84:4d:1b:b1:c8:8e:
3f:1c:66:24:31:63:45:5d:33:13:c9:d1:03:11:60:85:e9:35:
0c:7c:8a:36:23:ed:32:26:5f:fe:73:ed:28:a0:81:bb:9d:50:
15:cc:4a:e8:92:8a:62:47:29:f9:0b:d4:21:86:6d:c0:78:42:
84:63:c5:95:fd:18:62:1d:0a:c2:31:da:5b:13:b4:f4:5d:b0:
97:52:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:31 2025 by rpki-client