Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ieH-f4mLhwLD_XHmPamiMzukdac.roa
File: ieH-f4mLhwLD_XHmPamiMzukdac.roa (raw, json)
Hash identifier: 9UehWEIwWOHpT6ZbhhVLeiiyuyu/RRFJbZkI0Z0VIZc=
Subject key identifier: 89:E1:FE:7F:89:8B:87:02:C3:FD:71:E6:3D:A9:A2:33:3B:A4:75:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CE0267E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ieH-f4mLhwLD_XHmPamiMzukdac.roa
Signing time: Tue 22 Feb 2022 23:04:45 +0000
ROA not before: Tue 22 Feb 2022 23:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:23ae:147a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826629246 (0x6ce0267e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 23:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89e1fe7f898b8702c3fd71e63da9a2333ba475a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:7b:89:3a:b9:84:57:67:dc:f6:94:ca:f6:
c1:b9:0e:8d:3a:8a:b8:5e:c0:bb:42:84:dd:b3:7e:
d6:72:34:0f:9d:c1:33:b4:f3:2c:98:59:0f:38:73:
6b:65:35:2f:f0:df:10:88:fe:e0:7c:26:1d:d7:ad:
c4:86:17:67:e3:8e:dc:6f:3c:48:19:9e:0e:79:46:
31:1a:b4:3f:4c:7f:87:69:86:d4:dc:16:8c:ef:b6:
5a:ce:5e:dd:d4:b9:7f:6f:91:49:e4:15:e6:94:df:
2f:ba:45:20:8b:a4:81:36:60:8c:d7:4a:4a:27:08:
ea:8c:c8:27:ce:27:77:58:81:5c:59:4b:6a:f9:5b:
01:93:e5:ca:a9:e1:f6:da:df:4c:db:4c:5b:52:a8:
a7:55:26:13:84:74:00:4b:fd:1a:8f:a8:aa:79:3a:
56:3c:b4:73:8b:f3:8d:c1:fe:10:7c:36:9f:6b:77:
b8:9d:8b:07:2d:25:1d:9d:4d:20:d9:0b:e3:8d:4c:
c0:bb:10:b6:5f:9f:3a:ef:8e:e9:92:d3:bf:24:59:
be:4a:6f:12:77:b3:87:ca:44:fb:33:5c:4d:40:b1:
2b:ed:e5:96:f9:10:d4:d6:48:25:a0:04:86:eb:4b:
d6:36:c8:d9:c5:d4:da:82:7e:66:82:de:fc:37:08:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:FE:7F:89:8B:87:02:C3:FD:71:E6:3D:A9:A2:33:3B:A4:75:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ieH-f4mLhwLD_XHmPamiMzukdac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:32:7a:92:91:30:3d:54:62:dc:0e:c1:4b:80:d8:f9:be:57:
df:46:d8:c9:7b:cc:e0:f6:01:97:9e:dd:aa:db:8d:38:ea:5f:
9c:89:f4:27:82:7e:f5:e1:97:62:ee:02:5d:70:93:f4:7b:c7:
b0:14:d4:f8:a3:b1:c6:74:05:57:e5:81:28:08:70:1e:8a:a8:
68:1f:83:dd:30:ed:ef:fb:fc:5f:8d:c9:1e:ed:19:ab:4f:e7:
4d:7a:53:4a:83:50:77:69:86:3a:c5:43:08:7b:f2:83:ad:e7:
2e:8a:c4:53:1e:73:87:75:7d:27:4c:58:b7:0e:e4:60:e6:27:
69:00:63:b3:1e:ba:00:d1:24:63:0f:3d:f1:fa:24:69:01:a0:
e1:ec:e7:41:33:51:b3:ba:9e:4d:ba:1c:1e:03:b8:8f:92:f2:
d6:71:c1:33:45:ce:ec:c7:55:f2:ab:b0:3a:b0:66:90:cb:2c:
64:61:ec:22:1a:cb:8b:5c:06:f0:c8:0f:d6:3e:ea:7e:a8:6d:
e5:fb:c6:dc:07:2a:c1:dd:a6:2f:8a:5b:c0:e2:b8:c1:7d:8b:
28:49:10:81:56:1f:97:87:18:49:9f:58:35:03:6a:ea:ed:69:
56:e9:a1:4e:37:ac:d9:60:d6:e5:34:cd:a1:09:56:62:8c:95:
e6:37:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:15 2025 by rpki-client