Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ieLCt0ylBaQgKMtB1TM8YpJnDlM.roa
File: ieLCt0ylBaQgKMtB1TM8YpJnDlM.roa (raw, json)
Hash identifier: DLwSz//FFDbG+Q5H1iSKweFOdDoQqOhbl/MoJ5WHPjw=
Subject key identifier: 89:E2:C2:B7:4C:A5:05:A4:20:28:CB:41:D5:33:3C:62:92:67:0E:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01841C270BE0279E99171B2128CFC0F512F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ieLCt0ylBaQgKMtB1TM8YpJnDlM.roa
Signing time: Fri 28 Oct 2022 01:13:51 +0000
ROA not before: Fri 28 Oct 2022 01:13:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1c:27:0b:e0:27:9e:99:17:1b:21:28:cf:c0:f5:12:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 28 01:13:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89e2c2b74ca505a42028cb41d5333c6292670e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:6d:02:88:0e:e2:22:ab:98:f8:d6:b6:03:
01:bf:b1:4a:ba:95:4d:fe:eb:25:a4:cf:59:f3:aa:
b0:5c:01:2a:a7:23:0a:5b:6a:70:7d:c3:e2:83:92:
c7:a1:b4:2b:75:cf:d7:b5:c8:0c:cf:b5:2a:a0:72:
69:90:c4:11:a3:3b:cb:71:ed:ae:8f:40:c9:a0:95:
0a:7a:6a:8e:25:6e:4c:ec:21:58:80:0a:e8:45:7b:
11:d7:72:3d:09:31:16:72:dd:f5:dc:06:25:36:7f:
2a:08:07:f6:d6:1d:c0:69:bb:ca:3b:04:3b:97:53:
6c:6b:d8:7e:eb:42:f3:96:15:a6:92:5d:f8:94:98:
84:58:61:30:9c:4c:ea:60:2b:02:af:21:d8:4b:32:
ef:56:eb:24:7d:83:ca:8f:18:2a:25:65:9b:c5:a2:
82:b6:2c:f7:0f:84:f9:24:ca:71:e0:7a:18:58:be:
b7:90:14:47:ed:84:58:4a:84:64:00:e1:80:9f:3f:
41:ff:60:43:c0:57:1b:11:27:75:e1:bc:13:9c:ca:
34:03:56:c8:ee:1b:4d:f2:62:23:f3:61:fe:35:97:
f7:1d:e5:46:4b:b5:e7:b8:37:e5:d1:f4:cb:b2:be:
67:28:a9:c9:4d:8f:bb:d9:37:50:be:3b:05:1e:85:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E2:C2:B7:4C:A5:05:A4:20:28:CB:41:D5:33:3C:62:92:67:0E:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ieLCt0ylBaQgKMtB1TM8YpJnDlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:64:47:b8:83:0d:9b:ec:47:26:c1:6e:22:5d:bc:73:39:a4:
12:f3:f9:c6:4c:a4:4d:3b:fa:0a:37:87:31:de:0d:9b:6e:81:
01:0b:8c:e2:77:41:50:dd:e2:01:7c:57:20:70:51:70:f3:46:
bc:33:75:31:cb:54:63:ae:3e:3b:d3:6c:75:62:55:7a:78:6b:
c3:8c:f0:45:84:d7:f2:61:4f:eb:8f:10:84:c4:6e:32:ae:70:
55:2e:e3:88:c2:7d:7b:ad:26:07:21:6a:ee:dc:0a:5f:6e:d5:
48:17:e7:ca:d3:eb:a7:df:c8:d9:75:b7:da:81:c2:6f:45:4c:
c1:6a:4a:a5:02:24:49:9b:c4:55:c4:76:8b:74:74:7d:ef:f6:
02:69:40:cd:7a:39:63:f7:a0:8c:42:27:2a:3a:b3:59:f9:1e:
4a:3f:af:76:c6:96:8f:1f:be:15:ab:1a:0d:a4:c0:ea:96:f5:
6f:b3:5d:ff:6c:20:80:85:a6:0c:c4:f4:4c:03:bd:7a:e6:ca:
22:e3:75:b2:ff:c0:94:b5:11:d3:15:9b:53:fd:08:ce:ca:66:
c1:73:00:b0:a9:16:b7:4c:a4:7d:25:9e:03:83:1f:75:c5:f0:
d9:49:a1:87:f4:70:d1:77:a2:f4:e9:ba:a1:05:61:1c:02:69:
00:4f:96:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:06:04 2025 by rpki-client