Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ifR0klL_eiot8I70_3uIeNHOgrI.roa
File: ifR0klL_eiot8I70_3uIeNHOgrI.roa (raw, json)
Hash identifier: AH2Xt0i+BPeuJmFZUumhGSoeR2nC7B5W4sQdHackmGY=
Subject key identifier: 89:F4:74:92:52:FF:7A:2A:2D:F0:8E:F4:FF:7B:88:78:D1:CE:82:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C753E65ABD330090BDCBFC24E82138BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ifR0klL_eiot8I70_3uIeNHOgrI.roa
Signing time: Sat 17 Jun 2023 03:09:04 +0000
ROA not before: Sat 17 Jun 2023 03:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c7:53:e6:5a:bd:33:00:90:bd:cb:fc:24:e8:21:38:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 03:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89f4749252ff7a2a2df08ef4ff7b8878d1ce82b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:71:02:6a:0b:ad:be:76:ae:50:5e:e4:01:
58:cc:c1:35:01:68:19:b3:ed:f0:dd:3d:bd:01:11:
86:f4:c7:f1:47:b7:d6:8f:6d:0e:45:67:be:29:a0:
e1:e1:80:32:3e:28:06:97:ef:a4:d5:18:18:99:23:
ae:a0:f5:e7:19:dc:8d:a0:7e:00:14:3e:a0:50:80:
cf:63:bf:6d:8c:58:72:8a:b0:2d:cc:8e:92:ba:2c:
62:e0:2c:7e:df:42:f1:cc:7b:35:b7:48:9b:a9:e2:
48:f1:ea:2f:34:50:88:f0:ab:43:1c:d4:6c:5d:a0:
3a:a8:84:88:9e:65:1e:4b:44:fd:42:f6:3f:d0:1b:
e0:b2:95:75:e4:c1:52:26:5a:5d:0b:b8:ff:bd:6c:
44:5e:e6:4c:8e:d5:4e:0d:a7:bd:de:a3:f8:47:1c:
22:08:a8:02:67:69:d2:a1:25:34:bd:08:ec:c7:a7:
0f:10:04:82:05:cf:9c:95:86:82:98:54:ee:cf:bd:
05:9d:46:20:aa:2f:f2:8a:fd:51:ba:34:41:ce:34:
ca:e2:23:75:9f:0a:56:49:6d:b8:d6:36:ea:d8:cd:
6f:65:e2:ef:0f:ab:6f:b0:96:00:ee:4b:3a:08:3e:
0b:78:d9:07:99:e2:f2:0a:12:19:ff:03:ff:1f:e2:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:74:92:52:FF:7A:2A:2D:F0:8E:F4:FF:7B:88:78:D1:CE:82:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ifR0klL_eiot8I70_3uIeNHOgrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:3b:58:7b:4e:bc:99:b5:50:04:78:b1:9b:79:17:4a:fc:c7:
dc:2c:ad:24:0f:e9:70:ff:af:a2:97:dc:23:c5:d3:3e:c9:58:
a2:73:af:39:db:86:76:a5:2d:81:23:75:73:f0:28:cc:dc:9c:
a4:1f:30:85:e4:62:95:b3:af:ed:6c:89:88:35:d7:5b:d9:4b:
13:3e:6e:c4:f2:aa:a1:6c:d6:92:65:41:82:00:68:9f:c4:e9:
98:ff:b4:94:0e:9e:56:de:fc:14:ef:89:c4:40:cd:ea:ef:04:
b2:81:61:a3:5c:fa:d7:e9:53:5d:34:18:7f:dc:af:2d:c2:83:
43:70:3c:03:15:b5:62:fb:c0:3e:fe:ef:3d:72:73:d4:50:e7:
ce:ed:e4:0b:10:ad:74:06:09:0a:ee:ac:95:2c:38:3e:95:37:
0a:9a:40:15:36:b4:b3:9f:45:90:09:e1:17:23:b5:8d:34:be:
7e:14:01:0e:fb:33:43:36:23:36:f4:b7:9b:3b:ef:36:78:35:
b9:75:b5:f4:25:69:c8:7a:58:c5:4a:83:18:5b:27:a8:c9:d7:
d9:25:f8:ac:09:cf:6e:29:75:6a:1c:1e:08:c7:c2:b6:53:51:
65:d6:83:f4:12:7d:75:71:23:1a:b4:38:c7:16:68:1c:b7:d4:
04:94:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:17:56 2025 by rpki-client