Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ihKILSlvA4_3WvD_H5XD0J-sBR4.roa
File: ihKILSlvA4_3WvD_H5XD0J-sBR4.roa (raw, json)
Hash identifier: H6kdCChuodHM8kFswMFZAGRG/lud6FNnMbAPm/qfUzE=
Subject key identifier: 8A:12:88:2D:29:6F:03:8F:F7:5A:F0:FF:1F:95:C3:D0:9F:AC:05:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01835F83D23CC6EF39ECB1E356D67BA89352
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ihKILSlvA4_3WvD_H5XD0J-sBR4.roa
Signing time: Wed 21 Sep 2022 10:06:58 +0000
ROA not before: Wed 21 Sep 2022 10:06:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:83:d2:3c:c6:ef:39:ec:b1:e3:56:d6:7b:a8:93:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 21 10:06:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a12882d296f038ff75af0ff1f95c3d09fac051e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:e9:e7:2a:57:12:f4:a1:1d:28:9d:f3:24:
07:71:3e:6b:76:44:c5:04:1d:85:f4:74:73:64:15:
ca:6d:35:ae:03:9b:e8:ed:38:1e:6c:8d:5f:16:5d:
48:86:a6:14:f3:20:f8:f2:3d:4d:6b:81:f4:a8:eb:
bc:5b:45:f9:1e:ff:98:00:aa:96:00:0c:6a:af:0c:
0e:d0:46:0b:9e:7f:6c:99:a7:63:7c:6d:f6:a8:7d:
02:f9:ea:af:3f:e7:59:c0:60:69:c2:7d:79:43:a6:
31:d9:b2:ee:d9:5d:0e:eb:5a:25:24:0f:79:db:ff:
75:b4:dd:4b:74:ff:21:54:f2:bd:5c:83:d6:15:11:
e9:d3:a5:42:c2:e1:61:6d:40:9e:2a:6d:a2:cd:0d:
b9:2e:b7:71:29:54:21:7f:1a:9e:d3:c0:7c:41:9b:
23:68:5b:0b:f0:25:51:94:85:a2:8a:48:64:ba:66:
1d:e0:5c:75:ff:bd:a6:70:e0:1b:65:a5:9c:89:e5:
2c:68:29:ea:22:2e:12:66:26:5a:05:57:f4:24:f6:
45:95:74:cb:67:52:68:31:2e:af:a0:6a:c0:6b:80:
81:7e:32:61:ce:f3:1e:dd:ab:da:2b:8f:30:4d:ba:
17:db:c1:28:c4:34:4f:53:8b:83:be:26:37:e9:68:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:88:2D:29:6F:03:8F:F7:5A:F0:FF:1F:95:C3:D0:9F:AC:05:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ihKILSlvA4_3WvD_H5XD0J-sBR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:af:79:e1:82:19:79:b3:1f:b9:a3:8a:df:e5:c0:92:de:10:
69:f7:8a:90:ca:ec:34:93:68:27:bd:81:ac:90:1f:76:fe:08:
a8:7f:76:63:f3:38:be:5e:4a:7c:12:39:52:b1:c3:da:ac:99:
6d:4c:6e:e5:1e:69:d7:49:de:24:b6:f9:20:1e:d8:ef:c0:bb:
2e:a7:c8:0b:72:cb:c4:3b:96:7d:8c:b4:25:01:c4:08:6d:74:
df:86:69:ee:bf:0a:6f:7a:51:36:5a:1a:a4:3e:a4:3e:3e:18:
61:fa:e8:2f:19:31:ef:84:6e:ae:24:44:b1:31:73:a9:d8:e4:
11:d3:d2:f3:70:77:b3:d7:8f:d3:00:81:78:7d:ae:0b:4f:6a:
77:9b:77:b8:93:f8:9e:29:e9:60:d9:e0:50:f5:42:d8:1c:96:
7a:78:d9:99:66:56:e1:99:e8:ee:d2:9d:60:d8:bf:eb:46:10:
a3:ac:15:d8:e6:3a:88:4a:86:b4:9c:52:56:22:42:7e:dd:7e:
78:b6:ca:ba:61:8d:98:59:50:34:51:a2:b4:28:43:65:5c:4e:
69:5a:53:3a:63:3d:6d:44:49:9a:a7:56:08:51:75:4f:34:bd:
5d:6f:e2:6a:3e:3a:65:67:66:d9:c2:3e:26:e4:f9:c3:a0:ee:
1f:3a:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:56:20 2025 by rpki-client