Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ihsQsHStaOk0bL3JacNAT38V53I.roa
File: ihsQsHStaOk0bL3JacNAT38V53I.roa (raw, json)
Hash identifier: pJiaNddMAb4r8X47emxpgT+7Vscz8Fw0yJ4bT8/1Sq8=
Subject key identifier: 8A:1B:10:B0:74:AD:68:E9:34:6C:BD:C9:69:C3:40:4F:7F:15:E7:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A4096E1A625E7163CF8B1DEE848C940DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ihsQsHStaOk0bL3JacNAT38V53I.roa
Signing time: Tue 29 Aug 2023 09:19:04 +0000
ROA not before: Tue 29 Aug 2023 09:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:96:e1:a6:25:e7:16:3c:f8:b1:de:e8:48:c9:40:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 09:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a1b10b074ad68e9346cbdc969c3404f7f15e772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:5a:5c:7b:a9:d8:28:2e:e3:6b:30:0b:0f:
62:83:4a:f8:ba:8a:1e:0c:cc:51:54:73:70:30:96:
49:03:db:b1:7d:7f:ac:9a:7b:a2:d7:b0:87:71:60:
0c:e6:ac:9d:d1:0b:46:37:e2:22:d1:1e:d1:4f:d0:
b5:eb:86:d6:53:63:ed:dd:69:3e:af:57:06:b9:dd:
2e:71:0e:ed:ac:8d:02:1f:b9:4c:71:85:d6:8f:60:
7c:19:05:95:2b:a9:29:79:16:da:c2:68:ce:14:ce:
9f:d9:9e:28:29:e6:cf:e9:49:dd:99:19:be:af:83:
5e:92:2c:03:c9:cf:84:4a:c3:c8:21:44:ab:27:93:
ab:f6:a9:b3:dd:6c:4d:c4:2a:1f:f4:4f:ba:d6:6a:
93:15:2e:9b:33:07:25:62:23:27:e9:8d:4c:fd:fe:
11:1c:3b:24:bc:24:2e:51:07:af:7e:2f:99:c1:23:
a6:62:75:ae:6d:a2:ce:c8:96:a2:8b:d8:12:7e:89:
9a:20:3d:7d:cd:01:46:c6:23:fd:44:6b:fe:23:1d:
dc:a6:f6:52:0b:d3:f3:f5:19:33:57:7f:7f:3e:c3:
03:23:94:5e:c4:67:fb:49:5f:2d:65:cc:57:58:3e:
e3:f6:e9:66:55:37:ff:c4:d7:d7:db:79:5d:27:98:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1B:10:B0:74:AD:68:E9:34:6C:BD:C9:69:C3:40:4F:7F:15:E7:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ihsQsHStaOk0bL3JacNAT38V53I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:a4:b1:3f:60:dd:32:93:dc:66:d8:52:14:80:79:73:5f:d9:
b7:36:b1:f5:48:44:8b:2a:4d:f6:b0:c7:bc:22:45:fb:35:cc:
8a:f4:97:76:7a:f5:50:9a:16:c5:d3:84:11:29:c9:2d:6b:b5:
cf:6e:54:14:7b:b8:7c:a0:f6:ca:df:8b:bc:4d:5d:c1:1d:7d:
a4:3e:d6:a1:16:b3:6d:40:df:54:cf:46:c8:8e:06:e2:78:57:
48:71:58:88:7f:be:5d:de:83:27:cd:37:bb:75:b3:40:27:db:
1e:ae:87:a5:ae:06:dd:02:9f:90:50:b1:87:f3:55:b0:45:87:
e2:06:c2:39:d8:16:ea:fe:ca:bf:fd:3e:bf:3a:ab:0e:de:86:
b1:e9:91:e1:79:ba:e2:9a:40:70:fe:a0:8f:78:c6:48:ef:32:
18:76:98:60:02:90:ac:b1:e1:08:75:f3:e6:b9:52:19:ce:e4:
9e:ac:82:7a:c8:8b:34:c7:65:88:51:68:37:08:dc:5f:82:db:
ec:a8:81:f5:0b:93:c2:32:50:06:af:82:fd:01:06:f3:43:05:
bb:25:ae:e9:c1:7d:61:89:ed:37:4a:08:63:a7:04:c3:cb:67:
62:12:8b:b9:cf:af:ec:2e:4e:06:77:2c:1e:ea:ac:e5:e2:77:
8c:4d:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:20 2025 by rpki-client