Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ijQDKWLtW0tutg9SRVo0_sc53jI.roa
File: ijQDKWLtW0tutg9SRVo0_sc53jI.roa (raw, json)
Hash identifier: XzaUm+XM9EaKW29esxB8uOSUVm+4mk/jMCNBAcDJEs4=
Subject key identifier: 8A:34:03:29:62:ED:5B:4B:6E:B6:0F:52:45:5A:34:FE:C7:39:DE:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888951090A538EF938E5A9F63C5C279094
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ijQDKWLtW0tutg9SRVo0_sc53jI.roa
Signing time: Mon 05 Jun 2023 02:09:29 +0000
ROA not before: Mon 05 Jun 2023 02:09:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:89:51:09:0a:53:8e:f9:38:e5:a9:f6:3c:5c:27:90:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 02:09:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a34032962ed5b4b6eb60f52455a34fec739de32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:75:ea:e6:ab:65:92:18:2e:b5:a3:b3:91:
4e:20:fc:68:c1:78:74:e6:19:c3:13:96:5f:91:04:
27:34:6d:ae:8e:42:62:5a:1f:a2:f7:4d:74:5b:1d:
f8:fd:05:00:43:32:12:6f:2f:4c:f7:43:0f:f8:1f:
83:ae:4d:db:bf:4c:51:b5:eb:e4:86:4c:6d:32:c2:
c7:24:45:f4:49:9d:5b:28:62:04:28:9a:ba:f6:0e:
03:2b:bf:72:06:4d:b6:78:ff:f2:ea:8b:9b:ee:fb:
c1:09:2a:e7:59:a8:85:8b:1f:8a:41:37:87:0f:ac:
2f:a5:30:d4:71:78:55:4f:1c:0a:bc:93:11:fb:c2:
df:ec:d7:4a:a9:00:8a:93:55:d2:d5:f2:78:81:64:
2b:4b:b5:52:89:29:1c:71:b2:6f:0e:37:5b:31:60:
6b:6b:9d:91:a3:94:a3:cd:df:88:0f:13:9e:50:e2:
92:d9:bd:3e:3e:af:12:fa:5f:36:ed:e3:d6:15:fa:
3a:aa:69:e4:77:54:b4:4d:5b:3d:fa:f5:a0:db:22:
eb:2c:89:3a:53:e6:d1:71:04:3d:8c:02:2b:83:e1:
d6:1e:6a:86:94:0a:7e:74:91:ee:3c:47:2e:17:0d:
26:e1:50:3d:41:5d:49:e1:08:ab:87:89:8f:37:2d:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:34:03:29:62:ED:5B:4B:6E:B6:0F:52:45:5A:34:FE:C7:39:DE:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ijQDKWLtW0tutg9SRVo0_sc53jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:77:bc:f8:63:88:0d:72:58:aa:96:03:52:ec:22:59:66:35:
20:75:0f:08:77:72:cb:d5:bf:8d:7a:fa:fe:9a:43:61:0d:56:
ac:10:1e:03:a3:39:67:2b:ac:dc:7e:dd:1a:e3:f8:ec:00:28:
3c:e4:85:12:09:1a:d3:dd:7c:30:c5:6e:50:27:7f:cf:8f:67:
46:dc:21:68:05:21:47:75:ff:79:9b:56:41:8f:c5:bc:62:d6:
81:72:6b:55:39:d0:9e:86:0d:c7:5d:96:5f:b7:dd:aa:aa:ab:
0e:08:68:6a:52:90:d9:2c:86:f0:ce:61:de:87:57:53:df:88:
45:34:65:bd:5e:79:b9:76:a2:a6:f7:93:d5:6f:9c:b5:e8:c8:
d3:5d:4b:d9:1c:3f:f7:d3:8c:95:23:9b:a9:68:83:1c:7b:a7:
e2:17:45:46:2c:55:cb:29:7d:5d:0f:78:fd:93:c3:74:8e:71:
c8:29:9f:6d:50:b7:8e:f5:27:9a:a5:cf:e5:a6:13:96:f8:5d:
05:15:93:76:98:5e:3b:5d:31:94:49:ee:01:a7:38:54:60:b8:
4b:a4:8f:6c:c3:cd:b2:ff:bc:91:c8:60:ff:d9:23:d5:a7:66:
f9:58:4b:30:b1:6f:3f:77:59:bb:71:a3:9a:51:e4:37:81:b5:
d7:dd:c7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:04:12 2025 by rpki-client