Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ijq3JiZJxNvNGnUaWML9B9Btd4I.roa
File: ijq3JiZJxNvNGnUaWML9B9Btd4I.roa (raw, json)
Hash identifier: Y7oiRTyO3PD9ngti6cuv3xZxUlQ5W+btHTPSluOUQs4=
Subject key identifier: 8A:3A:B7:26:26:49:C4:DB:CD:1A:75:1A:58:C2:FD:07:D0:6D:77:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BE9621AED1BDBAE09B44BB5EC759CEE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ijq3JiZJxNvNGnUaWML9B9Btd4I.roa
Signing time: Mon 28 Nov 2022 14:13:40 +0000
ROA not before: Mon 28 Nov 2022 14:13:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:96:21:ae:d1:bd:ba:e0:9b:44:bb:5e:c7:59:ce:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 28 14:13:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a3ab7262649c4dbcd1a751a58c2fd07d06d7782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:db:6f:9b:4f:0d:3b:23:a4:b8:5c:20:41:b5:
89:4a:64:70:ef:80:ec:5c:46:d7:c3:35:14:2a:66:
c3:e7:f3:4c:2c:9d:a5:8b:56:98:a8:d7:64:18:d7:
6c:c4:d9:de:c9:4e:04:81:a0:f8:a2:47:30:c3:6b:
b2:cc:3f:2a:a9:e3:17:d0:05:59:e1:d6:ab:ce:fb:
0e:d1:36:94:8c:82:ab:14:59:12:ec:4c:8a:38:e2:
b8:e7:c8:d2:64:c5:81:4b:10:a9:6e:fd:03:e0:03:
1f:0d:3e:c1:82:42:b6:f8:27:7a:5c:90:df:dd:84:
36:c5:fb:be:c7:20:97:83:3f:8e:2c:9c:af:c9:38:
6e:14:4b:39:db:ec:59:c0:cd:08:18:de:5e:4c:46:
d1:5d:5e:c4:3e:92:6c:eb:a9:65:3f:f6:5e:80:08:
b8:f9:db:ec:bd:fe:2a:7f:04:af:30:5b:2b:84:c5:
3a:d5:74:82:0a:7f:c3:7d:29:56:c6:59:44:09:95:
43:dd:27:20:65:4d:b1:20:e6:b3:68:18:09:f4:ad:
6c:6e:26:a8:f4:68:6f:88:a7:eb:01:dd:54:14:65:
ad:9d:99:0b:50:4c:4c:1b:4f:3b:b3:be:75:3f:ba:
4f:4f:c3:e3:7b:8d:79:42:3f:f7:41:17:24:0d:4c:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3A:B7:26:26:49:C4:DB:CD:1A:75:1A:58:C2:FD:07:D0:6D:77:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ijq3JiZJxNvNGnUaWML9B9Btd4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:cb:45:2a:eb:72:e8:d8:49:49:ad:53:73:87:89:a0:02:b9:
15:bb:17:f0:cf:40:65:67:aa:59:5f:8b:47:bc:e5:b8:5a:45:
2f:98:61:8b:cb:ef:15:5d:5c:94:21:67:e9:97:94:e8:d0:00:
8f:22:c8:b2:76:b1:23:07:92:99:32:2a:a9:56:83:bd:85:b2:
df:0e:9e:3f:ec:8b:bf:7c:3d:6b:65:fe:6c:20:3a:e1:36:2f:
f2:7d:f8:17:cd:78:5d:c4:4b:d7:a8:2d:2e:97:84:6f:03:08:
75:6b:a2:b6:5a:88:4f:af:35:06:5a:ff:41:e6:54:a4:b4:6a:
c3:70:78:ae:81:2a:a7:34:69:d7:47:11:a9:78:99:47:b0:d5:
49:ea:0b:3d:3b:b2:08:05:39:60:43:82:af:b8:ab:7a:b0:bc:
2d:20:40:5d:00:3c:b4:47:1c:b6:43:15:8c:dc:7f:71:e2:10:
cf:7b:fd:e7:9b:27:23:a6:db:47:51:ec:83:77:81:d3:75:cc:
d7:51:0a:40:c8:ee:8c:63:26:36:03:dc:2d:b7:1b:c2:70:0a:
d2:77:67:c2:25:4b:35:7f:9e:ee:c0:6a:c3:fd:52:e8:f2:3d:
7c:8e:54:39:ae:d1:be:13:fa:ac:d4:03:25:7b:6c:4a:f2:34:
6a:06:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:53 2025 by rpki-client