Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ioD2svcLbVOgAr7XWoirHmSeQIc.roa
File: ioD2svcLbVOgAr7XWoirHmSeQIc.roa (raw, json)
Hash identifier: NuSa9OmFKby0Md5DwYAjPmiBGilW0CYQ+rM6sMuOA9g=
Subject key identifier: 8A:80:F6:B2:F7:0B:6D:53:A0:02:BE:D7:5A:88:AB:1E:64:9E:40:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018973A3459E132F8BA7966B2C395261995B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ioD2svcLbVOgAr7XWoirHmSeQIc.roa
Signing time: Thu 20 Jul 2023 14:10:27 +0000
ROA not before: Thu 20 Jul 2023 14:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:a3:45:9e:13:2f:8b:a7:96:6b:2c:39:52:61:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 14:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a80f6b2f70b6d53a002bed75a88ab1e649e4087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:20:e8:fc:f8:5f:d1:57:96:e6:4f:94:e7:a8:
5b:9d:da:62:3d:96:e3:68:85:92:16:46:1e:72:b5:
c8:f3:22:53:37:67:04:86:f2:e5:92:cf:2b:a9:11:
09:40:12:9a:e7:cc:f5:e2:1d:46:c1:9e:24:09:79:
89:78:7e:96:df:6e:d6:b9:c7:76:a0:cc:51:4e:ef:
a2:f7:61:c8:91:0f:be:29:30:5c:f3:0e:f8:fc:e5:
19:b3:c3:22:44:99:2d:99:5f:10:93:ef:b1:19:dd:
d1:08:9a:55:e7:8b:06:4c:96:f9:98:f7:3d:37:a2:
ad:f9:c7:47:80:82:ea:42:41:2f:7a:e8:67:c3:ff:
68:ab:cb:ff:42:41:b3:71:e0:06:69:64:f8:33:40:
a6:bd:de:eb:61:4c:42:ef:e6:06:15:b4:41:aa:4f:
3d:32:7c:26:6e:71:b6:12:ae:63:f3:c0:42:a0:b7:
87:53:dd:9c:44:3c:da:1b:90:a1:30:c0:6d:38:53:
c6:8f:32:98:7a:4f:be:58:da:55:6f:df:b1:00:7d:
d6:6a:37:ce:ea:5f:d2:47:4d:66:42:ca:b2:a9:01:
94:6a:5a:43:a3:98:ac:03:d0:0d:24:99:81:b2:ab:
96:12:98:5e:e8:3c:c6:b4:53:63:0e:a1:d4:c0:6d:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:F6:B2:F7:0B:6D:53:A0:02:BE:D7:5A:88:AB:1E:64:9E:40:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ioD2svcLbVOgAr7XWoirHmSeQIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:6c:2e:ae:3d:0e:2d:2b:1d:61:87:6a:6e:9c:3b:85:7b:70:
3a:ab:82:f9:1d:ae:b3:0b:3a:22:ea:d3:04:29:42:d1:29:bc:
a2:2d:b2:dc:64:61:d4:c0:21:88:3a:54:57:4f:d7:4b:b3:09:
5b:bd:99:36:83:44:7f:ac:9d:13:c8:07:8d:4a:c3:f0:43:6e:
14:80:94:5f:3a:7f:5c:74:93:e0:eb:fe:c8:4f:3c:8d:4f:44:
cd:b0:a8:ea:83:2d:f7:33:f1:c8:38:97:da:01:f8:c0:f5:d6:
a1:5e:1f:5f:a8:cd:63:f6:6d:0e:93:33:2f:1e:a5:f9:ae:43:
56:14:3c:b1:92:5f:fd:ee:43:0c:ab:e5:19:45:46:ac:3e:11:
1b:e7:4d:ce:06:82:92:4f:dc:83:dc:37:e4:b9:95:5c:e0:99:
2b:42:5b:12:54:41:3c:1a:6e:85:a8:f2:ce:a5:1e:5a:04:5d:
80:e1:48:05:90:d6:55:c8:ed:81:b4:2d:c9:5f:ad:b4:59:76:
c8:b9:91:34:2e:10:77:91:e9:dc:b5:32:3a:ab:d7:86:fe:3e:
46:0f:63:83:f0:3d:14:23:00:9b:31:47:57:4c:62:12:22:a0:
0b:6f:89:bb:9d:d1:37:f0:4a:76:ad:a7:1c:0b:ba:37:9a:73:
2d:62:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:59:09 2025 by rpki-client