Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ioht5BATsgWIT2jOTw-L-QrnUEg.roa
File: ioht5BATsgWIT2jOTw-L-QrnUEg.roa (raw, json)
Hash identifier: Gz/Oh1nIzGw2IQZ7Z+Cj9y8p1GD4ciToTeWRv6PEbmI=
Subject key identifier: 8A:88:6D:E4:10:13:B2:05:88:4F:68:CE:4F:0F:8B:F9:0A:E7:50:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D2597D903F6CD3D24E39190743A56154
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ioht5BATsgWIT2jOTw-L-QrnUEg.roa
Signing time: Wed 06 Jul 2022 07:11:29 +0000
ROA not before: Wed 06 Jul 2022 07:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:59:7d:90:3f:6c:d3:d2:4e:39:19:07:43:a5:61:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 6 07:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a886de41013b205884f68ce4f0f8bf90ae75048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:1f:4e:86:49:89:2d:6a:a8:5f:0a:41:de:
96:fb:34:d9:f3:5f:c1:50:fe:fe:3e:9e:42:75:f6:
b0:79:e4:86:d8:e2:29:cc:f2:1e:52:87:61:7f:f0:
d4:b6:24:df:44:14:e0:fa:66:28:a6:ba:29:aa:d5:
29:22:ff:0c:1c:27:64:38:a2:f7:86:6f:41:06:d8:
a9:67:14:f5:85:85:da:69:89:aa:a0:f0:21:ac:4e:
5c:56:07:e0:ff:e4:99:31:fc:95:7c:6d:77:ee:c6:
41:c3:da:e2:bf:a7:28:ca:c7:37:f7:a9:47:4d:96:
24:4e:c4:fe:02:55:c4:ee:9d:16:04:2b:27:c7:11:
c1:ca:f3:ef:60:1a:8e:d8:d4:ef:49:34:27:bd:c7:
50:30:11:b7:fe:61:95:1e:a7:4c:59:f5:fb:d5:89:
aa:32:7e:12:95:55:d1:ca:9c:6f:47:81:a8:ff:4d:
bc:90:e2:17:3c:9d:df:6c:0b:7f:52:e8:87:06:c3:
9e:ad:1b:65:a2:a3:84:bd:55:51:34:60:9f:e8:8f:
00:cc:6d:34:d0:eb:c5:18:89:f9:d9:8a:21:75:88:
d8:64:d0:13:5e:d8:58:ba:63:9c:52:32:24:2b:5f:
32:b6:09:81:c7:b9:7f:eb:8a:90:a1:ad:61:f4:64:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:88:6D:E4:10:13:B2:05:88:4F:68:CE:4F:0F:8B:F9:0A:E7:50:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ioht5BATsgWIT2jOTw-L-QrnUEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:d0:f5:a6:b1:da:73:65:82:7d:79:73:b3:71:73:06:c6:f2:
b0:c1:b4:53:8f:ba:9f:1e:fc:13:ba:16:d9:a0:32:87:de:4c:
2c:56:19:36:5a:c8:81:df:c4:04:84:5e:0d:80:52:1c:4a:23:
3f:45:af:62:67:03:21:2c:fd:74:90:4c:e4:ef:37:48:c2:ed:
c1:c4:22:e4:73:9d:2f:06:ee:e2:8a:56:2c:cb:7a:e1:48:59:
34:28:a6:ff:0d:f4:d0:ad:9b:f3:69:51:2f:74:d7:8c:79:55:
3a:cd:5e:3d:09:14:23:fd:2e:cf:f5:be:3b:0b:8a:32:a2:58:
ce:9e:36:45:ef:7d:ef:42:e3:d9:ca:e2:48:8f:1e:74:36:95:
19:26:40:2c:05:7d:d9:41:16:af:d0:a2:c2:65:5c:a1:c4:44:
5c:cc:fd:4a:1f:4f:8b:13:d7:61:3e:ca:a6:58:97:9d:26:b7:
71:69:0a:fc:fd:73:22:e0:05:f1:0a:3c:a1:21:92:01:f1:b0:
7f:0c:89:64:bc:1e:9e:64:08:6d:85:a3:5b:42:85:c5:f6:39:
f9:03:2a:c4:f4:8a:29:f8:5b:e8:44:a5:6f:39:e9:6c:71:0c:
0a:44:2e:c1:0a:7e:d7:42:a8:78:ab:0f:ad:df:bc:d3:90:e4:
e9:8c:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:11 2025 by rpki-client