Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iovYglO6eGMSFRmuVaoCD7yHfK8.roa
File: iovYglO6eGMSFRmuVaoCD7yHfK8.roa (raw, json)
Hash identifier: tH6E0/ka+Gx/mFMIB85bWdlOs074exK2owAZDlMrTXY=
Subject key identifier: 8A:8B:D8:82:53:BA:78:63:12:15:19:AE:55:AA:02:0F:BC:87:7C:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F1816BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iovYglO6eGMSFRmuVaoCD7yHfK8.roa
Signing time: Wed 02 Mar 2022 16:07:46 +0000
ROA not before: Wed 02 Mar 2022 16:07:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1863849661 (0x6f1816bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 16:07:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a8bd88253ba7863121519ae55aa020fbc877caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:bc:0e:e3:4b:2d:db:4d:d0:6e:d4:28:5d:
b9:d3:b2:2d:53:de:1f:73:9e:11:75:ff:1c:e6:f3:
26:98:57:8b:8e:9f:f4:ab:25:a8:32:09:60:d9:18:
ce:1b:8e:59:c1:dd:49:5e:8a:69:75:cb:39:07:3e:
5d:59:45:51:73:ff:35:80:83:b3:2d:61:df:0f:b2:
6e:dd:f5:aa:6b:cb:08:a3:b3:b6:70:22:33:0a:d9:
21:17:d3:eb:71:17:da:48:65:fb:e7:12:a8:e2:a4:
a9:30:66:54:a5:56:5f:02:23:e1:a8:16:41:67:68:
85:9b:a0:9d:61:83:28:ed:36:96:d4:df:22:f6:d5:
49:de:ff:81:2a:39:26:50:aa:e3:4e:68:ec:f7:cf:
01:40:da:6b:a5:b3:40:33:41:d7:93:d2:cb:dc:a5:
13:7c:2d:4f:95:a5:12:35:ee:8f:3d:16:ef:68:63:
3e:95:ab:68:29:49:24:66:08:db:2d:77:5d:15:24:
cf:70:9a:10:5e:bd:2a:83:08:32:ec:6a:42:dd:a3:
39:5e:ec:c4:87:7c:33:e3:ac:ca:43:ca:fc:e2:f5:
6b:d6:43:61:06:23:8b:b2:6c:e2:14:3b:85:89:4d:
8e:40:d7:73:d2:e3:2a:a2:b7:c3:1a:6e:f2:6f:48:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8B:D8:82:53:BA:78:63:12:15:19:AE:55:AA:02:0F:BC:87:7C:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iovYglO6eGMSFRmuVaoCD7yHfK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:bf:d7:e1:d3:4d:77:ba:73:2d:08:a0:fb:04:f8:1a:d2:dc:
58:70:7a:9f:6a:ae:08:47:ac:47:0b:c1:8d:70:0d:2a:84:be:
70:7c:eb:03:12:6a:a4:9e:ec:aa:ff:5f:37:c2:ed:d0:57:c1:
8b:63:4f:de:8b:88:a8:8f:5f:a5:5a:ff:65:c8:91:2f:2d:08:
6f:77:d2:17:f5:7e:ad:ce:9f:56:fc:74:4f:1a:34:17:41:8b:
ad:56:e6:bc:b0:bd:9f:60:2f:34:c0:49:a6:a4:ff:29:a3:2b:
c8:90:e1:7b:69:d9:b5:34:fd:3f:0a:d6:63:a8:e8:04:8d:81:
69:cb:01:27:87:24:93:db:6b:06:82:a4:f5:0a:77:10:35:27:
66:4a:5f:e1:cc:3a:c3:f0:0b:2b:05:70:84:76:38:97:a1:f5:
32:1f:0e:18:ec:9f:f2:71:6b:a5:bf:eb:70:5e:07:55:e4:5c:
4c:30:c6:15:d9:63:50:3e:dd:11:eb:1c:36:ae:f2:f5:91:9f:
c2:48:b2:de:42:67:83:a6:d5:09:a7:d2:5b:03:4d:eb:8c:7e:
b7:c6:7c:c1:11:ff:ac:9b:fe:91:60:7a:82:bc:e7:a9:3d:e5:
64:bd:60:ae:14:42:a4:2a:58:c1:3b:e0:5d:1f:85:65:14:34:
66:5d:e3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:27 2025 by rpki-client