Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ipivaNLeAx9T8lVMxKjj6XBHHg4.roa
File: ipivaNLeAx9T8lVMxKjj6XBHHg4.roa (raw, json)
Hash identifier: OUsYXDJwhgPE2/dygTqbaUlV1tbGA9pL4ive+W+Q+tw=
Subject key identifier: 8A:98:AF:68:D2:DE:03:1F:53:F2:55:4C:C4:A8:E3:E9:70:47:1E:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018947727B50377262E44C6B936A40DD3850
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ipivaNLeAx9T8lVMxKjj6XBHHg4.roa
Signing time: Wed 12 Jul 2023 00:13:52 +0000
ROA not before: Wed 12 Jul 2023 00:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:47:72:7b:50:37:72:62:e4:4c:6b:93:6a:40:dd:38:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 00:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a98af68d2de031f53f2554cc4a8e3e970471e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:08:d5:f9:d3:28:0c:2f:2e:04:d8:a1:01:32:
e6:55:b7:9f:3d:65:0d:74:dd:1b:e1:0f:74:e7:79:
e9:73:84:c6:f7:65:62:6e:b0:4c:60:b7:44:36:f9:
bd:24:39:16:57:df:2d:3d:70:fc:57:84:22:64:dd:
9e:a1:96:f1:22:41:5f:ad:c8:b0:d3:c5:8a:5c:f1:
09:bf:ea:75:f1:21:bc:67:09:85:e7:e3:02:1c:f2:
f2:18:57:97:2f:dd:a4:1d:9c:1f:05:7c:52:ad:6b:
06:87:d6:45:c6:b4:70:0c:fd:7e:20:e1:3e:b1:7c:
b2:f8:a8:ec:df:65:87:1d:e0:6f:53:72:b3:07:1a:
a9:64:e5:ba:7b:dd:23:45:2c:76:89:37:f8:a9:e8:
e6:dc:75:74:a7:80:3a:f6:59:d5:0b:54:21:37:c7:
04:9f:82:5f:c0:ed:be:08:09:0c:28:04:e8:36:ae:
2d:9a:e7:22:07:8a:f7:67:21:98:9e:a6:72:77:ea:
6c:09:d2:c9:dc:8b:05:f7:7f:02:0e:ae:93:5e:da:
62:c1:c8:7a:57:87:3d:1a:26:e7:a1:a3:55:43:28:
e4:1b:41:8b:a5:37:fa:99:d7:b0:a5:ae:f4:de:67:
fc:ee:d1:a2:9d:64:d2:2e:68:77:d9:88:4f:ae:55:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:AF:68:D2:DE:03:1F:53:F2:55:4C:C4:A8:E3:E9:70:47:1E:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ipivaNLeAx9T8lVMxKjj6XBHHg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:e1:16:02:5e:a6:91:61:e1:aa:61:8e:0e:fd:86:05:a9:19:
82:13:73:ca:45:f1:e3:5f:01:5f:2a:dc:f8:de:0f:32:8c:cd:
50:60:88:5e:fc:b2:bd:dd:d3:74:dc:29:45:7a:da:1e:1c:90:
ce:b0:c8:3d:59:65:b1:7d:42:e0:b2:8e:5d:7e:9b:f7:1f:98:
89:2c:75:06:70:c3:f1:9c:bb:78:07:35:4d:4d:c3:8e:03:df:
3b:d8:da:36:ea:7b:0d:84:e6:43:fb:f4:cc:ec:26:c9:79:07:
f7:29:30:26:f4:dd:1f:5f:52:39:52:64:d7:3b:9b:ce:9d:70:
34:54:9e:65:4d:c1:56:1b:e2:2f:e4:af:7d:8c:1a:87:21:27:
86:bd:33:22:3a:dc:e0:a3:c3:92:f7:f6:47:e2:fa:9c:b4:97:
a4:7d:29:11:13:aa:d3:91:fd:fa:9d:8b:3d:2c:d8:16:57:52:
39:17:51:62:f7:38:ee:23:53:4b:8b:f8:3f:98:55:cf:e6:93:
49:3c:0e:93:2b:28:2a:de:b8:04:54:b2:87:1a:66:60:c1:3d:
26:8a:44:09:c1:df:d4:40:ae:55:e8:a1:1c:a5:07:11:f6:9f:
a1:7a:9a:c4:0a:cc:42:33:2e:66:d8:c3:9a:a5:ed:70:68:20:
bf:17:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:54:29 2025 by rpki-client