Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/isl1IZJ2JVFN4XZaIdHX2H_LwNw.roa
File: isl1IZJ2JVFN4XZaIdHX2H_LwNw.roa (raw, json)
Hash identifier: fOHYQRG0MCsBdETgTsgVoA47YCorl9zdZuB+vmVFIBE=
Subject key identifier: 8A:C9:75:21:92:76:25:51:4D:E1:76:5A:21:D1:D7:D8:7F:CB:C0:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189672C1F3DE6AE272E3525667A06C57074
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/isl1IZJ2JVFN4XZaIdHX2H_LwNw.roa
Signing time: Tue 18 Jul 2023 04:04:52 +0000
ROA not before: Tue 18 Jul 2023 04:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:189:672b:d43c/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:2c:1f:3d:e6:ae:27:2e:35:25:66:7a:06:c5:70:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 04:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ac97521927625514de1765a21d1d7d87fcbc0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:1e:56:22:74:66:10:f6:84:cd:0b:e6:cd:
36:5c:dd:3e:9b:ae:3f:a2:2c:95:98:5a:e7:97:c8:
d4:32:d3:ac:aa:81:10:3e:45:5d:cd:51:09:f4:14:
5b:33:2c:cb:e1:c7:97:55:ac:92:54:dc:c6:d4:86:
14:99:29:b2:9b:ce:b7:dc:d5:23:07:88:48:b1:79:
30:66:d0:84:25:55:ab:b4:a5:ac:20:1c:23:e9:ef:
32:c8:41:86:b2:b6:92:64:d4:e1:c6:4f:b6:51:ce:
40:1e:02:29:64:55:1a:8d:7f:4f:4d:a4:e8:09:15:
b7:25:50:67:eb:5e:7f:b9:6c:86:61:ae:5b:5a:a4:
7d:28:7f:9e:cd:85:4f:05:59:2e:f0:f9:93:4d:29:
c6:4f:95:e9:94:e4:a6:5c:e7:98:65:e3:e4:4c:4c:
ed:40:d1:e3:49:63:a7:a3:e1:b2:43:a0:08:30:05:
3f:11:77:aa:dc:4f:a0:0f:40:32:4b:45:4a:cd:5d:
bb:6a:7c:d3:15:a8:00:69:e8:96:b1:c9:1f:4d:26:
93:83:f8:09:8e:26:3a:38:44:4e:bf:b3:a7:56:d0:
4f:81:8c:2c:14:15:55:96:82:c9:1a:63:ec:18:d4:
ca:0d:87:ab:03:44:5b:c1:16:53:23:60:f3:9a:c5:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C9:75:21:92:76:25:51:4D:E1:76:5A:21:D1:D7:D8:7F:CB:C0:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/isl1IZJ2JVFN4XZaIdHX2H_LwNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:2f:4f:0d:cc:bd:bd:38:64:b4:20:3f:26:c4:88:45:49:0c:
67:ff:bb:59:2a:39:85:33:e9:7e:e2:c3:08:28:6c:36:e7:f5:
34:94:8d:ba:a3:dc:20:8f:e1:16:0f:4c:09:d4:81:48:ec:e1:
c0:68:14:46:ae:26:0a:02:83:77:72:aa:b0:3d:d1:1d:32:c6:
1d:16:be:35:7c:64:e8:c7:0b:10:48:ed:95:47:84:5e:b8:5a:
be:aa:53:a4:d1:61:8d:10:17:d9:4d:f4:b0:29:11:ca:8d:55:
fd:fc:14:18:e4:59:20:1c:58:17:c7:ce:1c:dd:c9:7f:a8:2e:
17:1e:70:49:1a:c1:3b:35:cb:c9:bc:57:34:06:44:85:3f:c9:
24:41:b8:0e:06:19:95:f2:a2:bf:e6:e3:bb:2d:0d:7b:ae:17:
75:1a:75:f5:dc:56:7b:39:7f:25:f6:a7:b0:d3:9a:ba:ca:f5:
08:ae:e0:87:fc:80:e0:3e:44:29:4c:43:db:bf:b2:9a:1c:b0:
af:e1:0a:e5:19:e1:bd:95:d7:a2:df:37:43:c5:35:54:7a:84:
b1:6e:12:da:83:99:4d:87:e7:8f:4f:64:74:94:c0:ca:98:86:
12:26:b0:e5:ac:ed:4b:be:1d:9e:55:cf:09:e5:e3:6f:12:ca:
54:53:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:28 2025 by rpki-client