Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iukYEKtC17cCG8mKQqzRdz0C0jo.roa
File: iukYEKtC17cCG8mKQqzRdz0C0jo.roa (raw, json)
Hash identifier: KZyWleMfagcCQApXsc/0PGB5xO+0UJk5/CYS9axm8Nc=
Subject key identifier: 8A:E9:18:10:AB:42:D7:B7:02:1B:C9:8A:42:AC:D1:77:3D:02:D2:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018789FA66A5E62B4A284A3D48A48B3A6DA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iukYEKtC17cCG8mKQqzRdz0C0jo.roa
Signing time: Sun 16 Apr 2023 12:11:41 +0000
ROA not before: Sun 16 Apr 2023 12:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:89:fa:66:a5:e6:2b:4a:28:4a:3d:48:a4:8b:3a:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 12:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ae91810ab42d7b7021bc98a42acd1773d02d23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:1d:54:9d:17:bd:c3:a0:03:1e:09:dc:46:
6c:1e:3d:49:35:1d:5c:81:f3:50:a6:6f:29:aa:b7:
bc:83:3b:d6:0d:5e:c9:d0:b0:42:93:fb:a3:7c:f1:
ef:63:1f:ed:cd:9e:ab:55:d1:da:52:c1:68:be:07:
7b:6c:e7:f5:22:f3:05:41:e6:a9:82:4c:30:37:13:
d2:df:c1:58:f7:ec:69:22:41:df:d4:13:53:66:fb:
be:6b:cd:69:1f:6f:2f:5e:dc:3a:86:2f:ad:33:14:
ab:4e:ff:c4:62:00:ab:c8:eb:79:ef:30:2b:5a:8d:
2d:b8:32:67:5c:cb:e9:67:57:90:9a:89:64:6b:63:
3e:b2:01:ac:58:ad:bf:dd:21:da:2b:34:58:4d:43:
76:3c:5c:7a:55:87:39:cf:76:eb:cf:41:7a:31:68:
8a:8b:0e:d0:50:10:fb:68:82:1c:a8:a7:76:45:5f:
ba:4b:95:a0:13:19:81:dc:28:18:2f:d4:50:e7:7e:
61:22:c1:f2:25:3a:4f:d8:df:14:f0:b8:ba:e4:cf:
f9:b5:8a:ed:4b:a9:96:0a:96:48:2a:c8:cc:bd:bf:
b0:8e:70:97:83:f2:0c:7b:33:3f:32:3a:f3:f5:15:
c8:9c:85:6e:ae:65:a7:e4:7d:65:b0:00:9c:56:2e:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:18:10:AB:42:D7:B7:02:1B:C9:8A:42:AC:D1:77:3D:02:D2:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iukYEKtC17cCG8mKQqzRdz0C0jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:19:b2:72:a1:7d:4c:3a:40:0c:d7:7a:5c:b5:cf:96:55:90:
86:66:2c:58:2d:06:22:21:33:44:af:1d:af:c7:58:bc:b5:80:
db:a1:4a:d2:58:57:89:2b:f2:78:07:38:01:6e:1b:b6:63:ad:
51:1b:62:0c:9e:fc:e8:ff:58:3f:4c:1c:93:53:d7:58:1d:5a:
34:b7:43:68:af:20:2f:51:f0:56:f5:f1:6d:90:70:ce:d3:90:
65:1a:7a:dc:d7:07:eb:a1:c8:38:f5:e0:0b:eb:ff:76:5c:1d:
5f:db:ac:0e:6d:ab:72:13:bc:a0:15:6e:02:68:bd:0e:c3:f3:
70:14:29:25:d8:3b:bd:70:0b:ee:45:d7:0d:7e:70:f3:1f:82:
b4:f4:44:97:c7:3c:e5:f6:04:2b:7c:49:98:dd:79:2d:19:87:
79:03:87:70:47:ad:6c:52:94:fb:88:d7:16:93:d2:01:f3:71:
2b:37:14:44:94:7b:81:d2:73:a1:ab:34:dd:8f:31:3c:12:04:
27:a4:58:ad:c6:08:84:cb:c7:69:8e:ea:e9:ab:50:82:ce:f5:
ca:29:64:34:a7:01:91:bd:97:ad:0c:85:f1:43:b6:6e:3f:b8:
c5:ef:15:f8:52:ce:55:87:bd:52:b8:75:93:bd:14:00:f8:54:
b8:4c:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:57:27 2025 by rpki-client