Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ixH1hqcU-TxU_72ez999WZWJBCs.roa
File: ixH1hqcU-TxU_72ez999WZWJBCs.roa (raw, json)
Hash identifier: 3UQOlQ5GPiMoKcDFxizJMPX7TSTe5cPIi0FnYs9y/jY=
Subject key identifier: 8B:11:F5:86:A7:14:F9:3C:54:FF:BD:9E:CF:DF:7D:59:95:89:04:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852AB7333D8147C8928644250324858238
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ixH1hqcU-TxU_72ez999WZWJBCs.roa
Signing time: Mon 19 Dec 2022 14:08:47 +0000
ROA not before: Mon 19 Dec 2022 14:08:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:b7:33:3d:81:47:c8:92:86:44:25:03:24:85:82:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 14:08:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b11f586a714f93c54ffbd9ecfdf7d599589042b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:79:df:07:f9:91:3d:9b:44:9f:31:0c:63:
ea:6c:a1:bc:e3:4a:5d:47:7d:01:82:94:ba:90:1d:
ed:66:57:eb:8b:8a:17:7d:22:6a:a8:a6:99:84:3f:
19:a5:63:82:24:91:38:b8:bc:15:2b:41:0d:ac:3b:
9c:c3:21:48:12:a9:89:f3:5b:74:aa:5f:59:1c:31:
78:14:c5:e0:c0:55:1d:27:af:a7:c1:eb:b6:34:91:
15:3f:9b:35:cb:6e:0c:f4:e2:2b:aa:82:af:4c:15:
b7:c5:1e:48:15:de:66:80:2e:b0:e3:7b:69:7d:bd:
f8:cb:89:3a:6e:39:20:81:64:68:23:bd:18:83:03:
2d:fe:a5:59:03:97:74:2b:92:45:e4:af:4e:85:f3:
b5:53:85:47:e6:1d:7f:05:f3:a2:26:e5:93:22:38:
f2:d0:74:5f:5f:c5:c2:09:15:6e:6c:29:e6:4d:37:
0c:64:b7:9d:b0:2c:dd:26:7a:c8:ff:75:e1:48:30:
a2:60:c6:92:23:38:3a:34:68:f9:3d:5e:ec:f0:82:
4d:9d:7d:cc:b3:b9:95:02:3f:54:fd:30:b9:48:cd:
32:e7:43:8e:78:7e:cd:9b:3e:52:53:d0:78:17:f5:
b5:b5:a1:91:19:36:da:a0:c8:90:84:42:3c:40:48:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:11:F5:86:A7:14:F9:3C:54:FF:BD:9E:CF:DF:7D:59:95:89:04:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ixH1hqcU-TxU_72ez999WZWJBCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:92:b3:7b:e4:c7:a7:2d:ff:1c:9a:30:1b:d9:8b:63:0e:4d:
7e:cd:1a:f5:55:92:b6:5e:be:71:35:96:44:9a:b5:b1:4f:71:
e9:df:69:1b:1a:83:91:f1:b6:99:bf:c2:3b:46:84:9f:d8:01:
3a:45:05:99:b6:5d:fc:c0:77:3e:cf:49:7e:79:ad:c4:cc:95:
cc:81:80:25:19:68:8f:0b:d7:e1:48:a4:6a:08:7e:44:7f:13:
ed:64:6b:12:50:d0:59:82:4c:e3:a8:60:0d:d5:ad:d6:23:ab:
ac:17:3e:f9:b3:a3:0c:5e:67:61:8f:c0:e0:08:5d:ba:97:74:
54:5a:25:b3:a3:8d:9c:25:3e:ce:62:ac:2a:0d:12:7a:53:a2:
f8:af:16:f2:bf:0d:fe:01:82:91:bc:73:2a:67:69:c0:62:6b:
df:d5:e4:e1:62:38:ad:18:4b:ef:a3:6f:ab:13:36:54:65:50:
f3:4c:6b:9d:7c:01:09:7e:0e:1b:87:f1:87:ba:88:ea:b6:b7:
2d:f9:0c:11:1a:0e:4d:7d:e1:49:f5:5d:05:c2:0f:43:de:1c:
60:87:77:b7:77:4a:94:37:d3:b6:53:ae:17:ea:cc:7f:ed:05:
f9:32:31:70:9d:97:e5:a7:a0:f8:b3:ef:94:91:76:89:d7:61:
d6:0c:b1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:23 2025 by rpki-client