Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/izynJNU8mWUiHPNDnBUXZZ-pP6A.roa
File: izynJNU8mWUiHPNDnBUXZZ-pP6A.roa (raw, json)
Hash identifier: aElJsmrJJ5NWILA/q/cn6aRoHBfqJCW/1qa4MTSboYk=
Subject key identifier: 8B:3C:A7:24:D5:3C:99:65:22:1C:F3:43:9C:15:17:65:9F:A9:3F:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185AD65312847B0CDAC6DBBC464917BBC17
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/izynJNU8mWUiHPNDnBUXZZ-pP6A.roa
Signing time: Fri 13 Jan 2023 23:09:28 +0000
ROA not before: Fri 13 Jan 2023 23:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ad:65:31:28:47:b0:cd:ac:6d:bb:c4:64:91:7b:bc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 13 23:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b3ca724d53c9965221cf3439c1517659fa93fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e7:93:e6:f5:1a:5b:fc:b2:56:5e:3f:0a:9f:
00:68:15:1a:c9:0c:7e:c5:7c:02:c1:0c:88:93:b5:
58:32:ef:6a:47:d9:10:70:fc:98:5d:ef:58:91:40:
1b:31:81:52:c4:86:69:c8:43:18:a1:19:d8:ad:6c:
b6:b9:65:77:ca:04:f1:8b:c0:9b:d2:cc:33:49:75:
7d:a6:d1:1d:0d:79:e0:05:52:89:b0:61:bf:b1:91:
c5:5f:09:78:b7:eb:14:ff:18:25:cf:7c:98:60:d3:
5e:f2:d7:5e:48:14:8e:6c:4c:b0:e0:60:d0:55:09:
88:9b:87:27:28:69:48:a0:05:d3:83:35:b5:2c:25:
a5:2a:c6:00:50:0e:7f:74:dc:02:7a:39:c2:e9:51:
87:31:20:0b:7c:3e:cf:ac:f0:85:62:15:55:11:f5:
cf:76:97:6e:ef:f4:a8:b9:f2:f7:c6:bc:91:f4:d2:
b7:a8:3c:6c:75:ae:0f:5c:d7:d6:2e:47:5e:8f:c0:
db:57:b6:f6:3b:05:d7:d4:ca:99:90:b0:eb:f0:9b:
3b:d5:4d:47:61:37:87:ba:e6:61:20:93:dc:a7:d0:
10:74:c6:76:c9:d2:d6:cd:fb:06:26:59:5e:80:7f:
22:d5:63:54:74:ab:cf:34:f9:ff:b6:fe:f7:41:62:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3C:A7:24:D5:3C:99:65:22:1C:F3:43:9C:15:17:65:9F:A9:3F:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/izynJNU8mWUiHPNDnBUXZZ-pP6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:26:50:54:8f:07:bd:32:2d:19:6f:91:e6:6b:c5:b8:01:dd:
85:4f:84:34:32:c9:24:68:5b:b6:d9:2c:0f:c3:e4:e6:05:ee:
08:b1:0b:dd:59:c8:3e:a4:62:17:1f:7a:6f:b9:25:3a:18:ec:
61:f9:fe:21:1d:fe:85:b0:34:1e:15:c0:a2:45:ec:3f:a3:b8:
38:ea:ca:9c:4b:35:c2:96:57:a4:98:92:11:e5:85:9d:61:93:
b9:66:5f:74:28:43:d5:fb:82:f7:bd:67:75:42:44:8b:95:ff:
3e:2e:e5:e5:4d:f2:60:dc:bf:2e:a6:4f:cb:28:15:42:69:a2:
d2:81:f8:bf:d9:0f:79:7e:8e:29:3b:c6:a3:b0:f1:40:ac:c3:
2f:2a:5c:20:74:3f:4f:8a:32:4a:ec:ad:28:6f:e1:23:7c:bc:
ee:7f:a3:71:b0:30:a4:ba:ee:55:10:42:98:f7:e4:77:0a:dd:
04:0d:1c:6c:38:ec:8a:71:4f:45:db:52:e5:bf:d4:11:d6:a7:
76:d6:3e:28:65:1d:43:ca:27:b1:a1:21:8d:eb:a1:4d:7a:eb:
02:e3:6e:f5:dd:4d:b4:1a:6a:59:f1:e1:06:05:ec:9f:ec:b8:
83:69:33:e2:2e:e9:b8:a9:dd:cf:57:50:12:d1:99:fb:ce:ee:
24:5b:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:47:22 2025 by rpki-client