Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jI3XvTXtD2s_Ik5c2ZXkfyMoDPI.roa
File: jI3XvTXtD2s_Ik5c2ZXkfyMoDPI.roa (raw, json)
Hash identifier: +yWcScD4lQwPDTDsS4TlnocjIkeN8FUhO11Pdqic4jk=
Subject key identifier: 8C:8D:D7:BD:35:ED:0F:6B:3F:22:4E:5C:D9:95:E4:7F:23:28:0C:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 886380B9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jI3XvTXtD2s_Ik5c2ZXkfyMoDPI.roa
Signing time: Mon 30 May 2022 06:09:14 +0000
ROA not before: Mon 30 May 2022 06:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288222393 (0x886380b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 06:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c8dd7bd35ed0f6b3f224e5cd995e47f23280cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d8:b8:ca:c2:c5:6d:5e:73:47:c0:e5:a0:27:
3a:d3:08:bb:78:8d:76:c9:d8:51:81:45:61:be:02:
ab:ec:02:d0:2d:90:a0:82:ab:6e:6d:e7:75:b2:6a:
9b:3b:a3:54:0c:c3:34:f7:be:54:21:a1:7d:47:4b:
b5:9c:15:a8:d9:54:cd:bd:b7:ca:0b:83:97:96:1b:
71:77:28:a8:7b:94:b2:7f:a5:78:ea:73:fc:39:0e:
2a:44:3d:70:b1:82:64:07:a0:26:6b:84:40:40:73:
58:93:52:9f:65:ae:62:21:ac:ab:d4:8a:c2:80:fe:
92:9b:4f:1a:10:59:5d:99:60:93:aa:12:24:22:a5:
e0:0d:11:1c:1a:8e:9a:6e:ab:32:46:2b:e5:8f:df:
3a:f4:02:f5:6d:42:e2:4f:3d:82:5e:df:73:5b:cc:
e2:8e:74:24:0e:59:52:a9:ea:c9:9c:c1:27:c8:0a:
a2:0b:b3:69:c7:53:99:bb:d5:bf:a5:c7:a9:0f:d7:
4b:e9:7d:56:44:9c:9f:9b:55:c4:82:22:22:a5:9f:
d1:3c:02:5e:2d:74:f0:51:33:a9:b5:44:c0:1a:e4:
6c:73:29:18:64:94:3b:20:ea:40:63:2a:35:b6:38:
ac:8f:41:02:67:69:03:cb:e1:ed:86:8a:7e:a1:85:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8D:D7:BD:35:ED:0F:6B:3F:22:4E:5C:D9:95:E4:7F:23:28:0C:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jI3XvTXtD2s_Ik5c2ZXkfyMoDPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:a0:3f:3b:8c:e0:9e:30:59:b8:99:1d:26:96:5e:83:ae:cf:
cb:c6:c5:06:ec:04:a1:35:fb:2c:1c:6b:c4:6f:3d:d8:e0:0b:
82:ef:cf:93:42:70:04:36:67:a6:49:19:12:27:c2:89:af:cd:
e1:63:7c:97:0e:a7:d4:d5:45:46:85:00:35:bf:94:35:17:e0:
fc:e0:77:36:93:e0:ce:0f:9d:b0:68:8f:ab:7b:f9:fd:98:f5:
0c:a1:82:f2:77:71:e2:80:14:58:d3:f1:7c:18:85:ec:e9:8f:
99:1c:a7:18:e2:c9:a5:f5:5a:8e:8e:cf:e4:f6:ba:70:87:81:
37:b3:01:15:9b:9d:a0:e2:ec:63:f1:f8:d7:40:f6:b9:be:32:
14:e1:c0:4c:d1:e4:6d:8b:a4:97:d0:81:94:6c:e2:e9:94:b5:
34:aa:95:98:5d:4c:5e:68:3f:55:a6:52:41:a2:02:6c:56:1b:
1d:51:43:6c:ae:04:c4:d3:5e:d2:58:df:29:c0:f9:dc:a2:ef:
24:a2:b9:b6:44:0f:25:bb:e9:bb:11:07:9d:c7:ae:72:87:ed:
8f:8d:39:88:54:0a:60:3d:73:ac:8a:6d:65:da:3a:ed:35:7f:
01:88:68:6e:51:05:c0:1b:21:7d:88:91:71:e2:51:2c:b7:36:
f4:62:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:35 2025 by rpki-client