Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IHMVQqc0uD9Md7E1irJkIjNilws.roa
File: IHMVQqc0uD9Md7E1irJkIjNilws.roa (raw, json)
Hash identifier: /JNKn+3d765BWba5sJWfS5dMTkAYdfIGMXUzL5sglqk=
Subject key identifier: 20:73:15:42:A7:34:B8:3F:4C:77:B1:35:8A:B2:64:22:33:62:97:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 9277E9FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IHMVQqc0uD9Md7E1irJkIjNilws.roa
Signing time: Tue 05 Jul 2022 02:10:25 +0000
ROA not before: Tue 05 Jul 2022 02:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457332223 (0x9277e9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 5 02:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20731542a734b83f4c77b1358ab264223362970b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:ce:59:7e:e2:f3:a9:96:36:5e:aa:85:12:
5c:26:f9:97:41:44:5f:62:6d:61:34:bb:0f:93:ec:
95:54:78:1e:f2:d3:a9:45:6b:69:08:fb:2c:b2:8e:
af:c4:cb:b4:6b:4e:eb:5d:c9:33:3b:c3:09:63:e5:
e4:60:94:dc:d7:81:85:4c:25:a9:3d:21:cc:a6:0d:
e0:ff:43:6d:6e:06:50:d0:5b:7a:e7:f9:0e:5d:16:
43:3d:c8:86:2e:dd:7a:4a:a1:c9:c0:f0:c6:85:64:
46:03:06:1f:c3:b5:bb:a9:7c:00:ba:29:4d:a2:86:
e9:8c:45:88:50:8b:50:3b:cc:ce:f4:fb:ff:1a:ec:
aa:c9:70:37:6e:26:02:00:1e:30:db:20:46:7e:b6:
49:d9:09:72:d8:34:80:da:29:49:4c:e3:cc:88:1a:
26:51:89:2b:dd:ff:f0:89:76:a1:67:bf:bd:e7:52:
b4:5a:1a:4c:c7:d9:50:78:03:e8:fb:aa:62:9d:a0:
ae:c2:21:fa:e8:c4:9f:c8:15:d7:a0:95:32:b5:26:
a4:90:c1:38:88:96:3a:59:f4:f8:7b:0a:87:84:72:
cc:c5:e6:c7:74:e9:46:ba:9e:70:e1:08:07:d0:a6:
fa:9b:48:cb:2d:ba:a6:e5:b1:f7:d6:1e:92:0c:28:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:73:15:42:A7:34:B8:3F:4C:77:B1:35:8A:B2:64:22:33:62:97:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IHMVQqc0uD9Md7E1irJkIjNilws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:44:79:16:6e:79:88:4a:7f:2d:53:d4:4b:8b:96:97:46:e7:
c6:1a:6a:13:e9:6b:f1:fd:1f:0b:57:17:43:42:88:dc:e4:a3:
47:9b:33:b5:e7:22:0a:2d:52:d4:b6:cc:28:64:ee:16:5c:74:
c0:25:c7:cb:c2:7a:0e:dd:80:47:f8:10:ad:d2:dd:2f:55:78:
00:80:ce:37:8e:32:3e:e6:f0:59:89:73:b5:0d:42:dd:3c:af:
45:a2:4f:a2:81:a5:00:db:26:19:d0:8d:7f:af:2c:50:95:6c:
2f:52:c8:18:b5:a9:e2:38:d2:9e:0a:2f:56:98:98:1b:ee:23:
37:d7:64:37:01:fb:c7:af:d5:7d:c6:db:8a:21:d9:8a:45:34:
11:f9:53:4e:86:8c:f2:23:2d:3e:f3:30:22:27:f2:21:d6:f9:
eb:96:a0:29:c0:c0:46:60:7e:f7:5a:3a:86:42:b7:94:4a:79:
aa:87:1b:a2:71:bd:62:aa:24:f5:4d:ac:cc:9b:f1:f1:14:ea:
69:81:bd:a4:3c:d1:15:78:37:0c:43:76:17:73:95:ee:a3:59:
02:ee:73:b9:44:ef:75:05:6f:ec:bc:42:cc:53:84:19:d5:5e:
54:93:82:1e:cc:9d:51:3b:ff:bd:a9:31:67:62:b4:2b:b5:75:
4f:06:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:06:27 2025 by rpki-client