Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IIbJVtTt-yYrfkxRByXRIZMjcIE.roa
File: IIbJVtTt-yYrfkxRByXRIZMjcIE.roa (raw, json)
Hash identifier: qlPEseqDujVWevhgI084Rynxr5nwawGXIu6HZgdm4PQ=
Subject key identifier: 20:86:C9:56:D4:ED:FB:26:2B:7E:4C:51:07:25:D1:21:93:23:70:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CED5481
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IIbJVtTt-yYrfkxRByXRIZMjcIE.roa
Signing time: Wed 23 Feb 2022 03:18:06 +0000
ROA not before: Wed 23 Feb 2022 03:18:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827492993 (0x6ced5481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 03:18:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2086c956d4edfb262b7e4c510725d12193237081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:fa:b0:12:dc:c0:80:8a:39:65:06:b2:c4:
bf:67:6a:4f:71:58:61:c7:17:2d:83:1a:03:ce:cd:
c5:a6:68:8b:a0:9f:68:22:1b:0d:3c:1b:2e:4a:ba:
d2:e5:fb:82:6b:c6:df:06:c4:40:a0:52:76:5c:e8:
ef:bd:2f:f6:c1:60:c9:27:20:6f:75:19:0e:dc:50:
09:d2:b3:58:67:dd:cc:84:43:57:53:ac:27:77:3d:
47:bf:d9:de:03:6a:4c:3b:7d:cd:74:25:a0:8a:75:
aa:af:79:83:bd:0c:63:de:a6:8e:6c:3a:af:df:74:
21:95:46:a0:4d:d3:32:6e:56:bf:49:48:82:9e:29:
7a:77:71:db:18:55:54:80:dd:e5:e8:70:08:7d:e2:
a7:73:06:36:4f:c6:db:71:06:e9:a5:20:66:26:50:
e4:27:6a:c6:8d:c8:b8:b8:25:c8:7d:c3:ad:0f:1e:
cc:7a:7c:7b:20:e0:45:21:57:4d:18:99:e8:6a:74:
bf:cf:ac:83:2a:c9:0c:15:50:7e:d7:9b:45:84:1e:
c8:ed:c0:fd:d2:84:1e:5a:26:f5:8f:0c:ee:cf:e7:
ed:ee:8b:2f:dd:4a:58:0a:bf:b6:7e:3f:13:6b:9c:
a8:ab:6b:fd:01:d0:29:22:fa:77:ea:40:c9:03:75:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:86:C9:56:D4:ED:FB:26:2B:7E:4C:51:07:25:D1:21:93:23:70:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IIbJVtTt-yYrfkxRByXRIZMjcIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:91:59:02:7c:9a:cb:77:0a:10:7d:4b:39:c1:77:ed:1e:81:
d7:9c:f4:91:66:30:c4:31:08:fd:5f:74:52:71:ab:19:da:75:
b8:05:69:f7:5b:48:37:e7:dc:0d:25:85:bf:4c:af:f0:b7:9c:
cc:9f:36:c2:ed:79:5b:ff:63:59:cb:f7:78:eb:69:a2:75:57:
69:b3:50:82:9d:7e:bd:21:e5:76:a1:0c:b9:8c:3d:27:47:56:
d9:75:ea:4b:83:9b:4b:fa:ee:aa:4b:1c:2c:3f:0b:f1:7e:1b:
46:27:96:c5:67:1f:fb:25:66:3b:68:4b:52:dd:17:7a:e0:c1:
28:5d:56:22:e9:02:de:da:b6:76:a1:71:15:c6:a3:8a:ba:df:
37:aa:2d:e8:49:f9:8a:aa:d8:8e:a2:1d:7e:7b:43:d7:54:43:
94:55:be:be:85:ea:ea:97:7b:63:cc:a9:a6:46:fc:10:62:94:
a5:1d:fc:4d:d6:83:80:cd:17:11:e9:b8:98:15:c9:1d:fd:f3:
01:46:e2:56:16:d7:89:0f:d1:7f:32:08:3d:24:5c:3e:c9:56:
ac:89:5c:f0:97:6f:ff:ef:ae:15:db:c7:eb:82:0e:8c:76:84:
8e:49:56:89:7b:70:75:39:01:2a:bd:47:7d:4e:8c:f6:06:bc:
48:d7:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:41:09 2025 by rpki-client