Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IQidOqyWQVu9p5oHcRN1IeyFTek.roa
File: IQidOqyWQVu9p5oHcRN1IeyFTek.roa (raw, json)
Hash identifier: ouXimbWErpXhUMaEnu6D6CHTmGjuEz6+lR6rZn138ig=
Subject key identifier: 21:08:9D:3A:AC:96:41:5B:BD:A7:9A:07:71:13:75:21:EC:85:4D:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865BD873912E18284914C1BC5176259A61
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IQidOqyWQVu9p5oHcRN1IeyFTek.roa
Signing time: Thu 16 Feb 2023 20:09:17 +0000
ROA not before: Thu 16 Feb 2023 20:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5b:d8:73:91:2e:18:28:49:14:c1:bc:51:76:25:9a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 20:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21089d3aac96415bbda79a0771137521ec854de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:f6:51:89:ae:6f:18:7a:23:10:fe:1a:80:
53:19:8f:ee:67:c3:aa:05:18:bc:f1:16:3b:e4:f2:
5a:84:6d:ac:8f:58:85:ae:21:ea:14:87:7b:35:0c:
4c:09:bb:4a:af:2a:34:c7:51:d2:ae:e5:22:ff:c1:
af:ce:a1:1a:3a:14:42:b3:2b:33:58:f9:34:f4:9f:
45:23:cb:57:ab:78:7e:5f:05:a0:1c:73:86:54:85:
0f:39:f2:d3:53:00:93:b1:c3:0a:8a:98:87:dc:6d:
c1:5a:8b:46:35:05:05:f2:33:24:7f:a9:51:be:4b:
41:b4:1c:eb:08:3c:4a:6f:91:db:37:46:32:0f:6c:
4b:7d:ae:f2:cf:bb:d7:79:43:4e:82:da:b3:03:52:
a4:fa:f8:56:a1:fd:97:62:cc:c4:c5:b5:ca:c2:17:
a6:19:d9:4b:39:eb:69:2c:d9:7c:cb:6c:86:b3:49:
82:63:77:1c:e9:d5:49:0f:cd:a0:85:2a:dd:aa:4d:
ca:25:ed:9b:a1:75:d3:60:32:19:64:e5:e1:01:0c:
53:8f:16:c1:53:c4:0d:68:a8:14:d3:6b:f0:15:3a:
e2:45:c3:5c:81:06:8c:73:d3:c1:11:8f:06:cd:ad:
b8:30:4b:86:b0:9a:6a:6c:3e:0d:4c:22:f2:dd:08:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:08:9D:3A:AC:96:41:5B:BD:A7:9A:07:71:13:75:21:EC:85:4D:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IQidOqyWQVu9p5oHcRN1IeyFTek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:5b:8a:75:54:3a:fc:60:b1:b1:bc:c5:4d:cc:f9:9e:1a:b1:
13:29:08:f2:04:5f:fa:4c:2b:2f:d2:8b:6d:5a:f3:a1:1d:59:
c9:03:2b:48:fc:b5:0c:15:ad:e7:bf:c3:e7:9a:f8:27:34:d9:
ec:42:9e:2d:73:96:40:c4:de:90:f3:03:5a:83:5c:6d:7d:33:
f3:58:7a:53:13:51:f0:9e:5c:5a:e2:f1:8d:1c:83:9c:6c:3c:
37:18:10:93:a4:7e:34:76:b4:1e:d6:b2:57:ac:19:38:fe:73:
ec:2e:5a:80:01:20:3a:ed:02:13:f0:54:6a:e9:2d:1a:77:ab:
5e:21:94:43:e2:1d:92:cc:75:cd:18:48:23:29:05:55:53:2c:
e2:eb:12:38:1b:4a:de:4f:da:4b:f1:2e:e6:a2:c2:ad:78:77:
f8:4a:6f:01:cb:ec:c0:67:5d:96:28:41:d4:fc:92:f4:41:0f:
2b:1c:8e:47:20:a5:8d:73:c4:c6:a5:63:2a:a7:22:ba:ab:12:
bc:9a:e6:80:50:f4:0d:55:cd:89:d5:5d:d8:e9:7e:af:0f:5b:
a2:08:30:9e:06:f3:c6:0d:b6:a1:df:b8:3f:7f:24:67:86:2a:
a2:b9:90:24:61:36:bd:1c:32:15:be:0b:6e:28:d7:14:33:dc:
ad:52:63:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:33 2025 by rpki-client