Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IXPLDrHSlsTrRyjjHSL70auJQ2A.roa
File: IXPLDrHSlsTrRyjjHSL70auJQ2A.roa (raw, json)
Hash identifier: ekAA3KJfoPshelNV+wNlRLbryKHuqGfUkMTDebUBFo8=
Subject key identifier: 21:73:CB:0E:B1:D2:96:C4:EB:47:28:E3:1D:22:FB:D1:AB:89:43:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018219CF778A6C14ACAFE1868A95CD2EE035
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IXPLDrHSlsTrRyjjHSL70auJQ2A.roa
Signing time: Wed 20 Jul 2022 04:13:23 +0000
ROA not before: Wed 20 Jul 2022 04:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:19:cf:77:8a:6c:14:ac:af:e1:86:8a:95:cd:2e:e0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 04:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2173cb0eb1d296c4eb4728e31d22fbd1ab894360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:67:78:c3:e1:74:fe:ad:1d:fe:ec:55:71:
fc:cf:d9:1b:ce:95:27:4e:48:2e:fa:8d:a8:3a:75:
a9:a1:52:ea:00:63:35:97:06:03:5e:02:90:88:da:
d3:61:a3:ea:71:c8:60:55:16:0e:6d:68:29:0c:45:
b6:ba:25:33:03:ce:76:d9:ca:27:82:14:b8:82:21:
a1:f1:73:ec:f9:6f:a4:14:82:94:28:ff:47:0c:35:
c5:cb:3a:9b:0b:b6:01:25:bb:6f:be:35:e4:aa:3d:
a0:e5:3e:46:50:3f:82:19:f4:cf:f0:95:30:0d:4a:
80:13:19:90:f8:fe:2d:3c:57:e3:88:c7:d6:0c:00:
c6:37:68:ad:e8:86:be:2f:4d:fa:19:b6:3f:e9:4c:
a4:09:9c:83:11:ef:af:0e:48:00:b9:58:0e:68:ed:
b4:25:a6:1a:b0:68:85:20:f2:66:0c:0e:1d:f1:5e:
50:96:ef:a3:c1:ff:a9:cc:4f:5d:09:62:8e:38:65:
a0:62:b9:4f:61:4d:a5:ea:be:13:33:47:1d:6a:f6:
a7:2f:93:31:fb:5c:2c:93:b0:41:a0:95:a9:78:8a:
dc:6b:e2:0e:f9:e3:29:f5:2a:0a:af:d2:5f:5f:7f:
d6:6a:74:9c:70:92:ef:2d:1e:b2:a7:aa:71:0b:70:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:73:CB:0E:B1:D2:96:C4:EB:47:28:E3:1D:22:FB:D1:AB:89:43:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IXPLDrHSlsTrRyjjHSL70auJQ2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:62:28:73:18:71:c2:8e:07:f6:b5:6d:4f:47:f0:1a:b1:e3:
c7:12:bd:0b:92:50:18:8c:f4:40:ba:54:9d:30:0d:c6:c8:85:
a8:68:a4:42:cf:5d:79:6c:85:40:b5:1a:32:08:12:2e:83:b4:
50:fc:4a:d5:4c:ae:e4:e1:a0:56:00:fa:41:1e:55:70:6c:8e:
b2:ff:80:a5:57:1a:ec:2f:97:a1:4a:ae:7b:dd:dd:75:4d:a6:
73:73:5a:8b:4d:d9:f5:78:a7:32:b0:d0:75:2e:fa:98:2d:5c:
e1:0a:91:38:40:d9:e9:c3:8b:e2:00:86:da:a3:88:da:46:e1:
3c:ff:1f:3a:58:ea:24:62:40:91:31:81:aa:af:05:e4:ea:48:
10:ef:b8:01:4e:67:24:53:7d:fd:06:c3:9a:72:17:e8:c5:51:
fc:9e:9e:c8:eb:07:1b:5b:21:88:25:f8:97:f5:46:0e:f0:bd:
58:65:4b:4d:67:6a:73:fc:f8:cc:2a:a3:e6:c2:ce:46:ed:70:
90:4e:24:d5:f0:83:a6:c3:b5:98:43:3c:3e:ae:6c:37:a2:b4:
9c:85:bb:28:82:47:72:49:4e:10:5c:da:6e:83:dd:98:dc:2a:
53:2a:69:07:4d:96:88:8b:f3:7e:b2:44:5c:77:38:51:2d:eb:
97:82:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:35 2025 by rpki-client