Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ib3oriJL-5gpTmb_yWVm4Kx1aFc.roa
File: Ib3oriJL-5gpTmb_yWVm4Kx1aFc.roa (raw, json)
Hash identifier: ZIh+C53hSixkUe56+b45ME9GDM1hMyOiGElRqzA+wfU=
Subject key identifier: 21:BD:E8:AE:22:4B:FB:98:29:4E:66:FF:C9:65:66:E0:AC:75:68:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A13494C03BEA6420854F91C78AD201053
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ib3oriJL-5gpTmb_yWVm4Kx1aFc.roa
Signing time: Sun 20 Aug 2023 14:11:25 +0000
ROA not before: Sun 20 Aug 2023 14:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:13:49:4c:03:be:a6:42:08:54:f9:1c:78:ad:20:10:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 14:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21bde8ae224bfb98294e66ffc96566e0ac756857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:61:dc:1e:83:5f:13:7d:78:22:cf:b1:07:
4e:f8:55:9e:60:3d:e2:48:bf:b0:b7:97:8b:de:90:
f2:5e:7b:aa:04:80:66:b7:cf:3b:f0:62:ec:c7:02:
ac:06:31:91:5a:98:56:92:53:1a:4f:27:63:38:de:
1f:82:3c:c4:2a:cb:a4:31:d2:e2:a9:f4:fa:bb:c7:
ff:f4:95:10:8f:7d:7e:61:6c:6f:e1:b5:b5:b7:da:
af:28:8e:4b:25:24:ad:6f:17:eb:a0:db:19:30:ca:
fd:3d:79:f2:89:51:b5:9b:3d:49:fb:66:0b:97:3f:
f4:72:b0:e2:b3:30:82:ac:8d:db:bc:ce:37:e2:e0:
0d:38:1e:59:25:da:df:f0:8d:a8:c5:56:fc:b3:4b:
e1:6f:87:5a:fe:2c:e8:c1:7e:b5:81:2f:1d:ec:d3:
dc:7d:a3:7d:64:08:16:b5:a5:f7:87:c2:c1:56:a2:
11:d9:32:c9:29:25:75:21:78:ac:d2:4f:ca:06:30:
1d:f8:e5:8d:d3:cb:53:c7:cb:98:23:ba:a4:01:ee:
39:28:15:08:51:4c:8c:00:23:9d:84:a8:38:68:d4:
7f:bf:3c:29:17:9f:4c:66:0e:5e:75:12:07:f1:c8:
29:4f:c9:b6:45:6d:e1:fc:35:e5:f2:50:64:b9:75:
b9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BD:E8:AE:22:4B:FB:98:29:4E:66:FF:C9:65:66:E0:AC:75:68:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ib3oriJL-5gpTmb_yWVm4Kx1aFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:bb:f2:87:ef:03:90:2d:d3:cf:6a:aa:2b:1b:c5:27:1f:71:
05:eb:51:ce:05:b5:97:5d:7c:3b:f6:ba:19:79:c6:dc:6c:a3:
b9:ec:06:0e:85:9c:db:84:5f:b2:44:11:41:07:ae:1e:8c:20:
82:64:16:92:98:03:46:a3:3b:ca:6a:b0:62:9d:13:8a:c1:d1:
fd:65:1d:06:90:ac:34:7c:7d:8f:bd:19:4c:e0:d0:d6:d8:92:
b6:ca:68:5f:44:31:4e:d7:65:a5:ae:ba:69:cf:6b:2a:94:26:
2a:3c:54:70:70:af:5b:8e:ef:0e:b4:61:a0:e9:dd:7d:ff:db:
07:62:ca:0d:41:58:15:40:1a:68:01:82:11:14:9b:22:92:39:
94:fe:48:00:4a:c9:49:e5:5e:3c:c2:bc:30:80:e1:5c:71:7f:
af:a5:81:07:37:c2:7d:bd:2b:ee:ca:64:81:6b:b8:d6:89:06:
f3:05:33:ef:45:6c:91:0b:01:13:f8:be:34:dc:a9:02:20:5a:
a1:12:81:0b:a7:86:f6:3f:b9:30:57:4a:12:f7:c5:78:d7:f4:
06:55:32:1a:14:67:a5:fb:87:b1:9a:c4:e1:ad:9a:88:7e:e4:
ee:e3:8f:7c:e2:f0:ed:31:9b:07:90:35:41:a8:92:72:d2:50:
e7:27:37:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:40 2025 by rpki-client