Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IiMZFZIBris2xq2rpt_RQNggKE8.roa
File: IiMZFZIBris2xq2rpt_RQNggKE8.roa (raw, json)
Hash identifier: x/oY32232RmoGB8EdPcaPWaz7tNuctbxAkR3KlWP83s=
Subject key identifier: 22:23:19:15:92:01:AE:2B:36:C6:AD:AB:A6:DF:D1:40:D8:20:28:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BDE3CEF24AAF9A966B210D7E2F2B2E1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IiMZFZIBris2xq2rpt_RQNggKE8.roa
Signing time: Thu 15 Jun 2023 07:10:03 +0000
ROA not before: Thu 15 Jun 2023 07:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:e3:ce:f2:4a:af:9a:96:6b:21:0d:7e:2f:2b:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 07:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=222319159201ae2b36c6adaba6dfd140d820284f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:0c:c2:91:2e:bc:fd:a6:7b:d4:3d:c6:cb:
98:b8:d0:1b:fc:de:d4:5c:c9:1b:f2:45:c8:da:68:
14:af:21:5f:7e:8f:25:11:46:54:13:9a:c5:95:1e:
a0:3e:b6:e9:18:3d:f3:71:e4:ba:03:02:b2:af:e6:
0d:05:57:b1:24:ad:2f:b1:24:50:75:05:f7:88:11:
c6:1d:0a:b1:3b:8b:07:1f:92:6b:b5:4a:37:4e:ab:
4e:57:0b:dc:72:23:cb:e5:c3:63:00:ef:86:4c:d6:
77:ac:0c:e0:8c:38:f9:62:c7:3b:72:3a:70:a9:ca:
96:b2:93:8c:e7:b8:06:d8:39:34:89:70:92:a7:6d:
71:26:6f:11:c4:65:62:58:45:00:93:de:b9:0d:86:
c1:79:7d:35:ef:7d:48:0e:e1:14:d9:df:6d:d7:c8:
2a:48:9c:45:60:02:e9:21:3f:84:bc:f9:5d:3e:fb:
3b:be:4b:6f:84:5b:d2:a8:43:b8:43:b2:03:01:ec:
a3:dd:e4:ae:69:53:32:d5:6c:1c:7f:d2:a2:9c:65:
48:f6:ea:c5:2d:35:39:cd:e5:80:91:9d:b6:06:4a:
de:1a:93:25:79:ac:63:84:75:f9:6d:c2:f3:ce:30:
db:3a:df:83:05:66:e9:65:19:f3:b5:d1:5c:6d:af:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:23:19:15:92:01:AE:2B:36:C6:AD:AB:A6:DF:D1:40:D8:20:28:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IiMZFZIBris2xq2rpt_RQNggKE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:1b:68:bd:5e:49:62:c6:6e:b0:32:94:19:38:bb:a0:5f:23:
8a:d7:fe:8b:62:aa:ac:78:13:9b:9e:e8:6e:d4:66:98:f0:dd:
5a:c8:4b:85:9e:8c:37:08:8e:fa:e5:2b:a2:03:4b:d1:be:0e:
d4:f2:6e:53:19:c3:bb:39:ea:01:91:93:f0:3c:5e:de:84:d6:
e2:bb:e7:f2:64:32:3d:75:9e:95:b2:1b:4a:73:c7:dd:4a:54:
a6:c4:12:5a:f4:d1:8c:a8:b6:4f:7b:f5:cb:b4:ef:e4:aa:de:
a3:3a:8b:33:bc:35:d3:15:eb:db:20:8e:b7:ef:34:97:09:05:
a0:36:e1:a6:23:eb:c1:22:76:08:76:3d:2a:80:d4:c5:78:90:
04:ca:e3:3a:57:8c:40:8a:94:b5:fc:e9:5f:96:12:d4:ad:81:
6d:af:a6:a3:07:35:9c:fe:90:2a:0a:f6:ce:75:33:58:80:d0:
db:a2:9a:46:10:76:6a:10:68:a9:a1:bb:dd:5d:1c:54:b6:c2:
d8:db:72:b3:b0:fa:c7:ec:65:8e:2f:45:e7:3e:3a:ef:50:3d:
f2:8e:6c:82:8a:9e:ea:cf:6e:45:0c:b8:5c:d1:c2:a4:d8:c9:
69:15:16:44:c3:ad:98:cc:63:af:34:8d:f1:f7:7d:26:1d:1e:
7f:c2:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:45:22 2025 by rpki-client