Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IoYrz0iUDAZKqJuCmximWOOXbfI.roa
File: IoYrz0iUDAZKqJuCmximWOOXbfI.roa (raw, json)
Hash identifier: 0dYKEwzvX6cZY0b8UJMxOvYYvWA25As2auX6ymfDEQw=
Subject key identifier: 22:86:2B:CF:48:94:0C:06:4A:A8:9B:82:9B:18:A6:58:E3:97:6D:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882EC7EC88EA4EFC084B58E3ADC9D363EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IoYrz0iUDAZKqJuCmximWOOXbfI.roa
Signing time: Thu 18 May 2023 12:13:54 +0000
ROA not before: Thu 18 May 2023 12:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:c7:ec:88:ea:4e:fc:08:4b:58:e3:ad:c9:d3:63:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 12:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22862bcf48940c064aa89b829b18a658e3976df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:79:5e:7a:50:c1:8f:84:c9:c6:8d:a8:15:23:
99:b1:72:fa:40:4d:52:87:51:be:92:a2:d4:9f:16:
74:dc:88:ee:e0:c5:09:94:b7:fa:b2:ce:70:86:17:
31:d4:e4:a8:bc:87:39:e7:50:f8:83:4e:06:e4:86:
6d:a9:f3:93:59:74:4e:7c:73:2e:4e:a1:2f:ae:83:
c9:93:5a:bf:16:a2:b1:da:bb:71:d9:ec:30:a7:d7:
6b:32:2a:d3:64:29:be:bb:ac:a2:47:d2:71:ba:f1:
8a:93:db:ce:c2:dd:bb:3f:29:b4:ed:15:22:ee:f1:
58:1e:0d:79:c6:d1:5d:e5:9e:25:c5:8f:4f:92:10:
ec:d7:1d:2e:03:23:47:22:20:93:05:41:db:99:04:
5a:d4:ea:ee:48:a3:d4:3d:e6:04:46:f1:74:ae:49:
bd:a6:48:ed:ea:68:17:01:75:92:f0:86:06:f2:53:
2b:bc:04:cb:52:63:a4:b1:7c:39:f9:b0:32:02:64:
28:9a:72:39:dd:c7:0f:e0:32:5d:54:5d:d9:aa:b8:
1f:bd:f0:22:11:2d:61:f0:2d:cb:1e:61:4e:fa:80:
7f:5f:35:be:f7:7f:75:ca:d8:a0:cb:34:20:c6:9c:
91:64:ae:6b:00:f5:09:ca:8d:c1:41:54:7c:9b:fe:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:86:2B:CF:48:94:0C:06:4A:A8:9B:82:9B:18:A6:58:E3:97:6D:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IoYrz0iUDAZKqJuCmximWOOXbfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:b5:d3:35:ee:7b:ab:c6:16:33:cb:23:a6:0e:73:73:4b:f1:
0f:4a:c1:bb:e0:81:f5:f8:5d:17:e2:05:8c:fa:cf:88:09:75:
72:e8:b6:31:c6:d9:74:20:dd:cb:bd:41:7f:ae:59:3d:8a:8c:
96:cf:40:06:89:7c:6c:a6:44:69:45:75:eb:3d:2a:00:69:42:
85:1f:41:e2:53:e7:39:1c:65:dc:12:c2:9c:35:6b:44:3c:9c:
98:85:5d:d4:30:e1:02:d6:ad:fa:a1:35:55:ce:44:bc:96:9d:
f6:ab:9b:eb:0a:0d:1d:ed:c8:65:15:a6:c1:ae:e4:50:36:fd:
73:5e:ec:b1:e4:2f:43:de:ca:f1:93:a7:6e:36:47:85:fb:9b:
71:c8:cf:43:29:1a:76:86:ae:99:a1:56:6d:b6:5d:49:50:57:
7d:90:d7:ca:20:3f:f7:92:b1:13:1d:ed:43:58:77:d1:f7:28:
86:32:f5:d0:f8:98:14:26:01:e5:24:67:c9:9b:6d:d9:1d:43:
d0:7a:1d:91:27:06:0c:ca:e2:e7:9c:28:ee:eb:cb:65:0c:bf:
ce:a1:1f:53:ef:fc:be:c8:52:f6:54:d7:c9:c6:2a:e5:f1:f3:
8f:70:ff:ca:82:f5:ce:2f:1e:c3:21:4d:80:ed:4d:4d:06:0e:
78:c4:3e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:41 2025 by rpki-client