Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IrZuRI2dEj6H2RttSYpf2DyL07I.roa
File: IrZuRI2dEj6H2RttSYpf2DyL07I.roa (raw, json)
Hash identifier: anCNOv7ut8AhlhnlRGBCUSCmgCYJmsleazKQ7A5SAfY=
Subject key identifier: 22:B6:6E:44:8D:9D:12:3E:87:D9:1B:6D:49:8A:5F:D8:3C:8B:D3:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C6FCDBE5816C6AD90B0625CEDDC8EE94
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IrZuRI2dEj6H2RttSYpf2DyL07I.roa
Signing time: Mon 22 Aug 2022 19:17:16 +0000
ROA not before: Mon 22 Aug 2022 19:17:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:fc:db:e5:81:6c:6a:d9:0b:06:25:ce:dd:c8:ee:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 19:17:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22b66e448d9d123e87d91b6d498a5fd83c8bd3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:5f:34:93:b8:7e:77:7e:00:91:a2:44:e7:
39:e1:97:d7:56:c1:63:5c:4e:ec:f9:cc:ce:e4:05:
b8:c3:21:00:bd:35:5d:d8:ec:b2:8b:92:91:14:06:
ce:04:42:45:03:a1:96:47:ae:0f:20:ed:69:73:ad:
b5:59:93:1f:00:1b:38:87:d1:eb:d5:a9:01:2f:16:
09:be:a1:bc:af:75:37:5e:25:ff:5b:42:54:7e:c1:
cd:5c:74:60:79:2d:79:c6:fb:db:a8:03:1a:b8:ca:
fe:53:02:c1:92:c6:16:4e:05:aa:7b:53:c9:c4:97:
24:73:92:21:c4:34:66:f2:42:5e:e9:3a:73:e6:95:
5d:e5:91:2b:5a:70:4b:9f:0a:4e:2d:95:d8:2c:d7:
e0:9d:2f:99:93:db:6f:c2:c9:92:9a:cc:81:04:67:
de:19:46:39:93:43:e2:7b:42:31:3d:3a:7e:1e:bd:
00:a8:1e:2a:74:65:c6:85:bc:7c:63:9f:f9:99:0a:
71:01:ba:04:01:ee:f7:32:a8:48:26:ec:51:3b:2c:
ea:a7:15:98:41:c7:0d:ec:1e:f4:8b:3c:81:d5:f0:
90:6e:70:f8:48:c7:a4:b5:f1:8c:bc:6b:e2:fd:aa:
ea:cb:7f:2d:59:e4:03:95:30:93:43:02:1b:cb:b7:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:6E:44:8D:9D:12:3E:87:D9:1B:6D:49:8A:5F:D8:3C:8B:D3:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IrZuRI2dEj6H2RttSYpf2DyL07I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:2a:a0:43:7e:cd:93:b0:36:e9:83:86:cd:cd:b4:a8:6b:f2:
9c:74:c9:4a:02:07:b7:0b:05:f4:fd:2d:37:db:75:98:d4:86:
fe:ac:92:38:ba:6a:4a:95:cd:28:51:84:6b:2c:4c:b4:fa:2b:
14:a8:41:7d:21:95:00:57:71:02:29:86:86:c7:05:fc:0e:97:
f1:45:24:e8:a0:e1:1e:0e:0c:51:3f:0d:a3:4c:8b:40:00:8a:
c9:4e:3b:b0:d8:aa:0f:00:a2:e6:76:1b:c1:15:d9:7b:19:1f:
14:1f:64:ae:1b:1c:73:76:bf:13:27:fe:cb:ab:5a:84:e5:28:
d4:01:64:b6:8f:d2:16:0f:fc:0b:e0:5d:70:56:1d:42:ba:21:
a8:1d:11:09:7e:8a:69:23:71:98:e2:f1:52:5c:68:a7:06:34:
cc:60:af:6d:1f:3b:89:81:c2:5b:5b:3d:f3:7b:21:a5:04:42:
14:32:cc:5f:7d:2e:27:91:ac:3d:8a:b1:fb:ed:39:b5:b6:e5:
cc:48:33:83:12:65:72:9e:7d:19:ba:20:68:e2:c6:ae:d1:a4:
d4:4f:ae:b6:4a:22:f3:3d:da:9b:74:24:c5:a8:40:e1:d7:45:
5f:03:74:52:20:f5:1c:68:6c:ef:06:6f:b5:00:0f:e2:77:76:
a7:a2:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:12 2025 by rpki-client