Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iNn8BoCFGCq3G9ezT4lB7YL4eSo.roa
File: iNn8BoCFGCq3G9ezT4lB7YL4eSo.roa (raw, json)
Hash identifier: cAimH/l73y9rrI/AM00SC+L6QOu/bWPekVQ0JbXpBiA=
Subject key identifier: 88:D9:FC:06:80:85:18:2A:B7:1B:D7:B3:4F:89:41:ED:82:F8:79:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CCB31F282B1B03CBA9C4E6D5172666F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iNn8BoCFGCq3G9ezT4lB7YL4eSo.roa
Signing time: Sun 06 Aug 2023 21:13:58 +0000
ROA not before: Sun 06 Aug 2023 21:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:b3:1f:28:2b:1b:03:cb:a9:c4:e6:d5:17:26:66:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 21:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88d9fc068085182ab71bd7b34f8941ed82f8792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e6:6c:f3:f6:f7:38:13:ca:c5:09:a6:fd:31:
40:26:80:89:4b:bb:ef:19:d2:24:ad:24:64:4b:cc:
7d:b8:9c:d5:e2:cb:38:0c:8a:ac:aa:4d:09:09:47:
78:7c:aa:6d:3d:71:59:fe:84:de:7b:56:e4:2c:43:
4b:6a:86:30:1a:ac:4d:69:49:21:da:ad:a2:f6:c4:
b4:69:14:57:c4:fc:80:f4:76:99:22:47:c9:cb:99:
e9:66:56:6f:ff:9d:17:79:b5:b5:c2:37:58:56:d7:
80:9b:02:ee:23:ab:bf:71:be:e3:1f:fb:6b:8e:e6:
17:10:ea:88:87:4c:6e:fc:94:13:d0:e6:f4:18:c7:
8d:d7:b6:21:8d:0e:9c:20:be:e7:f5:2b:12:a4:63:
c3:b4:30:ae:60:7d:b9:71:10:95:cc:f9:f9:24:9d:
24:6a:02:78:4b:fe:8f:2c:54:0b:7c:47:5c:42:30:
b8:e1:c8:b8:3c:e2:53:01:e1:5a:e8:69:46:1d:aa:
a7:e1:06:c1:8c:07:76:e1:e5:ce:be:e5:9a:4d:6d:
d1:b9:cb:dd:97:d0:72:ea:26:aa:92:b3:a5:74:e8:
2a:ac:28:f5:91:e9:9a:60:08:ec:49:6b:de:6f:c3:
7e:0a:1d:f4:56:18:0d:ed:62:a5:08:10:f8:34:6d:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:FC:06:80:85:18:2A:B7:1B:D7:B3:4F:89:41:ED:82:F8:79:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iNn8BoCFGCq3G9ezT4lB7YL4eSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:af:6e:60:5e:21:f3:fd:cc:88:48:48:e5:79:7e:f6:95:65:
68:17:2d:ce:bb:25:ba:fd:48:25:8b:00:5e:d1:71:47:f7:79:
83:4f:d8:1e:23:55:a3:99:ac:08:69:ae:57:5f:01:f9:53:f0:
13:0d:d6:43:58:74:d0:7d:ba:a5:dd:83:97:d0:57:1f:d6:9e:
4b:38:d4:fa:68:51:29:6d:da:e6:74:06:74:0b:55:0e:e3:e5:
52:9e:d0:cb:de:03:7a:38:fd:ca:81:61:bd:d5:63:ac:9f:05:
ce:aa:ea:94:1b:7b:84:20:60:05:e4:7b:1a:c2:31:2d:fb:a3:
62:0e:05:4e:7a:d4:ac:c0:4b:88:c9:55:4c:a3:ef:c0:31:5a:
e1:a5:4f:a2:fe:b7:9a:e0:87:97:87:0f:f7:81:c6:e0:f7:0b:
2a:28:a7:56:0c:d5:04:81:b3:2b:72:0f:04:37:90:1e:36:32:
a4:6f:87:ba:f0:3e:f4:fb:77:92:26:da:8f:c9:63:97:87:70:
e1:1b:04:38:d1:40:45:c8:2b:4f:ac:e7:ab:2f:fd:a0:cc:30:
a3:ba:ae:f5:98:5c:85:ba:66:12:ea:d6:cb:15:3c:ad:34:a4:
47:d7:ef:bf:35:af:0b:13:3b:58:0c:c7:f1:8a:b8:02:e4:31:
d8:35:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:04:36 2025 by rpki-client