Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iaZSA3aSjNHAOzM5BdHv9ka9DAQ.roa
File: iaZSA3aSjNHAOzM5BdHv9ka9DAQ.roa (raw, json)
Hash identifier: OWquY0u+7I0CaZhgPFaRcsJDQtnGPOn9sURu+zMI4dQ=
Subject key identifier: 89:A6:52:03:76:92:8C:D1:C0:3B:33:39:05:D1:EF:F6:46:BD:0C:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189751E4C4CC20111DBDE79886E926049FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iaZSA3aSjNHAOzM5BdHv9ka9DAQ.roa
Signing time: Thu 20 Jul 2023 21:04:27 +0000
ROA not before: Thu 20 Jul 2023 21:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:189:751e:15c5/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:75:1e:4c:4c:c2:01:11:db:de:79:88:6e:92:60:49:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 21:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89a6520376928cd1c03b333905d1eff646bd0c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:5d:01:ab:88:c0:42:ab:c8:a4:ac:a1:43:
d4:c6:69:a3:fe:ba:ef:3e:74:3c:c9:50:2e:2e:ac:
01:ae:67:ec:bb:00:52:85:14:58:64:e3:5d:72:cd:
11:47:cd:72:49:be:7a:f2:89:ed:68:78:e7:19:fe:
cc:84:bd:54:0a:ef:98:70:2c:56:77:76:c9:b9:43:
04:9a:aa:24:41:4d:7e:33:80:66:a9:f0:b9:0c:49:
04:20:00:2e:cc:67:31:92:05:36:06:e2:41:84:ea:
0e:20:ab:8c:3a:67:15:45:d4:88:40:7c:df:ef:e7:
5b:f1:69:a2:41:ee:a2:f8:1d:6d:3f:d5:6e:e6:1f:
53:b5:8c:e3:eb:21:ec:e3:66:8b:e5:0e:a9:a2:6e:
2e:cc:e2:4d:dc:5f:ce:5d:f7:a4:2f:35:4c:8b:9e:
96:85:ce:96:4b:b3:0d:2a:1c:7a:ca:70:1a:fc:4a:
ab:83:e0:83:de:91:98:a3:02:f2:a1:49:8d:96:02:
30:59:2a:ac:b0:80:68:61:86:76:98:a3:89:5c:a9:
99:9f:4a:80:b4:5a:9f:ab:70:1e:50:5d:6d:8b:20:
bd:1c:b6:fe:00:b3:2f:c7:f1:f9:b8:34:f9:33:a2:
d7:e7:08:b9:2d:32:85:4c:bb:e5:2b:68:1a:71:67:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:52:03:76:92:8C:D1:C0:3B:33:39:05:D1:EF:F6:46:BD:0C:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iaZSA3aSjNHAOzM5BdHv9ka9DAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:5c:f2:90:77:3d:97:72:40:ef:4f:6f:1c:b9:83:b4:4b:66:
d6:ea:ce:ab:8d:7c:fd:13:fc:d3:89:36:8b:14:b6:0d:7c:91:
42:fa:17:47:cc:eb:26:69:f6:10:16:4b:fd:0c:e2:f5:43:d8:
3c:2d:59:c3:fc:c8:6f:30:c5:28:15:57:52:51:6a:1d:46:05:
33:f2:23:19:1e:c4:5b:e4:5b:fc:8b:f2:ee:43:de:e0:51:5c:
b1:93:29:df:ea:55:93:14:cd:79:cd:ef:fd:45:32:8d:88:41:
36:d1:7e:d3:36:62:13:e4:81:1e:db:93:e0:f4:22:4a:f7:ff:
a9:ef:e0:69:9c:56:e9:f9:1f:61:df:ad:28:a3:0e:03:55:d3:
c6:4a:0f:7b:f3:d5:9d:d3:de:80:2b:26:55:b7:81:14:2f:5e:
24:10:46:2e:49:46:13:91:71:7e:ff:4a:4c:6d:75:43:24:bb:
c7:87:87:36:bd:4c:b0:71:5d:25:4e:11:52:c8:0a:68:99:f2:
c1:8a:7d:78:b7:79:70:a0:47:df:8f:6a:be:63:5a:8d:e7:ae:
d4:aa:34:84:ce:23:f0:06:ef:ce:e3:81:9e:80:f8:1e:93:76:
4e:23:a2:6f:15:b7:a4:2f:3a:56:76:8c:74:98:26:86:24:c6:
e3:dd:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:41:36 2025 by rpki-client