Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ifWNZJB9ssc2hRqkUxoVSkHLkmg.roa
File: ifWNZJB9ssc2hRqkUxoVSkHLkmg.roa (raw, json)
Hash identifier: MVpi5Pwuc7IlNoj3BWnvhdvpt3DutE/SjHjIRSk1Cw0=
Subject key identifier: 89:F5:8D:64:90:7D:B2:C7:36:85:1A:A4:53:1A:15:4A:41:CB:92:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7095FDAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ifWNZJB9ssc2hRqkUxoVSkHLkmg.roa
Signing time: Mon 07 Mar 2022 21:10:35 +0000
ROA not before: Mon 07 Mar 2022 21:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888877996 (0x7095fdac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 21:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89f58d64907db2c736851aa4531a154a41cb9268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:32:63:21:a4:e0:41:90:47:65:a1:91:49:
0f:ba:78:5a:05:e6:03:e3:b2:eb:f1:83:e6:76:54:
f0:73:35:96:82:6e:88:45:bf:8e:06:0f:54:04:75:
82:15:24:12:3c:53:e9:98:3a:ba:98:80:84:8a:84:
1d:03:e4:0d:12:9d:04:91:11:1a:94:2d:4a:da:41:
ec:04:0f:01:32:1c:b2:b2:6d:99:fd:80:52:8e:11:
f0:7e:36:01:11:e9:3a:64:d1:0b:5f:ff:e3:62:1c:
5d:48:da:a9:36:a5:dc:02:af:16:b9:e0:2e:a9:c6:
ff:8e:74:c6:2b:9a:f0:a7:bc:5a:4c:9d:49:58:63:
e5:ee:43:4d:55:01:93:32:94:b1:15:2e:cf:0a:52:
61:41:8a:67:1c:34:93:37:e9:cf:91:b0:f9:5f:3e:
da:cf:3c:85:d1:90:39:1a:cb:e1:8c:d6:4c:a4:62:
c2:a6:3d:1e:8b:17:fa:3e:93:ea:53:42:22:c2:8a:
82:61:be:79:c9:ec:6c:e6:2b:1f:2a:0e:29:1b:8c:
9f:f1:2d:36:9a:e3:2d:40:ba:c3:2f:8d:94:29:52:
c9:be:92:4b:18:53:bf:c3:3b:60:d4:b4:65:26:a2:
72:91:42:29:3d:27:91:ea:27:8e:d1:8b:70:ae:34:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F5:8D:64:90:7D:B2:C7:36:85:1A:A4:53:1A:15:4A:41:CB:92:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ifWNZJB9ssc2hRqkUxoVSkHLkmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:51:bd:5b:4f:11:3f:8f:cc:2e:07:f5:43:23:b5:7b:7b:e8:
80:a3:77:eb:e2:03:0f:9e:c3:99:b7:57:a6:e3:84:82:ee:89:
93:fb:fa:20:f5:0d:3b:7e:6e:c9:b1:e3:24:1c:c9:f3:39:d6:
b2:aa:2d:89:1d:d5:b6:64:bf:9b:b2:9e:23:78:61:a3:f3:14:
d2:5d:f5:ac:37:8f:b2:d9:81:0b:49:e8:64:d6:d2:98:5b:9c:
8a:a5:41:69:72:95:bb:73:e3:22:66:50:92:c9:2a:90:59:32:
c7:79:8e:ff:8a:a7:74:83:f1:95:49:ad:27:57:02:da:03:c6:
d0:3e:8a:cf:c3:cc:a6:f5:3b:bf:07:d5:53:a9:82:09:85:42:
8a:fd:69:90:1b:e9:05:52:4f:63:38:22:9a:85:d6:ca:f0:37:
6c:53:5c:72:89:9c:8a:39:28:e6:9f:8a:9a:ba:49:d2:ab:9a:
53:79:3b:4d:0d:ca:16:87:a6:9f:a5:02:08:b3:e2:3b:a5:91:
50:a1:f0:d0:53:ea:4b:ad:84:75:66:62:22:3e:3c:be:92:ff:
f9:4b:e1:6b:d2:55:c6:3c:ef:25:f5:de:a4:f7:54:c9:24:68:
4c:8b:81:c1:1c:a0:68:c4:9a:c4:ce:f9:28:40:62:90:a5:e5:
3a:64:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:21:49 2025 by rpki-client