Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/il-vuFI_G3RdpkWhP56FSUOWGwQ.roa
File: il-vuFI_G3RdpkWhP56FSUOWGwQ.roa (raw, json)
Hash identifier: pGT72YMfGoAQeJBEqqvwUoh/cvNHpLA4lcW1HZJJpq4=
Subject key identifier: 8A:5F:AF:B8:52:3F:1B:74:5D:A6:45:A1:3F:9E:85:49:43:96:1B:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 89311C5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/il-vuFI_G3RdpkWhP56FSUOWGwQ.roa
Signing time: Thu 02 Jun 2022 04:06:20 +0000
ROA not before: Thu 02 Jun 2022 04:06:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:2297:3609/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301697115 (0x89311c5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 04:06:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a5fafb8523f1b745da645a13f9e854943961b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:f4:df:b6:d8:9b:53:78:41:b7:46:15:7b:
6d:dd:b2:63:fa:a0:aa:22:01:5f:66:19:1b:c7:6a:
e9:bb:a4:d6:e8:71:e9:f7:c1:88:fe:25:ed:b5:60:
91:2b:6f:0a:b9:6d:9f:f5:c4:e8:6c:b3:65:f2:8c:
e7:6a:06:4b:0f:2a:d3:86:cf:f3:4a:b9:ab:49:e3:
b0:35:87:2a:bd:ac:f9:0c:94:01:e9:5f:ec:f3:c5:
2a:f3:75:19:27:c7:cc:d5:1f:b6:19:eb:ed:47:2b:
7e:47:59:8f:63:55:38:b3:fe:b6:3d:47:83:5b:57:
3e:22:87:8e:fb:2f:cd:e1:73:a1:a8:99:df:30:bc:
db:81:a0:cb:69:83:3e:f1:1c:40:a4:ef:7d:7f:a2:
62:6c:35:a4:38:10:9e:a4:e3:5d:0f:2a:55:84:a8:
58:84:62:be:c7:ba:c0:3b:83:e1:dd:11:9c:01:c6:
71:6a:21:bc:8a:3d:97:fd:a6:c1:1c:0a:e8:25:1b:
65:27:39:b8:9d:ed:96:13:d0:1b:8d:60:25:93:5b:
f0:75:1e:9b:42:03:9f:e5:82:4b:fb:12:9b:ee:6d:
72:a5:01:a1:17:f3:66:5f:b0:cc:dc:19:6e:8a:48:
33:25:81:87:e8:d1:9f:cb:f2:91:a2:0b:64:bd:7e:
62:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:AF:B8:52:3F:1B:74:5D:A6:45:A1:3F:9E:85:49:43:96:1B:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/il-vuFI_G3RdpkWhP56FSUOWGwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:a7:11:2d:cb:60:3c:65:aa:bd:9d:8c:fb:02:03:a9:2b:5f:
cf:aa:8a:b2:3d:04:94:bc:ab:72:66:75:4f:52:c6:40:94:d6:
58:3d:a3:33:30:d8:ba:c5:34:f0:db:fb:72:85:e8:0f:65:b9:
44:0c:f9:8d:a7:a5:04:a0:27:ad:2f:98:f3:5b:2d:02:87:68:
42:f2:9c:7a:66:48:5a:82:07:9b:35:e1:7a:3c:f1:c8:82:9b:
ab:85:d4:56:00:fe:6b:1d:46:61:60:3f:2a:8c:41:67:0f:bc:
9f:e7:39:57:45:a2:dd:cd:31:81:03:66:96:19:b3:5a:6e:30:
f2:f7:d7:f0:76:bf:8f:e3:54:2b:12:d8:91:db:1e:0e:ae:ae:
5e:7b:4b:c9:20:ed:77:38:6b:7b:6b:ba:f6:49:30:45:8d:60:
5c:d2:1a:eb:ca:df:29:d2:68:83:9e:23:63:7d:72:bd:42:19:
71:b0:45:0b:90:4b:08:ee:1a:30:e7:40:fd:9f:ad:cc:f3:be:
13:2f:b2:d2:37:56:c1:20:7b:b8:3b:ef:09:15:64:b3:d2:b7:
b8:44:0d:f6:66:17:28:62:aa:71:ba:af:2a:ca:85:d2:b5:e1:
d9:85:49:45:6b:02:36:b0:2f:47:40:70:6d:0a:8f:16:d1:a9:
a6:24:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:57:12 2025 by rpki-client