Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ioTW4TOR3ochTDAP95I3WpdwNMo.roa
File: ioTW4TOR3ochTDAP95I3WpdwNMo.roa (raw, json)
Hash identifier: 113lavufdZV1M7wIIGEf/vYkBH1/Ng3hS8bt7QjeF58=
Subject key identifier: 8A:84:D6:E1:33:91:DE:87:21:4C:30:0F:F7:92:37:5A:97:70:34:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185EA55DB2F9A6FF2348BAE9C0FE5148317
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ioTW4TOR3ochTDAP95I3WpdwNMo.roa
Signing time: Wed 25 Jan 2023 19:09:33 +0000
ROA not before: Wed 25 Jan 2023 19:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:55:db:2f:9a:6f:f2:34:8b:ae:9c:0f:e5:14:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 25 19:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a84d6e13391de87214c300ff792375a977034ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:83:db:38:d3:56:7a:44:8b:90:c0:62:63:0b:
4b:8a:fb:0f:4e:ba:fe:37:99:2b:4b:50:98:53:20:
17:45:15:ca:7d:bc:08:e6:25:8c:6b:1c:5d:bf:a3:
2a:89:93:fb:88:43:dc:ed:1e:11:0b:e4:9a:04:a6:
96:d8:70:60:72:f7:ca:9c:bd:52:55:90:ca:50:23:
20:63:c2:6c:2e:d8:cc:3b:54:18:f7:6d:69:65:79:
d6:9d:ad:77:6e:b8:11:b6:58:b2:da:46:a1:aa:15:
6f:66:6a:b1:08:f2:ee:43:60:f1:e9:69:49:3b:29:
68:75:3d:aa:c3:c0:0d:8d:42:d8:43:d6:57:43:32:
7d:3f:e7:48:38:18:16:e6:72:7a:bb:22:2e:6a:70:
01:5d:42:6a:44:39:f6:66:f9:47:8c:cc:f8:0c:93:
e8:f9:84:ce:7e:76:85:ae:52:a7:f8:0c:89:88:d3:
b9:d6:d1:b3:c0:25:7c:87:4f:a7:cc:5e:dc:0c:c5:
72:81:2c:88:2c:6c:3d:c9:44:ea:db:31:70:77:fa:
e7:c5:f5:fc:4a:93:6f:b3:3a:d3:cf:9a:9f:bb:a1:
f9:07:09:aa:b8:0c:b2:a8:9e:82:01:82:fc:de:97:
ed:90:47:78:9a:e8:33:df:71:5c:56:19:b3:f4:eb:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:D6:E1:33:91:DE:87:21:4C:30:0F:F7:92:37:5A:97:70:34:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ioTW4TOR3ochTDAP95I3WpdwNMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:f9:ee:db:bb:27:a9:5d:c9:40:b4:8e:86:ef:27:61:21:68:
82:31:8c:ae:f8:5d:ef:1e:2c:d8:2b:ff:99:ef:61:64:1b:b0:
1b:9b:0e:96:7d:66:11:da:57:74:4c:80:13:f6:67:37:0c:69:
89:b3:17:17:85:ac:f8:63:48:f1:d2:9d:45:60:6b:5a:01:15:
10:3c:9e:bd:8d:87:f5:cb:a9:a7:0a:27:88:00:af:73:2d:81:
d9:30:42:9a:de:7d:21:b2:ef:8f:49:59:78:dc:87:fe:03:31:
07:1e:0a:df:2f:bf:57:69:3b:65:c8:e8:73:03:eb:7c:f8:d8:
c0:f2:78:8f:49:13:5b:a0:98:10:dd:63:29:75:ac:c4:d6:2b:
c2:24:25:68:42:89:e9:e5:8c:49:f8:34:6a:ae:be:80:19:62:
91:79:74:49:12:de:27:ca:02:b5:9f:f2:84:93:f4:fd:b2:58:
08:71:e4:9e:b0:07:41:93:7d:37:fe:00:85:3b:76:b0:61:77:
82:f6:53:73:42:f8:e8:49:78:8e:4d:82:6a:d8:4b:50:fe:5e:
2d:08:aa:cd:0b:2c:77:f1:a9:d8:83:b1:6a:5d:95:54:c7:77:
55:83:20:4c:bc:bf:71:e0:cf:91:88:8f:5d:29:93:1e:67:68:
62:6b:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:24 2025 by rpki-client