Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2JC4dZ_skDvUUpKMnj0sPT7veH8.roa
File: 2JC4dZ_skDvUUpKMnj0sPT7veH8.roa (raw, json)
Hash identifier: 6K6mjK7Mb7NlA9j0w7M2O+003nS/h06820YHhZDtuEY=
Subject key identifier: D8:90:B8:75:9F:EC:90:3B:D4:52:92:8C:9E:3D:2C:3D:3E:EF:78:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189913A570305AE72A312E38F045B871967
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2JC4dZ_skDvUUpKMnj0sPT7veH8.roa
Signing time: Wed 26 Jul 2023 08:04:26 +0000
ROA not before: Wed 26 Jul 2023 08:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:189:913a:1f4b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:3a:57:03:05:ae:72:a3:12:e3:8f:04:5b:87:19:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 08:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d890b8759fec903bd452928c9e3d2c3d3eef787f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:22:2f:48:b4:46:9a:aa:24:e4:6f:71:dc:
bb:53:08:c9:6e:bb:84:87:ea:6e:03:51:8c:2f:b4:
c5:ca:11:4d:9a:e2:7f:bd:1a:6c:7d:e8:fc:06:dc:
d5:32:4a:a5:10:97:81:c4:66:d8:0b:48:e8:62:e2:
8c:d0:18:ad:b9:84:09:2c:7c:d3:ca:65:cc:b9:70:
3d:f1:cb:24:f9:d5:5f:2b:cc:cf:89:e4:b5:ec:58:
0a:85:0d:ac:a9:47:c3:0d:35:5d:66:9b:cd:df:21:
16:84:18:05:c7:e5:6a:0b:ba:f0:df:ed:60:c5:08:
1b:89:21:67:d2:07:26:3d:cb:f1:41:eb:f0:07:5d:
47:dd:6a:58:1e:8e:72:1d:a6:b3:63:00:8e:f8:2a:
65:57:ea:2e:c5:0b:8b:b8:62:60:6f:00:b7:02:14:
e8:b2:7f:72:65:49:81:2e:0a:8d:7b:a7:35:35:ba:
f7:db:5d:88:cb:8d:91:a2:57:3d:0a:26:4a:a5:b6:
d5:a8:ce:6e:ab:d3:d3:22:1e:3f:f3:b9:d1:9c:47:
d6:04:0c:06:89:66:3d:5d:6d:8f:6a:94:ed:a1:17:
5a:d8:5a:c6:93:09:67:c8:b8:20:17:3f:4e:9b:74:
a8:d5:06:45:65:01:29:f3:25:a1:30:c3:e3:68:da:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:B8:75:9F:EC:90:3B:D4:52:92:8C:9E:3D:2C:3D:3E:EF:78:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2JC4dZ_skDvUUpKMnj0sPT7veH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:88:69:6f:4b:9b:25:a1:43:7e:1e:89:b0:4f:6b:8a:68:c3:
4a:e2:00:e8:ef:7d:f5:da:78:28:06:ae:eb:c1:5c:4a:29:99:
91:05:62:28:61:78:e0:40:a5:1b:ed:a7:d1:85:b7:54:f0:9a:
f3:db:95:cc:4d:0d:b1:55:02:76:6a:40:71:8c:d5:c4:76:23:
22:1a:9d:97:46:d1:22:83:e7:d7:24:e5:8f:3d:7d:ba:5f:8a:
e1:21:9f:de:16:69:b6:4e:8f:e0:d4:2b:eb:85:bb:9b:4b:8d:
75:e0:0c:00:f3:a3:65:7f:89:4f:a5:bb:7a:97:8e:a8:23:6d:
76:34:2e:41:5b:f8:f1:fe:5c:49:8c:1b:bc:a0:31:57:9e:50:
e6:b5:8c:e8:7e:50:a1:ce:a1:c2:0f:2b:e4:52:eb:5f:ae:b4:
d5:86:a9:9c:cc:d6:a2:e2:fd:ad:a8:12:ed:e4:39:af:72:59:
f6:21:f5:78:c3:90:82:b1:a2:69:98:71:aa:81:93:eb:5d:aa:
8d:b2:c5:28:fb:81:c8:46:f6:ad:a5:18:bd:fb:8e:6a:09:31:
fa:67:70:47:a9:74:02:3f:04:96:95:0c:ba:28:92:b3:ce:45:
34:ca:24:d8:9e:18:bd:83:aa:ab:c0:9e:74:e8:98:ec:59:7a:
4b:23:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:47:09 2025 by rpki-client