Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2JD1QPNEsVdRSQGNAb52dvFA8Ao.roa
File: 2JD1QPNEsVdRSQGNAb52dvFA8Ao.roa (raw, json)
Hash identifier: /jzooh/H/AZTxccmqbYgpKTFiBbxuztgmaRdukMvjOk=
Subject key identifier: D8:90:F5:40:F3:44:B1:57:51:49:01:8D:01:BE:76:76:F1:40:F0:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018932686A83F5F956752CECAA4A55869D29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2JD1QPNEsVdRSQGNAb52dvFA8Ao.roa
Signing time: Fri 07 Jul 2023 22:10:51 +0000
ROA not before: Fri 07 Jul 2023 22:10:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:32:68:6a:83:f5:f9:56:75:2c:ec:aa:4a:55:86:9d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 22:10:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d890f540f344b1575149018d01be7676f140f00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:33:56:29:31:53:47:bf:f1:44:7d:97:f8:
94:7b:63:a3:2e:64:8b:18:9d:a3:c9:c5:d9:fa:51:
ad:a1:aa:5a:4f:fa:fa:b5:db:a6:6d:ca:ae:eb:67:
da:bd:c3:3d:a7:a6:d0:af:8d:95:09:a2:53:22:aa:
11:00:92:c1:f4:70:8e:f1:77:0b:be:80:8c:2d:f0:
1e:59:2a:57:bf:43:ec:1a:ad:a5:a6:26:3b:c2:29:
1a:a2:6c:c5:7c:96:8c:4b:76:8a:14:fb:15:03:d6:
8b:bc:b6:bd:54:28:43:b2:35:46:34:81:3d:b4:7c:
87:ee:bf:de:06:68:eb:9c:e8:a1:d1:d9:c2:b7:bd:
a6:c2:a5:8a:34:83:a8:ae:97:fb:27:66:68:c1:18:
ba:96:81:ea:73:dd:f8:4a:3f:46:6b:14:da:ae:4a:
29:67:51:da:01:ce:55:a7:68:10:22:1b:a9:37:8b:
63:40:30:5d:06:96:8d:03:61:91:62:20:34:10:9c:
de:c8:d1:37:87:c5:50:66:b6:1c:23:bd:12:50:0c:
f6:f4:57:bf:10:84:b9:3f:3b:0b:d5:13:47:b9:fa:
e9:bc:05:48:56:6c:70:e7:95:a2:4f:48:bc:aa:11:
b5:80:2e:f4:96:9e:e0:82:7d:29:6d:96:cf:b3:e9:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:F5:40:F3:44:B1:57:51:49:01:8D:01:BE:76:76:F1:40:F0:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2JD1QPNEsVdRSQGNAb52dvFA8Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:a3:7a:0f:3b:ad:4c:e9:ae:c9:5f:58:36:67:35:49:7c:c9:
48:cb:65:7d:18:90:68:c5:5e:3a:9a:51:99:91:cf:18:c2:4e:
d5:f1:99:6c:85:a2:d8:f2:32:c1:11:e8:65:b4:b4:35:ea:5a:
81:e4:af:0a:1c:21:74:74:0e:2b:e3:70:ad:7e:b1:d9:f9:d0:
d0:07:35:02:84:2f:74:13:38:52:d6:d5:8e:9a:dd:27:6a:bc:
a8:df:32:0a:40:73:7f:c4:6b:86:fc:8c:3f:3a:11:06:33:39:
ea:4e:6f:4b:fb:af:36:cd:3e:5e:d7:7b:b5:c1:d8:e8:a3:6a:
70:a4:93:d2:7f:fa:2b:74:d8:2b:91:19:fe:48:c0:d7:e6:f7:
79:3f:c0:24:98:da:f2:db:4a:2b:f5:20:ae:36:a5:55:ee:a5:
41:a1:b3:4a:3c:96:71:9e:83:ce:ef:df:6c:8c:01:5e:a2:48:
4c:53:3d:cf:f4:fe:f5:d0:91:66:fd:60:2e:37:d6:34:5c:d4:
12:2e:a5:c6:16:50:04:38:31:93:52:fd:90:45:03:ec:94:5b:
e8:46:3e:36:24:61:e5:6c:3f:a9:a0:2d:af:04:a0:be:66:61:
e2:0c:28:cc:11:d3:f2:90:e6:bd:66:c7:47:27:aa:ba:44:7d:
05:69:b3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:01 2025 by rpki-client