Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CJA7K5qr6CfIZeQRx2jKimI49gI.roa
File: CJA7K5qr6CfIZeQRx2jKimI49gI.roa (raw, json)
Hash identifier: 6qRASdTm2zoCc+WNSgTXfQQo/MyR1lD8V/OCZJmuGKc=
Subject key identifier: 08:90:3B:2B:9A:AB:E8:27:C8:65:E4:11:C7:68:CA:8A:62:38:F6:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187296DB9EAAEBDB4B9B08E8FE820710C6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CJA7K5qr6CfIZeQRx2jKimI49gI.roa
Signing time: Tue 28 Mar 2023 18:14:29 +0000
ROA not before: Tue 28 Mar 2023 18:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:29:6d:b9:ea:ae:bd:b4:b9:b0:8e:8f:e8:20:71:0c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 18:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08903b2b9aabe827c865e411c768ca8a6238f602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:3d:58:a2:33:f3:16:3c:f1:d6:f1:5f:62:
7e:08:1d:4d:87:ab:78:69:12:cb:38:49:da:a3:d6:
4e:cb:63:eb:7b:51:cd:3b:7b:f4:eb:d9:54:b0:90:
b4:d6:cd:30:5e:ee:4b:08:e8:77:9e:ed:f5:21:62:
e9:33:94:5e:54:63:af:70:9f:5b:74:74:ac:68:73:
2f:04:44:d6:80:9e:15:97:56:fc:f3:a3:9b:f0:09:
eb:b9:54:c9:b0:9d:0f:91:2c:a1:f2:86:8f:b9:90:
c6:59:da:f8:26:cf:c6:7a:5b:52:f7:ff:4e:eb:83:
75:60:48:12:3f:a2:8b:97:38:01:0c:da:af:aa:31:
a6:39:05:aa:e4:3a:cf:ac:6a:91:33:e5:da:d3:43:
73:26:4a:8a:c6:d8:26:01:0e:f9:e2:df:cb:ba:69:
9b:1f:11:6e:ea:2a:35:be:06:16:51:13:21:6b:78:
ea:32:78:0c:1b:08:a3:7e:74:33:04:66:82:7c:f4:
74:1a:01:00:97:40:d1:b4:49:4e:0c:a7:14:82:22:
6c:2d:de:13:33:bf:e6:52:08:30:4f:2c:99:85:90:
e8:00:18:e1:2a:1e:7b:c6:26:d0:48:b4:ae:26:cb:
4f:88:81:fc:eb:a8:4b:0a:38:98:de:16:fb:2c:db:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:90:3B:2B:9A:AB:E8:27:C8:65:E4:11:C7:68:CA:8A:62:38:F6:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CJA7K5qr6CfIZeQRx2jKimI49gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:95:ce:21:a3:35:67:32:22:bf:62:ee:c9:8b:05:18:8c:22:
32:10:2a:10:57:1f:2b:dd:ac:10:c1:00:a2:e4:58:12:d2:c8:
2a:3f:dd:b3:ad:f6:3e:cc:a8:cb:48:07:5e:87:13:a5:d6:bb:
fa:ec:3e:77:17:1c:6a:26:c0:4f:ad:7a:d9:75:25:ea:06:b7:
7a:3f:4d:b0:28:39:c0:1c:df:6a:7f:bf:dd:e2:c8:13:89:50:
ad:44:95:ff:4e:20:93:b0:de:22:83:3a:c5:7e:8f:0b:4b:41:
a5:68:d5:a0:25:b1:16:0e:51:c3:88:5b:91:17:f4:65:73:f0:
c5:b5:71:c4:f6:f9:4d:59:50:ce:0c:04:08:e8:6f:21:a2:ac:
98:11:c8:93:9f:3f:c1:ba:6b:93:a8:a6:62:df:ff:93:3f:b7:
f2:2e:2d:d9:c8:03:63:77:14:e8:68:82:90:0a:49:05:17:0b:
59:c1:43:4b:e9:38:70:aa:fe:95:31:aa:d4:ef:5f:95:22:65:
14:d4:d8:d1:52:49:00:e7:ad:18:e0:69:08:28:e8:10:f2:11:
7e:df:60:e7:99:f7:89:15:86:76:bc:19:63:54:28:77:74:1b:
98:72:92:ac:a6:1d:67:b7:29:94:23:e8:61:01:9f:f9:6d:27:
98:5e:8d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:12 2025 by rpki-client