Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CJY6aaBz_G69RgGroo_efgph4EY.roa
File: CJY6aaBz_G69RgGroo_efgph4EY.roa (raw, json)
Hash identifier: olqFX+tV9Ox/snJ6bYNIEX3jaNRUPCLrueEA24bomZY=
Subject key identifier: 08:96:3A:69:A0:73:FC:6E:BD:46:01:AB:A2:8F:DE:7E:0A:61:E0:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189796E6BC304494D4C7079A5EA2F37DB6B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CJY6aaBz_G69RgGroo_efgph4EY.roa
Signing time: Fri 21 Jul 2023 17:10:26 +0000
ROA not before: Fri 21 Jul 2023 17:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:6e:6b:c3:04:49:4d:4c:70:79:a5:ea:2f:37:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 17:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08963a69a073fc6ebd4601aba28fde7e0a61e046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cb:96:5d:f5:84:e1:35:a2:07:67:54:dd:39:
bd:f2:9c:ee:26:54:1f:c9:0a:4d:26:ae:fc:5b:02:
f6:2c:db:ea:ec:17:ec:0d:66:b2:fe:a1:59:e4:1d:
aa:e2:2a:ef:3c:f3:24:77:ee:29:4d:d5:fb:61:49:
38:77:ac:9e:38:33:51:20:d5:f5:d3:05:31:23:51:
86:6c:91:ac:ed:41:3d:26:e2:e7:67:5e:17:af:1e:
b6:95:7d:d5:72:5f:a9:ee:3b:36:cd:fe:f3:eb:14:
4a:fe:e8:56:40:46:4d:b5:f3:12:91:89:39:1b:cd:
63:3a:31:90:13:95:ad:2a:0f:52:fe:b6:58:ed:35:
85:90:bd:84:26:d4:79:b8:5c:11:06:60:1f:7e:30:
f1:14:49:a2:e7:92:54:9e:6b:96:5f:fe:ae:d7:95:
0d:78:8c:d3:1d:4f:fe:f6:04:17:32:ad:92:43:4c:
89:5b:43:c3:5d:f6:c2:fb:7f:75:da:45:ac:d4:c0:
57:63:cd:3e:f0:37:75:1b:cd:93:c8:9a:5f:32:1b:
78:10:71:4d:e7:9d:f7:9b:30:36:ce:a3:2b:13:3c:
f0:71:0e:25:f2:47:c5:f6:1e:70:d8:96:ab:03:9a:
43:7b:b6:14:49:10:5e:33:dd:da:c2:0c:c8:61:1f:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:3A:69:A0:73:FC:6E:BD:46:01:AB:A2:8F:DE:7E:0A:61:E0:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CJY6aaBz_G69RgGroo_efgph4EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:11:5f:a3:85:7c:6f:ad:b8:a6:9d:a8:e7:52:f3:48:85:e8:
16:42:a9:6b:36:f8:ce:e4:e7:29:6b:e6:58:81:be:d1:55:76:
86:16:6a:01:cd:e3:78:91:ef:e3:4d:6c:db:7a:17:b5:15:62:
09:c4:36:bd:36:34:fd:02:c4:4a:43:73:61:c6:c6:55:3b:99:
e1:4e:42:05:62:58:9b:57:7a:bc:92:d7:a1:b1:ca:f6:c7:2e:
c9:6c:f0:be:5d:91:8c:cc:04:06:9d:f8:87:a9:31:56:ac:4f:
b7:59:bc:fb:c0:84:a3:c6:cd:7b:46:3d:f7:78:b1:0a:8a:e7:
a5:9f:4a:54:62:01:85:31:1e:33:ef:6d:62:fc:77:86:6d:ff:
97:e3:3a:fa:1f:62:d0:a1:9b:ca:f9:c4:d3:42:43:ad:20:21:
b2:32:4e:f6:62:2d:9c:c9:46:c5:bc:31:25:7f:03:a3:7b:11:
89:30:99:b8:2c:4e:15:c4:8d:3c:be:14:a1:2e:d4:91:7e:13:
9c:b0:2f:98:da:a8:5f:7d:e0:4c:87:b6:b4:29:44:8e:b4:ac:
ff:d5:48:18:24:2a:56:86:d2:8f:7a:83:9f:21:1c:91:68:47:
27:7d:d4:61:38:b3:1a:76:d7:f8:0c:24:ef:8f:c3:f7:74:40:
73:cf:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:34 2025 by rpki-client