Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CjERM7Am8B8FytusDH-hShvfyiE.roa
File: CjERM7Am8B8FytusDH-hShvfyiE.roa (raw, json)
Hash identifier: I5IysldG+5vQtqVy1hpy1DUptoYv+zl59KJDM7HjGCI=
Subject key identifier: 0A:31:11:33:B0:26:F0:1F:05:CA:DB:AC:0C:7F:A1:4A:1B:DF:CA:21
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C0B1F7AEBC367F04A8820EE70344A55D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CjERM7Am8B8FytusDH-hShvfyiE.roa
Signing time: Thu 27 Apr 2023 03:11:41 +0000
ROA not before: Thu 27 Apr 2023 03:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c0:b1:f7:ae:bc:36:7f:04:a8:82:0e:e7:03:44:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 03:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a311133b026f01f05cadbac0c7fa14a1bdfca21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:a3:30:14:9a:87:e2:2a:b5:88:4b:93:75:
ae:78:74:51:02:2e:11:94:c7:6f:8f:7c:d5:f8:56:
81:f8:c5:8a:9e:e8:36:48:0e:1d:eb:86:c9:b2:37:
b6:c4:53:fa:6a:a5:c0:29:6a:e4:1f:03:6f:60:16:
b6:eb:9a:d6:16:9d:87:32:67:eb:9f:6f:41:8f:33:
ff:b2:93:c5:34:86:18:77:54:61:d9:e9:bb:b3:a3:
33:f9:83:ce:fb:2e:d4:95:01:40:8f:58:38:9a:9b:
e6:e8:8b:c8:e4:be:ff:9d:c7:57:6d:f1:94:c5:8f:
b3:8e:d9:5f:c2:eb:57:0b:c4:bb:3d:97:95:2c:1a:
72:1d:63:b8:38:05:c0:e2:bf:72:67:50:1e:40:ab:
49:8e:d8:59:54:09:67:90:50:03:b0:27:f7:d3:c2:
bf:bf:c2:69:1b:b7:58:b4:46:9c:c3:fb:6b:fc:d9:
a2:bb:0e:d8:d3:5e:0f:cf:e6:5f:c2:6d:72:50:56:
0c:03:3e:15:31:b1:7b:bd:aa:38:d0:48:c4:f8:5a:
66:5a:8e:55:5a:b9:ff:1e:49:26:45:9d:e0:49:ce:
40:50:b6:91:27:32:49:2c:47:b0:23:03:da:6a:23:
75:3c:8c:d6:4e:0b:17:b3:b6:01:c9:e8:e3:1f:db:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:31:11:33:B0:26:F0:1F:05:CA:DB:AC:0C:7F:A1:4A:1B:DF:CA:21
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CjERM7Am8B8FytusDH-hShvfyiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:ad:28:30:63:82:06:b5:21:09:de:78:b5:6c:0e:6d:a9:16:
ea:88:15:4c:a0:16:93:5d:44:97:b8:9d:c6:7b:8d:7a:67:13:
f2:2a:a1:41:f9:cd:e5:e0:89:7f:9a:a1:04:d3:5b:5c:4b:52:
da:60:4b:4b:a6:57:8b:02:87:9e:5f:fb:0e:d4:e1:a2:68:aa:
95:59:4f:2d:eb:af:42:af:6a:90:73:10:1a:a2:81:27:d7:3e:
3c:0f:0d:11:ff:09:31:23:a5:ef:7f:8a:37:82:3a:22:33:1a:
36:aa:79:fd:92:ae:24:b4:76:21:23:5d:e8:97:f5:78:dd:16:
94:fc:40:9c:1a:1d:7e:f8:ee:51:de:81:12:28:9d:19:e4:6f:
0f:46:7a:58:e6:9a:4c:15:84:63:46:a7:77:80:f8:8b:f0:e1:
e9:72:ed:d1:4f:85:07:1a:a6:b7:c4:30:33:36:14:61:a3:d7:
dd:b1:15:4c:bd:15:9f:52:07:e6:78:1c:25:5d:6a:82:3e:91:
80:71:6d:15:4c:f3:e7:03:33:0e:de:aa:f6:62:70:68:22:3e:
ae:ee:c0:1b:0c:c6:eb:0c:85:40:b0:16:0d:4a:e4:cc:52:45:
a4:04:a3:5b:e6:f1:80:52:85:17:b7:fd:dc:e7:89:49:6e:b4:
27:cd:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:58 2025 by rpki-client