Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ClhJxpISU8yU_RAKkafUe0JU4oY.roa
File: ClhJxpISU8yU_RAKkafUe0JU4oY.roa (raw, json)
Hash identifier: jM5QAAapDPZiZjXp+EFQEx2t2ulFtnKwfRVLCr7MLeM=
Subject key identifier: 0A:58:49:C6:92:12:53:CC:94:FD:10:0A:91:A7:D4:7B:42:54:E2:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E90E32650DE0E6F799E97A0AAB760E20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ClhJxpISU8yU_RAKkafUe0JU4oY.roa
Signing time: Thu 16 Mar 2023 06:14:27 +0000
ROA not before: Thu 16 Mar 2023 06:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:0e:32:65:0d:e0:e6:f7:99:e9:7a:0a:ab:76:0e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 06:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a5849c6921253cc94fd100a91a7d47b4254e286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:ef:80:6d:a1:93:fd:2d:1e:6f:50:88:0a:
77:e4:ee:4d:ea:1a:29:02:64:29:e1:90:68:3e:63:
77:7c:25:cd:18:bd:07:08:d2:47:ac:ad:1a:8a:dd:
09:ea:f3:8b:49:58:a6:e5:69:8c:83:f9:53:cc:ad:
64:80:53:23:d5:57:3b:e5:91:6c:47:cf:b6:be:b0:
e6:d2:89:31:88:d5:f7:9b:7c:4f:87:ce:ea:d1:9f:
75:ce:4a:15:91:41:d5:27:9a:40:b9:ea:5c:4f:2c:
46:b9:e9:0c:47:5f:79:b1:31:b2:7c:63:cf:0c:3d:
27:f8:17:82:09:65:c1:b2:72:ca:9c:99:00:5a:aa:
5d:50:ed:37:c4:46:ab:59:91:46:5c:ab:ef:47:7c:
ca:c0:ab:84:8c:c3:dc:41:fe:9c:0f:74:45:51:3f:
6d:66:46:4c:5c:a5:06:e2:90:e1:31:28:24:a5:c4:
56:8f:3f:0f:c9:6f:06:92:bc:ab:6e:05:2b:a5:51:
60:7d:29:f8:56:bc:94:dc:08:73:73:91:0f:9a:bd:
86:2a:78:55:af:32:a0:7a:93:f1:e8:fa:12:9b:af:
79:c5:8d:19:d7:d6:65:23:0b:e4:24:93:e7:d0:8f:
b2:45:eb:73:c7:b3:fc:dc:a7:b4:50:76:0d:ba:c7:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:49:C6:92:12:53:CC:94:FD:10:0A:91:A7:D4:7B:42:54:E2:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ClhJxpISU8yU_RAKkafUe0JU4oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:24:ac:42:94:f8:df:7c:b5:6d:66:c9:11:5c:e5:23:70:b3:
7a:e0:58:5f:13:ad:ed:65:fb:ad:7e:75:54:f6:f8:fc:8c:dc:
28:8e:bf:46:36:3f:74:19:ad:65:f3:45:df:24:86:a5:c6:e8:
a4:b8:54:9b:29:9b:19:ab:82:f4:95:21:b8:59:d3:98:6f:b4:
cb:16:2d:b1:1b:ec:45:06:a8:6b:5e:b3:67:e2:7a:0f:3b:7c:
aa:0c:55:92:92:03:5b:aa:a7:4b:8f:57:da:84:65:2a:7a:28:
38:09:8e:5e:10:d9:e3:ef:c9:fd:a9:fc:9b:86:b9:f6:0c:8f:
48:e4:c9:7a:ee:8f:20:32:4f:66:8f:08:28:04:90:3b:3f:18:
93:5b:a3:0c:f4:27:e3:04:46:91:6d:6e:22:4e:2b:72:8e:d6:
6a:1f:03:79:02:65:f2:a4:3f:c4:00:db:95:9d:49:40:20:bc:
35:9a:08:54:66:e7:b5:75:82:bc:f8:3c:f1:03:1a:ce:eb:66:
91:ff:02:ce:bb:6c:1b:9e:73:c1:15:b8:52:ca:19:3f:20:60:
cd:59:74:6c:e5:85:1c:9d:1b:f4:d6:aa:46:76:07:87:96:e3:
a3:12:54:42:4c:16:f4:25:76:e3:2b:10:e3:9e:63:16:ba:51:
2a:3e:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:05:48 2025 by rpki-client