Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1Hfrg0WpXg7mfL7vWskLNYbjDA.roa
File: J1Hfrg0WpXg7mfL7vWskLNYbjDA.roa (raw, json)
Hash identifier: tlSoVzkOoMcEC1IAjj1Arf3zrUuX49xdXqnWghMg+p8=
Subject key identifier: 27:51:DF:AE:0D:16:A5:78:3B:99:F2:FB:BD:6B:24:2C:D6:1B:8C:30
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01846EC4D0AD0B8522E072EE0678BCEA22FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1Hfrg0WpXg7mfL7vWskLNYbjDA.roa
Signing time: Sun 13 Nov 2022 02:15:02 +0000
ROA not before: Sun 13 Nov 2022 02:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6e:c4:d0:ad:0b:85:22:e0:72:ee:06:78:bc:ea:22:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 13 02:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2751dfae0d16a5783b99f2fbbd6b242cd61b8c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:ee:78:21:c9:5f:55:0b:20:61:bd:a9:27:
83:fc:1c:57:1d:2d:a4:d6:99:1b:e3:77:13:36:fe:
c6:15:85:67:3f:cf:26:28:c3:fd:fa:11:aa:55:5c:
a6:7e:3c:7b:b6:ac:76:00:b8:b1:d7:2b:f1:81:f1:
9e:87:ce:a7:87:de:cb:fe:56:97:ee:8d:0e:4a:82:
ae:be:4b:ba:43:64:cd:67:70:4d:9d:3a:15:e5:ee:
e1:4b:e4:c5:54:42:8b:2e:4f:05:1e:aa:d0:94:72:
93:a4:a9:e8:4a:0e:53:01:7f:8d:95:d6:03:97:e3:
ad:55:b8:dd:ce:5e:67:19:da:c4:40:42:78:d4:fb:
09:a4:65:42:5c:45:41:e7:15:20:41:7a:4e:55:f2:
a2:9b:d2:f2:6f:6c:59:7e:5c:ee:0c:e1:4e:a4:e1:
db:fe:07:db:68:af:81:37:f4:b4:6c:b1:24:f7:4b:
70:d1:9d:a9:d3:4b:60:c8:99:39:ad:2d:ef:bc:e3:
22:f9:b8:ad:08:a3:3f:9c:12:4b:fb:18:50:e3:df:
30:e5:a3:47:26:fb:aa:f5:be:ad:05:64:cb:40:c3:
3a:32:8e:3d:53:7d:40:a8:0d:77:03:be:35:86:e1:
54:31:a6:d7:6a:91:69:fb:54:9f:aa:4e:21:ca:30:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:DF:AE:0D:16:A5:78:3B:99:F2:FB:BD:6B:24:2C:D6:1B:8C:30
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1Hfrg0WpXg7mfL7vWskLNYbjDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:ad:a7:59:39:85:88:bb:b9:1c:1a:9f:a5:0f:a6:bf:73:11:
d9:cc:b8:f4:08:32:05:f8:05:e8:df:c7:ef:01:7e:ec:5f:39:
23:37:e6:b8:36:1e:e7:5e:4b:0a:53:14:3d:f7:1f:b6:ea:ae:
4a:9e:4e:4f:e7:4d:eb:b7:8a:a6:af:cf:fb:8f:86:b4:c0:0d:
40:c9:dc:aa:9d:bf:ec:02:91:cb:5f:89:93:90:02:9b:a3:c6:
49:43:5b:5c:49:5f:a9:4f:26:de:1a:97:42:51:04:bb:46:1e:
f3:f6:2b:6b:8a:e5:8f:88:4e:6d:3e:d1:7d:b9:2a:e6:32:2a:
25:ff:b7:2a:3f:3a:4e:8d:18:0f:c7:22:66:e5:50:72:c8:4b:
7e:b9:38:6d:f4:57:b0:8f:44:cc:8b:b3:78:51:59:ff:51:08:
60:2a:53:c2:cb:f9:4b:64:11:39:f3:65:60:0f:da:ec:4e:e2:
15:d4:38:09:ab:70:64:2e:9a:3a:d5:fd:70:2f:46:c4:ca:68:
4b:9a:87:bb:bf:b5:74:0c:82:2d:41:41:9f:e1:5c:2e:88:59:
f5:56:44:34:bb:81:24:a5:7a:40:ba:94:eb:df:06:27:1e:fd:
9e:82:88:f1:fe:dc:45:e6:df:a2:16:13:89:ed:2a:e4:86:7d:
3c:eb:44:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:30:23 2025 by rpki-client