Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1vmqoTJv0dUxLegj6Juvu4mfOU.roa
File: J1vmqoTJv0dUxLegj6Juvu4mfOU.roa (raw, json)
Hash identifier: lOn3htuUKF725o6WcPpxIc1y8TBAD/t+SVTG9fw+2eM=
Subject key identifier: 27:5B:E6:AA:84:C9:BF:47:54:C4:B7:A0:8F:A2:6E:BE:EE:26:7C:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B84FB3E9EB8BC653CBCFC9DB4E1291EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1vmqoTJv0dUxLegj6Juvu4mfOU.roa
Signing time: Wed 02 Aug 2023 22:12:58 +0000
ROA not before: Wed 02 Aug 2023 22:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b8:4f:b3:e9:eb:8b:c6:53:cb:cf:c9:db:4e:12:91:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 22:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=275be6aa84c9bf4754c4b7a08fa26ebeee267ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:90:d4:5a:6c:80:6c:44:b3:5a:ea:0b:9b:
e3:6d:73:e5:0b:42:53:95:f4:b3:31:85:a1:43:53:
6b:b5:9c:e5:38:ca:d4:43:e9:ba:fb:55:25:78:64:
85:31:90:ce:2e:33:e5:a9:5e:3a:ab:de:b2:1e:80:
13:a0:80:a3:5e:8a:f9:31:e2:d1:09:0f:b0:47:08:
e5:3e:58:aa:7c:18:54:20:20:10:14:f5:b2:75:76:
f4:18:d9:a4:a3:e4:82:78:60:64:96:86:c1:8e:b8:
73:17:52:7a:85:22:d1:f4:ac:cc:14:24:02:3e:95:
6f:6f:d7:b7:56:56:50:c8:d6:69:92:f3:53:d7:d4:
9b:5f:6e:e2:b8:74:b0:81:e6:0c:d6:f3:d3:c1:29:
43:f8:07:3a:b5:d4:40:25:96:a9:73:45:da:10:71:
84:56:20:1f:89:a9:1f:5b:40:44:c9:3a:af:95:d5:
45:c5:9a:6a:ce:8a:45:64:2f:45:bd:b0:be:7e:a6:
bf:ce:5e:e7:a8:a4:00:13:3a:a2:4c:97:4c:85:42:
75:96:38:92:fd:5f:d2:c4:1b:d2:f7:c3:0f:48:23:
a1:7b:4a:e1:5e:e8:5b:25:f3:13:16:c7:69:1d:8a:
95:f2:c4:23:96:20:ba:41:c5:1a:99:e2:70:0f:96:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5B:E6:AA:84:C9:BF:47:54:C4:B7:A0:8F:A2:6E:BE:EE:26:7C:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1vmqoTJv0dUxLegj6Juvu4mfOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:7a:d3:c0:19:6b:88:10:5b:60:43:76:45:9f:a1:d8:cd:49:
94:22:c2:76:d9:83:27:a7:b2:6a:80:35:a2:78:10:c1:ee:3e:
cf:25:9a:9a:d0:dd:5a:42:b3:ca:7f:e1:40:9f:ad:74:52:cb:
60:38:5d:a4:cf:b0:b4:20:2c:42:ab:73:01:61:17:ab:41:d8:
b0:df:70:0f:1c:5e:c1:ae:21:9a:59:3e:ff:d8:f0:52:78:9d:
24:1d:a4:7b:9b:45:64:6b:70:dc:b9:fc:90:55:f5:a5:07:2e:
01:7b:21:68:59:3f:25:fd:33:7f:6e:1c:de:b4:c6:aa:2e:99:
c3:d6:da:10:9c:d2:a6:34:d4:23:a8:31:52:e4:87:82:d7:d8:
9e:86:d0:2a:50:58:e5:ff:33:6f:ef:4b:20:97:5a:86:df:eb:
61:ec:15:24:c2:67:18:e0:74:f4:4b:b8:6e:c9:15:93:72:34:
c0:14:aa:83:e7:75:3a:6d:42:ee:83:f1:d5:69:55:52:ca:f8:
9c:da:55:49:98:40:c8:bd:b4:88:e0:a5:34:d2:7a:a5:ab:07:
13:49:67:a3:5e:17:6d:6b:89:f6:52:47:cd:44:d1:02:34:9b:
0a:cd:01:87:f8:89:e9:e3:ae:00:97:42:f3:39:c0:49:ad:b4:
82:f3:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:11:20 2025 by rpki-client