Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1yAFnzDFmxzWNIyEtz8V6SkkKs.roa
File: J1yAFnzDFmxzWNIyEtz8V6SkkKs.roa (raw, json)
Hash identifier: qF159+ncc8S9+I8ETb/C0o8J8GwQ3+PGCCrOmV1aLZI=
Subject key identifier: 27:5C:80:16:7C:C3:16:6C:73:58:D2:32:12:DC:FC:57:A4:A4:90:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018778602C8717ECACB56F5A3DD2370BCF25
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1yAFnzDFmxzWNIyEtz8V6SkkKs.roa
Signing time: Thu 13 Apr 2023 02:09:41 +0000
ROA not before: Thu 13 Apr 2023 02:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:78:60:2c:87:17:ec:ac:b5:6f:5a:3d:d2:37:0b:cf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 02:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=275c80167cc3166c7358d23212dcfc57a4a490ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:89:72:fd:36:ce:a0:c1:ae:69:a5:10:2a:
92:5b:a9:ba:f6:51:ac:67:f5:38:bd:6f:03:b2:1d:
c0:50:e5:03:46:df:9b:23:05:ab:19:75:74:c8:e5:
e7:5e:dc:e8:e3:07:40:b6:57:e5:2f:30:e9:92:81:
d7:62:34:35:58:23:6f:25:b8:c4:06:80:e2:b1:8b:
df:75:96:84:c0:42:1c:17:42:91:8f:b1:d6:5a:d0:
e7:30:ea:ad:dc:e8:18:05:e0:d6:f9:f7:d7:09:f7:
0b:ae:38:e0:e8:0e:4a:99:d2:fe:e8:dd:b4:0f:4f:
44:54:50:fb:d2:0b:81:70:4b:a6:4b:85:5a:77:b0:
2c:8b:4c:8a:21:24:33:e4:f7:b0:27:a6:90:0a:82:
75:ff:ca:48:bc:99:7b:9a:5d:23:8f:8f:73:1d:5f:
f7:4b:23:1d:8b:5b:38:6b:1c:73:46:7e:65:43:6f:
fb:eb:09:f0:11:c9:25:5e:a9:89:92:0c:14:67:9c:
20:19:7d:bc:aa:a8:a6:75:28:2a:4e:8c:34:53:d1:
7f:a9:67:e1:05:13:f5:02:7f:17:4b:8f:d8:97:a5:
2d:9f:76:e3:2f:b5:f8:32:69:84:75:15:fd:9d:95:
68:f7:46:2f:e1:eb:90:19:51:a3:46:b1:51:0c:a6:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5C:80:16:7C:C3:16:6C:73:58:D2:32:12:DC:FC:57:A4:A4:90:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J1yAFnzDFmxzWNIyEtz8V6SkkKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:a3:b5:6e:45:b3:72:e3:94:5d:c8:c1:73:e4:cd:53:86:e6:
65:e3:a6:c0:da:09:2f:fa:bb:d7:9b:6c:e9:65:a6:b2:90:e5:
84:14:68:1b:e8:06:97:c9:3b:9c:9e:6c:58:ec:9c:60:e1:1f:
ae:4c:45:b2:d0:f8:8b:e3:ed:93:ae:63:5b:93:1a:81:ac:29:
af:9d:be:88:80:e7:a2:bc:6c:22:a3:8a:4b:6e:c9:44:65:b5:
a3:de:8b:bc:44:3f:1d:f9:35:86:6a:d5:45:30:f6:57:ff:1d:
79:19:a0:47:c7:e6:23:82:ce:d3:c0:18:34:8f:cb:9c:7f:d7:
a2:29:bf:c4:89:5d:b0:70:4f:99:63:6e:44:00:da:0f:4a:43:
13:fa:5e:8d:a6:ac:ae:54:88:d7:22:41:8d:32:c7:a6:53:f7:
96:14:87:b2:a7:c1:68:0c:28:d8:96:ab:f7:de:90:d5:8f:ce:
96:43:be:78:35:8f:bd:b9:4b:76:69:6f:ed:a7:01:ba:64:36:
09:ad:12:f5:6e:ed:c7:30:0a:99:81:2e:f9:a3:38:a0:7c:71:
66:5f:3e:ac:a1:f9:90:c4:f0:36:85:a7:a3:51:bc:b9:15:ac:
fd:d1:02:26:78:ad:f0:66:4c:7a:27:70:a7:fd:54:3f:10:d9:
35:e8:8f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:08:20 2025 by rpki-client