Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J5GsC9LHVileBTb_IxcVBh5BIAc.roa
File: J5GsC9LHVileBTb_IxcVBh5BIAc.roa (raw, json)
Hash identifier: H/HV8j63VsobM5XkdU+d3kccT2OIJ4bH9W7CMnp3S7Q=
Subject key identifier: 27:91:AC:0B:D2:C7:56:29:5E:05:36:FF:23:17:15:06:1E:41:20:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018462F3EA3CCB2ED3969C0CDF8B3A2FE084
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J5GsC9LHVileBTb_IxcVBh5BIAc.roa
Signing time: Thu 10 Nov 2022 19:11:03 +0000
ROA not before: Thu 10 Nov 2022 19:11:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:f3:ea:3c:cb:2e:d3:96:9c:0c:df:8b:3a:2f:e0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 10 19:11:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2791ac0bd2c756295e0536ff231715061e412007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:eb:98:62:a8:85:ec:b2:00:cf:74:60:0d:33:
ac:2b:6d:58:20:47:0b:2f:ce:fa:9c:c0:90:75:7f:
f0:4b:42:00:8a:5c:7e:1b:a6:63:1a:5f:ea:4e:22:
43:6b:ed:25:71:32:e8:d3:4c:09:84:e8:f0:8f:ad:
bd:d4:2c:ef:fc:df:f8:d0:e0:db:c6:81:34:99:a7:
9d:bd:24:54:d4:73:f5:4d:c8:6a:c4:d8:6a:38:6d:
10:f2:09:50:4a:e0:01:88:43:0b:d7:ab:ab:66:9a:
a6:8e:73:2c:93:09:68:8a:63:1c:30:ed:b0:e7:9b:
17:91:b9:41:39:f2:59:74:78:a7:70:e0:f7:d5:02:
2a:f5:39:f7:f2:4a:ce:a9:64:c5:c0:8d:d0:2d:03:
e8:5d:b8:03:ce:13:59:f5:11:08:64:1a:d4:c0:51:
b1:9d:9f:7f:0d:e7:cd:b8:81:05:18:3f:b9:12:c3:
f3:6d:f8:fd:a4:62:2e:95:3f:17:34:0f:e1:97:c1:
7c:17:c2:b5:52:7b:06:a0:8d:8f:d9:d2:a1:fc:98:
33:a7:7e:35:c4:f4:51:30:92:9b:f0:aa:f5:b2:aa:
29:5c:85:51:ec:33:bf:73:3a:7f:ba:5d:d8:98:ab:
db:3d:0e:78:da:9a:2b:01:3b:b1:b4:08:30:e0:bb:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:91:AC:0B:D2:C7:56:29:5E:05:36:FF:23:17:15:06:1E:41:20:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J5GsC9LHVileBTb_IxcVBh5BIAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:9a:bb:2c:f5:69:af:1d:cc:c0:ef:b0:78:20:9d:01:b8:31:
8c:51:5a:1b:92:71:ab:94:e5:be:fe:77:04:a8:af:de:e4:49:
91:5d:d0:73:fd:f2:98:20:09:8a:13:81:33:4c:bf:52:3c:e5:
87:59:47:b5:e9:36:74:60:65:17:62:fe:dd:3b:5f:0e:c6:1a:
29:d2:0a:03:0d:89:af:a5:6c:6f:b0:41:e2:8c:f1:a2:7c:c4:
32:95:1b:15:2c:c7:a9:7a:40:d0:92:f1:ce:a4:56:ed:a3:35:
17:37:e6:d9:b9:9d:c2:9f:f3:e7:31:7f:4f:f1:ff:e2:63:b1:
65:d5:11:5d:c0:6d:5a:f8:09:af:b1:f6:0c:c5:ea:b8:9d:d3:
b3:c9:b1:be:21:63:e2:83:b4:51:49:86:8d:0e:6b:0c:1c:da:
08:ba:8f:d0:fc:a5:bd:d6:16:f8:a8:1e:45:ae:18:6d:4e:93:
3a:bd:90:f1:04:7a:24:cf:70:5e:7f:46:6c:16:d4:1c:89:5a:
2b:86:56:0f:17:d1:65:34:cb:35:6c:4f:e4:4f:84:07:3b:9d:
12:b4:a1:aa:a3:f6:5b:74:00:a8:74:b6:9b:44:57:38:32:87:
3c:ab:99:39:42:9c:f1:79:6e:7d:78:b6:44:51:02:fc:74:60:
c7:7b:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:04 2025 by rpki-client