Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8KD84LW-0GuoaPjmqJ6-PfVuN4.roa
File: J8KD84LW-0GuoaPjmqJ6-PfVuN4.roa (raw, json)
Hash identifier: YpF+hwUD+g6kID5vGEhI6y77rnZeSIy2UNKW7vWSyvQ=
Subject key identifier: 27:C2:83:F3:82:D6:FB:41:AE:A1:A3:E3:9A:A2:7A:F8:F7:D5:B8:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8DD1F4D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8KD84LW-0GuoaPjmqJ6-PfVuN4.roa
Signing time: Sat 18 Jun 2022 15:10:44 +0000
ROA not before: Sat 18 Jun 2022 15:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379347160 (0x8dd1f4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 15:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27c283f382d6fb41aea1a3e39aa27af8f7d5b8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:be:f6:ab:0d:e5:f3:b9:29:59:59:50:e3:
cd:05:22:6f:97:67:3b:fd:e0:51:7a:9e:09:7d:48:
a4:24:1c:24:ca:65:d2:e8:a6:a8:52:0d:1a:e2:89:
0e:1b:0a:e4:8b:65:64:83:b1:0c:9e:37:29:81:af:
e1:ba:e5:59:a9:5c:d5:97:5f:12:a5:1d:85:98:c5:
c2:97:df:66:4c:65:37:df:ab:96:bc:0f:4d:df:cc:
bd:48:c6:f3:0a:12:2f:e7:0e:eb:53:4f:b7:91:ae:
c3:a3:74:12:16:8b:59:46:6f:3a:72:98:e3:bd:72:
0d:f2:b8:3d:f3:95:12:67:7a:d7:51:84:4e:8e:b7:
2b:f5:93:d5:5a:f8:8b:30:b5:73:ca:60:84:f7:b0:
73:76:82:f4:c6:81:45:88:db:dd:f7:61:de:1d:d4:
0f:fe:f0:53:31:37:ad:c7:c3:eb:15:a4:cf:31:80:
8d:66:d6:19:ba:c4:da:01:e8:84:b8:54:f0:3f:44:
fa:ec:84:43:94:bd:bc:92:9e:64:f2:8a:c4:d2:6a:
12:50:36:b8:49:41:39:3f:7c:2b:63:91:73:02:75:
bc:43:6f:f5:0c:71:cb:6a:3e:a6:bc:9b:e2:64:d3:
2b:96:97:77:6c:d3:55:76:c2:e3:2f:9f:97:57:4e:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C2:83:F3:82:D6:FB:41:AE:A1:A3:E3:9A:A2:7A:F8:F7:D5:B8:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8KD84LW-0GuoaPjmqJ6-PfVuN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:7b:ba:9f:55:67:e1:e6:c7:85:80:0e:2f:d8:ac:05:8d:6b:
27:ad:70:ee:c4:e3:03:ec:1d:7e:d8:76:24:21:a8:88:89:29:
04:b2:d1:dc:1d:f4:f1:da:e8:bd:78:ba:d0:4d:bd:8b:e3:42:
b8:9c:f9:60:f1:f4:cb:a4:76:43:86:c0:42:98:13:bd:14:a0:
cd:1f:14:bd:92:c9:06:b8:ef:9d:7f:2d:4d:cb:3e:88:f1:0c:
61:dd:6d:bc:dd:4a:51:ff:f7:f3:08:73:fc:59:11:87:5d:3f:
0d:d1:eb:88:4c:82:f4:1b:67:7b:3f:74:0e:8c:56:7e:89:42:
fe:04:f6:e2:cc:d3:49:6b:f9:f1:c5:c2:94:f8:98:f7:e6:d2:
12:9d:9c:75:e2:af:76:52:25:ea:5b:50:fd:73:56:51:db:fc:
f1:0b:dd:0b:42:1e:83:bb:7e:7a:25:f8:08:71:6d:ca:29:25:
da:42:ee:d5:d9:d1:93:b8:8b:26:0a:3a:5d:55:68:55:7c:da:
14:45:2b:96:fd:1f:e6:55:86:26:41:44:46:02:e4:d3:0e:d6:
38:10:00:fa:66:53:2f:0c:7d:fd:ee:e4:c2:61:23:11:2c:29:
8b:63:08:78:7c:da:8e:4a:c3:2a:cc:c9:b6:75:69:74:d4:3d:
e0:47:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 05:14:45 2025 by rpki-client