Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8Z2lAq_PSffaaS1idYUcc5tIO0.roa
File: J8Z2lAq_PSffaaS1idYUcc5tIO0.roa (raw, json)
Hash identifier: 7JUZUDNVWNHe/vjPX6asmObnU8XJuHE8Ojd+88wtr8Q=
Subject key identifier: 27:C6:76:94:0A:BF:3D:27:DF:69:A4:B5:89:D6:14:71:CE:6D:20:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018700E25C481D65310432D3DB6B19B78E2A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8Z2lAq_PSffaaS1idYUcc5tIO0.roa
Signing time: Mon 20 Mar 2023 21:17:27 +0000
ROA not before: Mon 20 Mar 2023 21:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:00:e2:5c:48:1d:65:31:04:32:d3:db:6b:19:b7:8e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 21:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27c676940abf3d27df69a4b589d61471ce6d20ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:32:b7:c4:2c:cd:1e:d4:d5:07:e9:ef:73:
6d:9c:bc:1d:47:0d:58:db:14:62:56:99:72:d7:fa:
37:a2:57:62:ac:dc:aa:01:6f:f2:de:b4:e4:b0:c4:
d1:26:44:95:08:09:c3:6c:f6:dd:17:3b:9d:a7:06:
39:1b:cc:96:a7:e8:19:fb:55:31:14:23:5f:42:09:
86:bf:05:d4:99:6f:7a:5b:dd:e6:fa:10:59:ef:47:
81:9b:fe:62:ad:a0:1d:94:08:56:bc:fa:0f:78:a0:
2f:6b:7e:26:0d:91:51:b6:7b:e0:49:98:d4:58:b6:
f1:f8:81:1f:6f:bf:3f:98:cf:38:49:ac:c0:34:05:
6a:d9:98:1a:11:3e:f0:0e:7a:59:1f:34:43:ed:17:
7a:71:6f:a3:fa:77:f6:1d:3e:63:67:a2:ca:c7:69:
57:d0:60:a4:89:04:4a:cc:bb:80:00:43:ef:c6:59:
55:7c:f2:78:ad:45:17:02:9f:8e:9b:cc:5e:db:c2:
a3:f6:f1:23:2a:4c:08:b4:39:c9:ff:67:cd:22:91:
54:13:82:a7:7e:96:1b:16:68:7f:07:70:d4:6c:bc:
04:2d:f2:51:c8:7e:ee:ac:6c:91:1a:70:1b:e4:f3:
11:8b:51:c2:bf:f9:f3:67:83:2f:32:e6:60:c5:a2:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C6:76:94:0A:BF:3D:27:DF:69:A4:B5:89:D6:14:71:CE:6D:20:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J8Z2lAq_PSffaaS1idYUcc5tIO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:36:ea:21:49:24:f3:22:1d:27:b6:8b:80:11:11:ba:fa:45:
bc:8d:a3:b4:9b:ed:54:14:a8:63:64:e1:01:6f:5f:97:74:a5:
97:65:1b:c9:c8:14:25:fc:43:0d:8f:f7:96:8f:08:0e:5a:f9:
22:ee:15:49:0b:41:a9:d1:39:52:bf:0e:04:b6:f7:40:e1:7f:
6c:8d:e3:83:d7:24:a1:82:c1:25:24:f8:ee:f7:62:ff:b1:32:
bf:16:15:13:de:af:03:ec:44:81:4d:de:bd:52:d7:ec:fc:91:
83:43:61:61:a9:29:11:e2:5b:cf:38:30:16:e6:d4:98:8f:28:
b9:b1:8f:5d:3a:f3:0c:50:d4:4a:03:4c:89:eb:a8:36:0a:78:
2a:a3:87:25:cf:05:41:18:55:b3:b2:bf:03:e1:40:82:ac:b2:
69:b1:5b:7c:04:b7:a1:28:7e:27:15:ac:b0:97:61:3b:bc:87:
5e:6e:1b:ef:ac:1d:62:af:5d:fe:dc:a2:e3:f5:f1:03:fd:79:
90:30:53:23:d5:95:89:ce:1e:40:4f:bd:72:e1:e0:d8:26:80:
15:a3:25:82:45:fc:9b:e3:0d:9f:ec:62:c0:f5:8e:b5:e5:84:
ea:3a:31:99:e9:c8:af:51:7c:2c:d9:89:b6:6e:9b:c0:3c:dd:
09:d7:18:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:30 2025 by rpki-client