Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J93ZV9kbOCJV0oO24YcX2SA-uZ4.roa
File: J93ZV9kbOCJV0oO24YcX2SA-uZ4.roa (raw, json)
Hash identifier: nQ8OamcQWVDnVgOI9B5U5DhHThWfCXKTXZ5Esn9gRAg=
Subject key identifier: 27:DD:D9:57:D9:1B:38:22:55:D2:83:B6:E1:87:17:D9:20:3E:B9:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CF48221D01B2DC6A105CAA240A8E2D26
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J93ZV9kbOCJV0oO24YcX2SA-uZ4.roa
Signing time: Mon 07 Aug 2023 09:15:58 +0000
ROA not before: Mon 07 Aug 2023 09:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:48:22:1d:01:b2:dc:6a:10:5c:aa:24:0a:8e:2d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 09:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27ddd957d91b382255d283b6e18717d9203eb99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:75:e4:19:d7:dc:ca:6c:bd:4c:b7:39:dd:bc:
79:68:d8:51:d0:29:82:12:2f:14:85:6c:12:8f:c3:
f7:a3:e2:ca:5a:cc:79:e9:2f:56:23:ca:00:95:7a:
11:8a:84:19:79:b8:0f:92:38:1e:e3:3c:81:6a:a4:
e4:8c:d4:09:a7:f3:dc:6d:99:99:44:f4:e4:08:5e:
47:8e:fa:0b:07:c4:d2:53:13:12:5a:2d:b2:39:5b:
5e:9b:1c:89:81:e4:bc:87:42:df:54:e7:a7:91:7f:
f8:1d:31:40:c4:5a:80:ac:11:b4:fe:18:bd:16:11:
91:b7:39:60:cb:1d:8f:90:02:e4:1f:8a:00:c1:03:
67:30:8b:cb:00:47:ef:f0:8c:79:d6:64:96:dd:05:
b3:df:b0:ca:52:37:7c:b4:fd:55:9b:d5:8f:dc:01:
ad:9e:39:f7:71:1b:fc:91:da:e6:c8:48:ec:c2:76:
38:b6:b2:f9:df:a0:96:55:c9:82:67:90:56:a5:f6:
f8:45:28:67:bc:9b:6d:18:84:b4:8d:7b:d6:e1:54:
41:c1:93:7e:11:e5:9a:f2:25:db:eb:d4:9e:07:fb:
cd:51:13:00:d5:ee:d2:1b:ff:a6:7e:5e:1d:43:26:
fd:54:26:67:fc:6c:ae:a0:50:68:13:8a:9e:c4:5f:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DD:D9:57:D9:1B:38:22:55:D2:83:B6:E1:87:17:D9:20:3E:B9:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J93ZV9kbOCJV0oO24YcX2SA-uZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:d8:dc:81:9b:b8:bd:99:65:49:d6:c2:88:1e:28:ad:68:ac:
17:28:36:9f:95:5a:15:50:33:c1:54:b6:9e:5a:d0:07:9d:09:
82:88:62:f6:09:e6:73:74:9a:d2:88:b8:10:e4:16:0e:76:36:
2e:f9:1b:e0:f6:fb:d7:53:6d:b0:65:7d:e1:52:d7:fb:5e:48:
76:08:b6:0a:65:47:b2:5c:94:22:96:6f:ce:a2:8f:0b:94:7c:
62:b0:1f:ec:c6:73:d3:ff:e1:f1:8b:b7:d1:5d:1e:42:b6:98:
a2:e3:5f:25:da:6e:2b:35:9c:fe:81:44:5d:06:78:90:d9:d0:
7a:e7:c5:97:c9:69:88:33:66:55:80:76:7c:62:58:1b:f9:65:
24:d8:25:f9:4e:18:fa:b7:af:ed:df:1b:cd:b5:b9:65:1e:88:
0e:80:d8:a5:29:4c:e7:b6:17:18:a6:37:7c:d6:c8:76:5f:ff:
9c:a1:0d:25:17:b8:7b:9c:c7:1d:90:fd:d7:b1:70:77:78:b8:
31:5c:0a:8f:59:85:fa:0a:f4:33:83:34:b4:1e:73:64:ab:61:
d7:78:10:96:32:ea:76:14:10:b7:42:6d:3f:a1:ec:40:31:5d:
9d:68:4b:c4:01:93:3d:c1:45:99:35:f1:7f:31:45:3a:fa:80:
a0:cb:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:35:14 2025 by rpki-client