Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JAPbcGdKLG0LdnTdKgBEekCHZ_E.roa
File: JAPbcGdKLG0LdnTdKgBEekCHZ_E.roa (raw, json)
Hash identifier: n/7k61KN7O9RiAedtzjxMHUk4wvchozd9Gpb6AXxQEE=
Subject key identifier: 24:03:DB:70:67:4A:2C:6D:0B:76:74:DD:2A:00:44:7A:40:87:67:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867ABAF14149775A4520532ADC779CD8DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JAPbcGdKLG0LdnTdKgBEekCHZ_E.roa
Signing time: Wed 22 Feb 2023 20:05:17 +0000
ROA not before: Wed 22 Feb 2023 20:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7aba:17cc/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:ba:f1:41:49:77:5a:45:20:53:2a:dc:77:9c:d8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 20:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2403db70674a2c6d0b7674dd2a00447a408767f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:88:f4:e8:81:a6:f4:23:af:20:d2:c3:d8:
78:15:9c:b4:09:44:98:83:9e:f9:a5:16:d6:0c:d6:
7c:1e:28:cb:35:64:ed:1e:d0:dd:a4:44:d8:dc:97:
8b:ec:6b:4b:db:47:e1:3c:92:67:4a:03:06:34:22:
81:a7:e8:ed:91:12:98:96:19:6a:47:4b:f0:10:f1:
6a:22:47:0f:b6:40:4a:54:2f:41:78:5b:05:e7:94:
ea:be:a3:7f:68:47:d5:df:85:b0:1b:e8:55:7a:47:
55:41:3a:79:1b:56:b2:bd:16:f0:44:ea:0c:d9:b6:
5c:fe:ce:1f:4d:4c:f5:85:3e:40:d9:49:ab:c4:66:
a5:3f:0e:40:6c:29:b6:d2:57:2c:2a:5f:ec:93:96:
0d:a8:b2:18:63:3b:4a:8c:d4:0c:82:dc:11:57:34:
e8:5b:29:9e:26:a1:6a:fd:58:2c:b6:8a:6e:c6:94:
b8:ce:93:53:86:95:8b:9e:c0:ca:bc:1b:be:b9:83:
f1:a0:71:d9:f7:f1:13:7e:c0:c0:3e:d7:16:b5:41:
5b:c3:7a:41:16:37:ef:5d:39:86:fc:94:8b:88:24:
db:37:d8:bb:88:6f:7e:e7:c2:1a:7d:36:c4:7b:94:
37:02:38:78:14:a1:44:86:ae:5c:e4:68:da:9b:18:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:03:DB:70:67:4A:2C:6D:0B:76:74:DD:2A:00:44:7A:40:87:67:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JAPbcGdKLG0LdnTdKgBEekCHZ_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:95:58:0b:d7:09:10:21:71:36:96:63:1e:68:8e:fb:ba:1b:
c1:89:1d:8a:76:8b:d3:88:e1:42:6d:26:67:e2:ec:2e:86:68:
97:4c:b9:e7:a1:74:0a:f5:e8:3e:35:8d:60:20:81:04:2f:26:
60:75:e7:bd:40:54:55:ef:18:1f:3f:e1:e5:0f:bd:c2:7f:50:
9c:c7:06:33:07:cf:da:8b:a7:b2:29:21:d6:fd:99:34:ca:e1:
b0:4e:33:91:e6:b5:25:c0:7b:09:29:cc:9a:a4:37:e5:3e:e4:
a9:4b:1f:7f:a5:78:62:bc:e8:8a:e2:16:11:e5:22:c8:b3:01:
01:a0:6f:cd:9c:e1:2c:a3:28:12:71:11:63:87:57:21:79:28:
e5:8a:d2:76:5d:33:78:05:eb:4c:3b:dc:d8:0e:2d:93:4c:f0:
60:f5:a1:12:75:c9:e7:b8:e3:9f:05:74:8d:12:73:df:47:85:
15:35:37:13:b4:59:8a:3b:dd:fc:2f:b5:4f:6f:02:91:85:32:
12:65:60:13:8d:e0:49:c5:27:e1:e9:c3:dc:b5:0e:47:af:7b:
f1:e0:fd:9d:f6:d1:8c:99:5c:a9:a6:db:db:88:7b:05:fc:c1:
aa:48:9a:de:a5:45:a8:a9:8d:81:a9:e3:07:ec:fd:9b:f8:2c:
e5:b9:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:18 2025 by rpki-client