Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JN83XZv2tbiPJRsVUWP_LCz2q6c.roa
File: JN83XZv2tbiPJRsVUWP_LCz2q6c.roa (raw, json)
Hash identifier: p8BrE1PQbUgwJYquh0BaU0U55AfPjs1EtpAJs4iXZkA=
Subject key identifier: 24:DF:37:5D:9B:F6:B5:B8:8F:25:1B:15:51:63:FF:2C:2C:F6:AB:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884CD012AD20DEBB562C8AFDE618B72B20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JN83XZv2tbiPJRsVUWP_LCz2q6c.roa
Signing time: Wed 24 May 2023 08:11:24 +0000
ROA not before: Wed 24 May 2023 08:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:d0:12:ad:20:de:bb:56:2c:8a:fd:e6:18:b7:2b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 08:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24df375d9bf6b5b88f251b155163ff2c2cf6aba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:d8:a6:d5:ff:3a:cc:6f:cf:29:16:4b:19:
7d:7d:38:1d:7a:c3:05:92:49:af:ed:4d:bc:96:03:
7a:ce:20:f8:00:e8:73:2c:c6:61:9f:06:96:33:73:
b7:0a:d8:9a:dd:02:bd:f1:0d:82:fd:73:86:30:33:
89:0a:11:be:0b:50:4a:55:00:db:8f:06:c4:78:e7:
2c:ba:f0:0f:c9:da:9b:11:57:86:2f:d7:49:d3:fa:
d9:80:44:d0:35:78:4e:9b:a0:0a:88:4e:86:42:44:
9b:71:07:3c:12:40:00:fb:2e:3f:1a:7e:7f:fe:1e:
df:7b:89:6c:f9:3c:3e:a7:2a:6b:b9:42:50:91:95:
c9:54:0e:88:7f:70:94:54:97:fe:31:1b:33:81:53:
96:ce:6d:a4:49:7b:43:3b:83:38:bb:08:b8:98:84:
c3:ef:c2:d0:7f:34:a5:81:44:d0:68:fb:c6:d0:d2:
74:18:07:76:ff:4d:ad:dd:4b:89:37:fe:48:7f:f4:
43:65:d8:30:19:35:2c:21:f0:d9:26:c9:4d:d0:f9:
01:37:ed:f9:4b:a5:92:a6:84:ee:1d:f8:7a:61:28:
bf:ce:c8:5a:85:1e:29:e7:85:68:9e:e3:a9:37:24:
cc:bc:f1:d6:a8:10:24:3f:a8:a9:49:48:9e:1c:2d:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DF:37:5D:9B:F6:B5:B8:8F:25:1B:15:51:63:FF:2C:2C:F6:AB:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JN83XZv2tbiPJRsVUWP_LCz2q6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:ec:58:41:20:bf:b6:21:b6:80:6f:c8:79:fd:7d:e0:d2:b0:
96:4c:0e:bc:3a:f5:a2:d8:2d:3e:5d:0f:9d:85:a7:bd:b9:e1:
ae:1d:57:57:94:80:2c:2e:f8:38:6b:80:66:f8:cb:cf:2c:14:
e7:fd:9f:05:64:c6:bb:9e:fb:99:64:a6:de:c3:22:c4:06:7f:
55:f7:5b:ac:7c:70:42:e3:5c:c4:60:af:64:6d:a3:9a:33:ca:
86:a5:ef:ad:89:29:ba:bc:ec:a8:7d:f0:61:52:df:47:0e:6c:
2f:82:66:7b:1a:4b:e0:7c:ba:03:7a:42:de:a3:04:f4:e8:58:
3c:d1:71:18:4f:ce:70:ad:2c:01:3d:91:1d:50:12:a7:79:9a:
b0:35:d5:fb:74:43:9a:5f:dd:7a:ed:7a:a6:82:7d:c9:76:48:
99:51:88:c9:98:e8:e4:99:f3:cf:00:b5:50:d2:d5:04:09:ae:
af:61:de:34:f3:17:42:35:2b:12:9f:6a:be:5d:02:06:5f:28:
d3:aa:fb:55:1a:bb:02:16:b6:50:cd:b1:87:d9:7a:9c:08:9c:
16:2f:4b:f8:99:1d:c2:e8:58:db:55:09:89:f6:ab:b7:ce:55:
4c:e0:49:2d:80:21:2d:e8:79:29:53:bc:89:cd:76:a1:bc:fd:
2f:9d:57:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:11 2025 by rpki-client