Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J_aiGBdfBpBGClrsi8Z5bb52oT8.roa
File: J_aiGBdfBpBGClrsi8Z5bb52oT8.roa (raw, json)
Hash identifier: nejNvztcCT8nI+4DK54IOHizp5wSb26qKLSHudff5B8=
Subject key identifier: 27:F6:A2:18:17:5F:06:90:46:0A:5A:EC:8B:C6:79:6D:BE:76:A1:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885FABA61D89BD866A37FA8F705A513E97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J_aiGBdfBpBGClrsi8Z5bb52oT8.roa
Signing time: Sun 28 May 2023 00:04:24 +0000
ROA not before: Sun 28 May 2023 00:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:5fab:8b91/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5f:ab:a6:1d:89:bd:86:6a:37:fa:8f:70:5a:51:3e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 00:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27f6a218175f0690460a5aec8bc6796dbe76a13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:a2:32:2d:cc:0e:bd:c5:ab:73:5e:62:07:
9b:59:08:cd:30:9a:f6:78:85:7f:22:e6:5b:bf:61:
d4:b0:48:4e:71:d0:27:90:85:db:6a:6d:d3:58:0e:
c5:7e:ab:f5:97:9a:2f:19:30:b6:8d:9e:58:6d:02:
e8:dd:7a:f9:aa:1f:ab:0b:bf:0a:d2:47:60:29:1e:
75:5a:3c:be:df:44:2e:35:0d:8f:39:d5:80:7b:33:
c3:fa:5e:63:c1:7f:4a:6c:8f:df:18:1a:e8:d5:1a:
1f:70:da:1a:6d:8e:27:8e:4d:8b:df:6d:de:00:81:
c4:c5:4e:7b:1d:5a:db:8d:fd:c7:34:84:1a:02:e3:
c2:24:05:92:3e:5f:f5:69:2e:31:3b:15:4a:50:51:
00:33:ec:4a:5f:48:16:38:8f:31:8b:cc:df:39:9d:
09:87:77:1a:f0:af:0a:aa:6d:40:9f:07:e5:94:4c:
3c:0e:e9:39:92:18:cd:ed:5f:2c:89:b6:1d:e4:c4:
2b:51:92:b1:10:df:d6:9f:be:a9:a1:b6:e8:a5:4b:
c2:27:56:05:8f:84:1b:2e:6c:5c:08:6a:1c:e2:5c:
6e:28:57:9e:34:fc:e3:59:8c:02:d2:d7:87:65:3f:
e8:4f:0b:5f:ca:ba:6f:27:59:62:0c:52:1d:ac:32:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F6:A2:18:17:5F:06:90:46:0A:5A:EC:8B:C6:79:6D:BE:76:A1:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/J_aiGBdfBpBGClrsi8Z5bb52oT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:5c:72:0b:d7:8f:b0:06:f6:82:d9:78:07:f6:0c:aa:ff:e2:
06:bc:8d:53:21:96:90:6d:bc:a1:ce:96:36:5a:89:9b:45:cc:
f5:e0:35:ce:f4:29:2a:03:1e:db:fe:70:db:b3:f3:9f:d1:b0:
17:6f:2b:21:83:61:b8:97:b7:03:5f:de:37:0f:e8:de:5d:aa:
54:85:7f:64:42:f1:99:d1:13:53:03:5f:60:70:8a:9e:ef:8f:
43:a5:c7:cc:0c:36:d0:db:77:e8:c8:8f:2a:d5:9b:9d:3e:48:
7b:94:44:bc:8c:3c:fa:ce:7b:69:b4:82:d2:5e:27:9e:89:17:
6e:c6:d1:9d:bf:8b:96:00:89:9f:56:e5:a9:c4:34:1b:b2:b2:
75:76:5c:a4:1d:4e:74:1c:0a:1c:e7:81:69:43:72:85:1d:b4:
df:a5:ca:78:2f:5a:ab:a5:54:bf:36:b0:75:2d:a1:37:bb:00:
38:f5:af:0c:4e:01:d3:e9:bc:c9:98:de:72:79:5a:7c:24:72:
43:9a:a2:38:8d:b1:33:45:45:80:36:f4:1d:91:cf:37:f9:21:
ab:eb:2c:83:b2:e1:11:01:54:52:a8:94:ea:cc:89:86:6d:82:
49:94:12:e8:0e:1d:64:9e:1d:50:e4:ad:b0:b9:7d:59:2f:ae:
9d:9c:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:50:57 2025 by rpki-client