Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JnwpP2-HRkIfRH8F-bxrDyPkQSg.roa
File: JnwpP2-HRkIfRH8F-bxrDyPkQSg.roa (raw, json)
Hash identifier: MyXj0ghMzwgj4Dmz+9cqoese2vfUXqFDN/CMVbCiLuc=
Subject key identifier: 26:7C:29:3F:6F:87:46:42:1F:44:7F:05:F9:BC:6B:0F:23:E4:41:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C5D725787A9B37374566ACE84C7C5C76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JnwpP2-HRkIfRH8F-bxrDyPkQSg.roa
Signing time: Sat 05 Aug 2023 13:15:58 +0000
ROA not before: Sat 05 Aug 2023 13:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:d7:25:78:7a:9b:37:37:45:66:ac:e8:4c:7c:5c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 13:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=267c293f6f8746421f447f05f9bc6b0f23e44128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:09:36:b6:59:dc:46:44:c1:27:68:17:e9:
0e:e7:87:50:13:70:9a:00:38:fb:d7:2e:b0:22:8e:
39:ad:d0:6b:b9:87:e9:19:41:b2:46:80:d8:20:f5:
44:6b:f0:be:4d:1a:88:3d:82:39:f7:9d:cc:d1:8e:
52:e8:e2:cf:53:07:a9:99:5b:99:1f:f8:6f:ab:cb:
11:f2:a1:c4:cd:e8:a9:14:46:94:24:aa:82:36:01:
db:35:98:59:68:c1:d2:07:88:2c:38:69:ce:67:e9:
d3:a8:0b:30:f7:c4:19:5b:f5:23:b0:b3:79:70:59:
66:bf:c4:6d:c7:9c:95:5d:68:b7:ae:65:04:ff:67:
8a:30:d5:df:a2:31:e6:a0:6e:1a:00:56:a1:8d:ea:
7b:d9:54:d2:bb:cf:6d:82:79:64:2d:f5:4f:49:53:
36:5f:eb:67:ea:c1:24:e7:69:af:fb:e9:1b:69:51:
e5:56:a3:bb:e4:81:4d:0a:72:44:84:46:e8:1c:64:
3c:c0:62:df:6b:81:20:c9:f6:fb:c1:a0:7b:31:08:
9d:42:7b:a7:04:76:cc:2f:36:40:db:e4:a0:29:61:
39:97:4f:86:29:74:3c:5d:9d:3a:bc:16:a3:d3:9c:
4b:3d:17:d0:1b:4f:ee:07:2f:ae:5d:0b:f5:7a:a2:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:29:3F:6F:87:46:42:1F:44:7F:05:F9:BC:6B:0F:23:E4:41:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JnwpP2-HRkIfRH8F-bxrDyPkQSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:21:81:61:ea:14:51:1e:09:80:86:6f:c3:b7:bb:f9:17:18:
5e:89:c5:ca:44:67:56:10:65:be:7b:eb:f5:4a:43:c7:d3:95:
e9:50:ca:6d:28:32:b8:6a:c8:42:9e:2a:1c:33:a6:9c:5f:33:
1b:bb:c7:d7:f3:27:b2:60:de:4e:8c:b3:8e:58:d8:b9:83:3c:
7d:6f:4b:a1:28:be:a3:bb:57:f6:2c:b3:73:9f:d8:fe:86:a5:
49:ab:9d:22:63:93:33:8c:fc:85:22:9c:94:c7:00:15:bc:c1:
4a:45:b2:ea:f5:ce:49:c4:08:e7:c3:cc:de:e3:7c:a0:c3:1b:
87:a7:2e:6d:1c:a5:ba:b9:fc:6b:49:b1:49:95:79:44:77:df:
db:59:7a:bc:52:d8:9c:9e:2c:17:e5:65:60:34:e1:49:a5:ec:
2c:02:55:f1:d6:c1:3e:09:f8:3e:f4:19:f9:f5:08:54:51:04:
2d:1d:b4:28:0c:05:b9:a7:38:11:2b:03:73:0d:9f:da:b5:08:
9c:2e:4c:c3:86:98:c8:83:26:4c:47:ce:f3:2b:fd:5e:bc:db:
27:a8:f6:49:d1:bf:de:0b:42:c1:d4:74:0d:43:4d:06:1b:cf:
f2:fb:46:d2:7e:6f:0c:ae:c9:66:47:d9:f0:79:43:2b:50:61:
bf:1a:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:20:50 2025 by rpki-client