Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JyfLJ0Ll3hsfTbgygwbPtr7Gp2k.roa
File: JyfLJ0Ll3hsfTbgygwbPtr7Gp2k.roa (raw, json)
Hash identifier: 9RnyMiL6TIDp3tt6uQBpUVz2WzveeMdLniMhoVktJAQ=
Subject key identifier: 27:27:CB:27:42:E5:DE:1B:1F:4D:B8:32:83:06:CF:B6:BE:C6:A7:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E4F352CF4028A1AF2023DA47F0499C50
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JyfLJ0Ll3hsfTbgygwbPtr7Gp2k.roa
Signing time: Fri 11 Aug 2023 14:14:58 +0000
ROA not before: Fri 11 Aug 2023 14:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:f3:52:cf:40:28:a1:af:20:23:da:47:f0:49:9c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 14:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2727cb2742e5de1b1f4db8328306cfb6bec6a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:0a:c1:57:36:42:df:51:91:7c:b6:ff:da:
cf:a9:08:bc:bc:f7:ee:af:8f:f5:23:1f:5a:21:89:
19:7d:f8:92:c0:ae:9c:bf:ed:78:1e:e2:d6:69:b5:
bd:c3:9f:6c:c8:b8:d3:ae:f3:b7:3a:a1:e6:27:38:
4e:c3:38:5d:5a:e9:fd:73:0b:a9:48:cd:70:e2:f4:
0b:25:94:07:da:e7:34:f2:7f:6d:f9:ad:49:a9:26:
1f:3f:77:f2:11:55:8b:0c:5f:1f:f9:1d:81:7c:9e:
a9:1d:72:58:d6:1b:1d:40:f6:fe:7a:81:72:2a:7d:
35:e0:5f:fc:1c:b6:1e:72:16:f8:5d:8d:5b:33:e3:
0f:0a:b5:83:63:57:d8:60:3d:7e:1f:6e:a9:45:e6:
9b:65:76:f1:1a:b4:5b:3f:db:2b:68:74:1e:af:44:
cf:90:d3:b3:f6:d0:79:3b:fd:7f:9c:85:d0:92:b3:
49:f3:fb:b2:54:93:09:17:e9:e6:f6:ac:be:00:53:
54:f2:7b:13:0b:61:b6:db:3e:1a:df:7f:90:93:1f:
34:8e:94:fb:10:a4:77:5b:ed:f4:56:9a:a5:a6:5d:
f4:7c:03:07:03:0f:19:0d:d1:6f:cb:03:37:2f:17:
88:bc:59:3f:93:3d:b0:2f:47:6f:b1:c7:fe:f6:d6:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:27:CB:27:42:E5:DE:1B:1F:4D:B8:32:83:06:CF:B6:BE:C6:A7:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JyfLJ0Ll3hsfTbgygwbPtr7Gp2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:39:15:20:28:04:8e:04:13:44:6e:61:52:eb:1d:16:15:5e:
dc:30:05:54:2c:a6:b1:2d:e5:d8:7b:f8:a1:2c:8b:1d:fb:0b:
5e:52:98:f8:05:cf:32:ef:5d:d0:85:21:3e:5e:b2:0b:8c:9c:
77:75:33:04:0d:34:f6:5a:ca:e3:a2:d7:3b:6b:91:44:bf:aa:
64:62:bc:0f:3e:5a:19:19:ff:a9:00:9a:bc:aa:f8:5d:4c:2c:
bf:84:cb:0b:a7:97:fe:0e:5f:43:d5:a4:02:7b:99:59:ac:1e:
90:c9:1c:42:c5:25:c8:97:db:59:01:0c:3d:8c:35:86:9d:bc:
b2:76:95:a8:d7:6e:06:51:30:13:0f:6d:a0:5a:fc:5e:e3:af:
6b:cb:bc:92:b9:72:20:d5:c3:1f:c9:dd:6c:71:ce:12:61:3c:
79:16:47:1e:6f:5b:91:3c:92:14:a6:27:43:73:59:0b:36:79:
f8:7d:6b:83:25:d4:6c:ea:a1:5c:ed:3c:cb:dc:03:6b:e0:8f:
95:16:54:84:31:24:97:09:5c:77:2d:b5:22:47:e0:fe:bd:67:
e9:cf:12:be:69:58:38:bc:7c:eb:be:1f:f0:2e:bb:cf:5f:10:
cb:3f:f6:fe:2d:77:28:c1:a0:4d:75:2d:96:2a:cf:03:b0:a7:
4b:b7:d6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:45 2025 by rpki-client