Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S0j3r6H0TfqdbWoZNdqHV5Javng.roa
File: S0j3r6H0TfqdbWoZNdqHV5Javng.roa (raw, json)
Hash identifier: u8J5o+XgBi1U0pxXnzHLBkcTulQHq0lTkhk71YqbQTU=
Subject key identifier: 4B:48:F7:AF:A1:F4:4D:FA:9D:6D:6A:19:35:DA:87:57:92:5A:BE:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018983F2FF4CB01DD2E14A9FAFE4AED00FAD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S0j3r6H0TfqdbWoZNdqHV5Javng.roa
Signing time: Sun 23 Jul 2023 18:11:27 +0000
ROA not before: Sun 23 Jul 2023 18:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:83:f2:ff:4c:b0:1d:d2:e1:4a:9f:af:e4:ae:d0:0f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 18:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b48f7afa1f44dfa9d6d6a1935da8757925abe78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:26:a1:81:4a:4d:f1:d9:0f:7e:76:01:70:
e3:b4:24:90:02:bd:20:12:c4:f0:87:5e:ec:24:2b:
f3:04:de:db:d3:e3:7a:42:70:1c:11:e2:7b:1b:81:
f5:cc:64:ec:7d:04:8a:ee:6b:70:60:13:4a:6d:0a:
a9:53:14:15:30:56:47:91:c8:2f:d7:a7:5e:6e:82:
f0:98:a2:b8:57:5d:26:d7:01:03:96:fb:c7:61:c3:
47:1d:27:32:bc:84:58:77:f8:39:2b:28:04:c7:43:
10:3a:c5:7f:eb:b4:b3:18:98:fd:5d:6f:93:9d:e6:
6e:c5:39:b1:2f:78:bf:c7:9b:f2:37:8c:70:50:4e:
24:db:85:55:1c:e5:9b:b3:0a:cd:19:fa:94:53:aa:
83:ca:e6:e0:3d:0a:11:56:c7:37:c8:39:fa:17:05:
5f:dd:29:14:1f:38:84:8a:44:d3:33:68:86:12:7b:
ec:ba:41:30:4f:17:14:bb:2c:15:f8:c0:c8:9b:2a:
2c:9e:47:a4:81:ca:57:16:22:43:70:ec:0b:69:0d:
fb:b1:53:f0:29:57:c9:f7:90:85:83:e8:c2:e0:97:
1f:65:bf:59:ee:36:fa:67:38:47:52:05:04:1c:3b:
00:cc:f8:ed:db:f7:47:c5:14:39:d9:64:72:ab:a2:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:F7:AF:A1:F4:4D:FA:9D:6D:6A:19:35:DA:87:57:92:5A:BE:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S0j3r6H0TfqdbWoZNdqHV5Javng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:76:a6:57:d5:1c:97:84:0d:b4:ae:e3:2b:9e:fd:e4:47:25:
b0:83:87:90:de:ef:2e:c5:0f:9a:65:a7:fa:8b:d8:7d:f1:80:
f7:b3:ce:8f:42:78:ae:53:3d:5f:d3:6b:0f:1c:f5:61:41:29:
d6:0e:eb:bf:70:1a:7c:e9:39:56:3e:03:2e:0f:51:71:a0:77:
a0:b0:b6:e8:b9:a7:a4:e6:ce:51:be:b6:cf:fd:bb:bf:d2:52:
0a:48:59:2c:71:8b:d7:c7:e0:b5:b9:7e:7d:d3:a6:11:65:7e:
ea:34:49:15:d4:1a:ac:15:7a:f6:cb:3a:34:9f:37:90:ad:56:
0f:55:75:1e:a2:be:f3:95:8f:39:33:02:e0:49:fd:37:7c:54:
d6:61:36:3f:e8:eb:88:a6:97:9b:bc:df:a1:f0:69:4d:e1:80:
cd:7c:fb:d9:5a:cd:3e:60:bc:96:6b:3b:da:60:76:38:4d:08:
67:2d:3c:e3:29:02:48:6d:74:03:0e:7d:26:2f:c9:65:1c:81:
5f:42:d5:fd:bb:d0:eb:bd:7b:c7:4f:0b:a6:39:6e:f2:7d:5c:
60:5c:07:49:2d:ca:ab:7f:64:9b:60:a8:88:88:47:b9:c1:20:
d7:e7:79:08:47:4c:c2:8b:f9:f6:8c:b2:1e:06:47:0b:70:56:
1e:24:b9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:13 2025 by rpki-client