Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SJimUSqsQuIX0CKnJK99JXJmZ2M.roa
File: SJimUSqsQuIX0CKnJK99JXJmZ2M.roa (raw, json)
Hash identifier: EwYTacvbzptyIIwaXvWfQO/i11I1GtfnU2k4/n5MuRU=
Subject key identifier: 48:98:A6:51:2A:AC:42:E2:17:D0:22:A7:24:AF:7D:25:72:66:67:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A04B3C54EC5B4A9A5AAE8F1B5A8020B37
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SJimUSqsQuIX0CKnJK99JXJmZ2M.roa
Signing time: Thu 17 Aug 2023 18:13:24 +0000
ROA not before: Thu 17 Aug 2023 18:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:04:b3:c5:4e:c5:b4:a9:a5:aa:e8:f1:b5:a8:02:0b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 18:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4898a6512aac42e217d022a724af7d2572666763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:c7:6b:a9:b5:ce:96:1e:79:3f:0e:ad:4f:
88:bd:0d:a2:b8:d0:a7:ec:6d:83:45:96:5f:3f:f0:
8d:5d:ab:99:5d:5a:7a:75:b8:fb:1c:82:fc:12:31:
25:b0:d7:e8:4e:5d:04:ee:77:b7:13:5f:15:f6:02:
21:55:23:28:74:fe:75:37:70:50:7f:da:62:fe:6b:
9d:01:90:b0:ca:ce:bf:53:ed:56:7f:ea:f0:83:69:
b3:98:84:23:7a:7f:f7:ba:a0:ee:f8:af:e1:4b:c9:
90:d2:56:2d:b5:ea:d7:48:5e:5f:f1:ed:c4:16:8c:
0c:cf:eb:37:6c:5f:ff:57:9e:f9:77:80:f0:3a:61:
eb:41:f8:17:83:ca:68:1d:fd:5b:dc:9c:29:e1:8c:
76:ed:35:aa:59:9c:ec:f3:48:18:c8:12:8b:79:09:
eb:8c:05:6c:8a:66:8c:7c:c9:e9:b4:79:98:a5:40:
48:e6:3f:be:3b:d1:4a:77:fb:c8:f3:d5:f5:fc:f5:
1c:31:1f:b0:3b:0e:63:c3:29:69:a5:9b:d4:16:da:
9d:b3:6a:cb:bd:54:47:b4:62:05:2f:76:e1:06:70:
59:7c:3f:90:5f:38:ec:38:c9:df:a3:fe:bb:cf:8e:
ce:f8:3a:99:0d:a6:df:c2:df:ce:62:4b:3b:c9:7d:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:98:A6:51:2A:AC:42:E2:17:D0:22:A7:24:AF:7D:25:72:66:67:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SJimUSqsQuIX0CKnJK99JXJmZ2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:42:99:4a:02:35:dd:b6:74:9b:fd:0a:d7:b2:f8:52:e7:5b:
e9:c2:8e:66:54:c5:6e:c6:63:71:c8:0d:63:fa:fb:ca:49:35:
53:ab:3e:c1:79:2e:38:35:6e:17:1e:cd:3f:eb:9a:ac:2c:7c:
4b:0e:c6:7f:af:48:e7:fc:e1:f4:3e:35:39:3f:b6:13:7c:91:
3e:07:d4:79:a0:b3:a4:a7:fc:6b:57:4f:c9:3b:15:57:6e:e6:
24:f6:22:c3:56:e2:74:e1:38:36:e3:cc:d5:aa:b1:f2:00:14:
c8:e3:19:2c:72:49:02:73:96:89:00:2e:d7:28:59:f9:9c:44:
79:2e:ac:4f:9e:a1:6e:33:89:78:33:fb:c7:97:1e:a8:76:15:
31:65:6b:ae:43:21:07:11:bc:33:d6:4f:5e:3b:05:2d:a7:1b:
b5:14:f3:42:71:ca:18:3d:db:b9:ca:20:03:34:3a:b0:9d:63:
7f:21:67:02:8c:a6:eb:0a:5b:d6:e0:c7:74:df:75:cd:87:42:
84:ac:9e:0a:d7:59:7c:df:fb:69:f6:86:de:d1:a1:f8:f9:26:
4e:97:9f:ee:89:dd:d1:8b:15:23:b0:1d:39:a5:31:4f:10:60:
e7:08:1a:89:b5:ff:34:00:11:f2:9c:f3:58:92:85:a6:53:3c:
e7:6f:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:33:59 2025 by rpki-client