Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sjz7ASejQMp8mYRif6WyT8qnGFQ.roa
File: Sjz7ASejQMp8mYRif6WyT8qnGFQ.roa (raw, json)
Hash identifier: WNN06X0miELoSlzEuj/cbXJUuPrT9LtvWn4Um/Mj578=
Subject key identifier: 4A:3C:FB:01:27:A3:40:CA:7C:99:84:62:7F:A5:B2:4F:CA:A7:18:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867CB0A7B2C347C1AD6BD9268B48770A5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sjz7ASejQMp8mYRif6WyT8qnGFQ.roa
Signing time: Thu 23 Feb 2023 05:13:17 +0000
ROA not before: Thu 23 Feb 2023 05:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:b0:a7:b2:c3:47:c1:ad:6b:d9:26:8b:48:77:0a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 05:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a3cfb0127a340ca7c9984627fa5b24fcaa71854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:01:b8:32:a0:a1:36:2a:d6:bb:45:7e:a1:
5c:39:45:c2:26:1a:1f:83:1a:cc:a9:1a:15:c6:c1:
71:0c:12:f0:b7:b4:20:19:37:b3:a0:4f:ac:96:b6:
66:30:fc:6d:48:ef:2b:25:e7:76:af:9c:53:22:1c:
f3:f9:d5:e3:fa:e8:77:56:cd:c6:65:91:5f:f9:cb:
91:ce:c6:c9:18:d8:28:23:2d:5d:87:51:1f:55:a5:
24:f1:42:d8:aa:c4:03:57:24:0c:19:8d:a6:b7:d0:
7d:c5:76:2d:15:6f:e6:d7:84:6b:a2:65:1b:e5:7d:
b9:43:41:27:10:f8:8d:cf:2a:7e:26:69:8e:8d:cd:
83:c1:d0:51:6f:ea:82:08:94:47:a5:8e:12:ba:73:
b7:51:2d:48:8a:ff:c4:44:13:0a:09:8a:3b:2a:48:
2d:af:17:13:2b:76:13:c2:b7:d6:80:d9:c8:71:0b:
e4:a1:82:55:16:d1:3b:e1:93:fd:66:77:a7:a3:31:
95:35:65:3e:43:03:6a:39:85:7d:77:24:13:44:1c:
16:5c:10:d3:b1:d1:c7:2a:a8:20:48:89:b0:b6:31:
f1:6f:c4:f0:5f:bf:be:b9:89:6d:5c:d9:23:d2:b2:
42:fb:0f:86:02:b6:a6:55:4b:cc:73:dd:ec:30:01:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:FB:01:27:A3:40:CA:7C:99:84:62:7F:A5:B2:4F:CA:A7:18:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sjz7ASejQMp8mYRif6WyT8qnGFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:e2:32:8f:66:51:c7:72:ab:d9:df:a7:2b:74:2c:54:5d:74:
c4:06:40:7e:09:04:1b:a6:7a:97:6c:25:7f:da:5e:8e:19:a8:
76:3e:21:d6:45:7b:f8:8d:4c:39:52:ba:3d:05:28:d0:1d:87:
94:63:98:a1:59:bf:38:79:7c:3c:1f:3d:4b:7d:9e:78:b6:b2:
54:74:7f:65:4a:21:af:c0:58:4a:b1:66:9b:63:5d:fb:8a:e2:
c1:03:bd:d8:de:9a:de:18:ee:20:8c:39:1a:88:63:80:9c:3f:
6b:13:59:d2:01:f5:bf:6e:31:63:88:f8:1a:50:d3:07:e3:56:
35:a5:be:52:08:bb:00:9b:08:be:2c:46:fd:22:df:aa:b9:a1:
28:d0:b9:1b:38:de:f8:45:21:39:fc:19:28:bb:43:f8:9a:54:
ef:52:c9:09:a1:82:5c:10:f5:00:4b:99:60:8c:a9:62:e2:b8:
f7:76:84:ef:79:9c:78:4e:e8:e5:6f:00:a9:42:bb:a9:b7:19:
6b:21:04:59:ee:b5:11:27:49:9d:0f:9b:0c:ed:75:4a:fc:54:
fc:fb:20:ab:1e:35:ab:01:00:71:a0:44:38:8f:0b:36:37:56:
2c:0c:18:eb:33:51:bd:cb:3a:f3:6a:05:5a:b4:6e:1e:a4:a3:
b9:0e:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:55 2025 by rpki-client