Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_jVWBnYwJQOieS6Kxj2PexOVfjE.roa
File: _jVWBnYwJQOieS6Kxj2PexOVfjE.roa (raw, json)
Hash identifier: dv122EQsxJdyPL69tszb3w6uQ3HMjeVwMdlW632RMcY=
Subject key identifier: FE:35:56:06:76:30:25:03:A2:79:2E:8A:C6:3D:8F:7B:13:95:7E:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C9E7114D3AD755809FD7B899F9CCFB0B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_jVWBnYwJQOieS6Kxj2PexOVfjE.roa
Signing time: Sat 17 Jun 2023 15:09:03 +0000
ROA not before: Sat 17 Jun 2023 15:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c9:e7:11:4d:3a:d7:55:80:9f:d7:b8:99:f9:cc:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 15:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe35560676302503a2792e8ac63d8f7b13957e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:ef:c9:24:54:75:75:47:11:8f:76:06:75:
e8:a6:e1:6c:34:94:f0:ab:49:3f:82:5b:59:69:8c:
29:bf:37:02:39:a1:8d:a4:f1:78:51:b3:5c:72:cf:
53:3d:1c:53:c1:8e:82:4d:80:4b:67:0d:fb:90:06:
e1:07:5a:b4:50:92:f1:51:25:be:63:a5:d4:17:04:
aa:f0:54:d9:62:bb:05:ff:4e:da:60:81:20:a1:7b:
83:a2:5e:f5:5c:15:46:48:bf:2b:63:31:78:45:0f:
51:f6:de:51:58:7b:24:0e:0b:7e:d3:c5:95:12:fd:
43:e4:a4:3f:0d:bc:41:18:b7:e0:1c:48:ff:8b:5a:
7f:43:62:21:b0:73:85:09:a3:63:1f:1a:67:96:a4:
6c:be:d8:f4:65:60:15:24:4f:7b:79:25:ac:f1:80:
d8:8e:e5:83:77:eb:9f:84:05:39:f3:bc:67:a8:3f:
20:4a:08:c6:83:df:3d:d8:0d:35:40:5a:83:76:b8:
28:8d:ff:51:36:33:58:b2:41:ef:e0:21:00:9f:fd:
8b:cc:b7:c2:52:d0:a0:30:5f:65:19:dd:8e:a1:a4:
8c:24:97:5e:ba:6d:6f:7e:5b:28:02:ec:ed:f6:f1:
1b:e8:d8:5c:1c:78:ce:40:5d:87:d5:93:b4:f1:7a:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:35:56:06:76:30:25:03:A2:79:2E:8A:C6:3D:8F:7B:13:95:7E:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_jVWBnYwJQOieS6Kxj2PexOVfjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:92:79:e0:e1:93:45:60:0a:e3:70:b7:ec:d8:32:f7:5c:5e:
9d:88:de:1a:53:96:8a:a7:59:ce:ea:83:9e:aa:17:b1:8b:78:
6b:14:2c:52:fa:15:9e:b3:4b:1b:16:ce:6f:9a:09:51:c1:2d:
33:35:57:d2:86:e6:8a:93:b1:ee:4d:ca:14:64:b3:33:33:1f:
5c:68:92:61:62:90:82:83:7b:dd:ac:98:d6:05:45:04:d3:6d:
85:b7:4d:7a:db:e1:9c:28:cb:26:20:85:0f:20:d2:0f:b6:af:
4d:94:b1:da:2d:71:56:5b:eb:8a:3f:74:26:ff:b9:cb:11:28:
2e:68:0e:d0:c9:55:96:9d:b1:5f:9f:fd:9b:a9:a3:fc:5d:9d:
26:ab:e8:2c:c5:e2:40:b2:a5:89:1b:da:91:f8:bc:d0:85:b7:
06:b8:fd:5f:85:1b:d5:b8:65:87:db:e5:2b:d1:c2:18:b6:fe:
de:52:23:ed:52:5a:ec:b2:f1:8a:92:68:07:47:31:a3:09:fc:
b4:b2:e9:cd:34:7a:4c:90:c2:1e:a3:df:d7:fd:ac:2e:e1:05:
fe:46:f6:fa:51:5e:8a:18:86:78:99:ea:78:f7:23:8d:22:27:
cc:91:5d:f8:bb:76:04:60:4d:c3:dc:d5:45:b2:34:c1:ae:da:
7d:96:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:35:15 2025 by rpki-client