Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cjV96t7MjtgNYwGWIHHVRns8cHA.roa
File: cjV96t7MjtgNYwGWIHHVRns8cHA.roa (raw, json)
Hash identifier: gowohZvYtU/helLYGeFZDnr+t7h85OL9UnEPbi7jhxs=
Subject key identifier: 72:35:7D:EA:DE:CC:8E:D8:0D:63:01:96:20:71:D5:46:7B:3C:70:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D65CE0AA03D3D303B9BC634849430F9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cjV96t7MjtgNYwGWIHHVRns8cHA.roa
Signing time: Tue 08 Aug 2023 18:15:58 +0000
ROA not before: Tue 08 Aug 2023 18:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:5c:e0:aa:03:d3:d3:03:b9:bc:63:48:49:43:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 18:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72357deadecc8ed80d6301962071d5467b3c7070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:2b:d1:32:f7:8e:7a:81:58:c8:84:b3:df:
a7:dd:52:f8:8c:79:99:0b:ca:fb:11:37:ba:08:ce:
08:19:e6:6b:61:00:84:70:c5:c5:fd:9b:2c:ff:33:
74:b0:cc:66:96:b6:ec:5f:70:d1:02:1f:59:8e:5a:
fc:71:3e:f5:9a:b6:fa:04:39:7d:99:7f:1a:4b:14:
55:6f:80:e3:5d:42:a6:c0:50:44:7e:a4:45:20:f7:
07:4a:76:8d:2b:92:8f:ed:0f:8a:c8:50:a8:56:a6:
05:ff:d4:48:33:36:4d:c7:f7:71:c0:72:13:57:e2:
08:e9:fe:d1:35:ea:14:56:0f:d9:08:a3:ce:4b:a6:
6b:da:18:66:cf:bb:91:e1:06:ed:43:56:02:e2:35:
93:1d:2c:d8:5e:3a:83:9e:63:a5:72:be:d9:18:0e:
48:b7:66:a9:87:a4:bd:0d:cf:4e:bf:e0:b5:c1:2a:
99:28:8f:46:7f:64:f3:c8:2d:e5:a4:dd:bd:44:55:
6b:89:1d:b6:b8:95:fe:01:15:b2:66:bd:65:b7:2c:
bc:ee:64:2a:fc:6d:12:3b:54:dd:cc:18:db:eb:f0:
ea:27:3c:f7:a5:9f:10:a6:d0:07:86:5a:0d:fc:1c:
51:e7:04:ff:ff:a8:ab:17:79:aa:15:b0:1e:d7:87:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:35:7D:EA:DE:CC:8E:D8:0D:63:01:96:20:71:D5:46:7B:3C:70:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cjV96t7MjtgNYwGWIHHVRns8cHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:a8:91:0b:67:b3:34:d4:18:83:e8:64:50:29:c8:44:24:d4:
3a:b8:7f:83:62:e0:48:f3:85:ed:76:c9:4b:31:c8:2c:08:82:
27:bb:33:4f:46:f4:ff:48:e9:d2:82:98:49:ca:5e:6e:35:b6:
cd:ff:03:ce:22:5f:a7:c4:50:d0:e5:fa:ca:79:44:7f:c1:33:
7f:aa:0c:16:16:b8:69:a7:a3:f6:37:cb:d5:5f:70:bb:d1:10:
32:e9:45:1e:58:6b:04:ac:95:5a:a6:78:69:cd:ec:ee:bc:74:
52:17:cd:5e:c8:c8:d1:33:5c:58:fc:2c:ef:c3:e1:cd:74:d4:
86:85:0c:45:83:da:bf:00:50:57:db:67:11:0b:d1:44:8f:d1:
24:67:47:bd:5c:a0:e7:78:b2:95:1c:bb:d5:c6:bd:3a:12:08:
cc:ed:be:a4:77:70:02:40:bb:a3:a0:a4:66:42:c7:84:db:04:
a1:d9:58:08:8a:62:68:91:47:9c:b5:6c:c5:66:9d:36:5e:3a:
9b:94:70:b4:7c:e3:fc:82:05:9a:3b:ee:21:5e:bf:7f:6e:24:
ed:99:fa:a4:7f:d9:45:99:f6:c6:bb:0f:64:c5:d4:11:a1:9d:
a7:24:ca:ac:e8:a8:db:00:2f:37:a9:57:fc:57:2a:b1:e9:b2:
00:42:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:44:57 2025 by rpki-client