Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j031BnftBUGc9EXNUTy2jRiu2sQ.roa
File: j031BnftBUGc9EXNUTy2jRiu2sQ.roa (raw, json)
Hash identifier: d5ngcS+jmUt5pIDK0A6bgOamKkPaxCNohXmN92Zyheo=
Subject key identifier: 8F:4D:F5:06:77:ED:05:41:9C:F4:45:CD:51:3C:B6:8D:18:AE:DA:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E52119ED70DE148B046FD812CDE63C11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j031BnftBUGc9EXNUTy2jRiu2sQ.roa
Signing time: Fri 11 Aug 2023 15:04:58 +0000
ROA not before: Fri 11 Aug 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:e520:67e7/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:21:19:ed:70:de:14:8b:04:6f:d8:12:cd:e6:3c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f4df50677ed05419cf445cd513cb68d18aedac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:95:28:aa:fd:de:b1:ef:2c:f9:20:57:7b:
54:60:23:57:75:ad:4f:3e:06:51:4d:7e:94:c9:1a:
86:f4:26:2b:a4:03:cf:23:86:cc:8b:b2:6c:26:f3:
91:02:0e:0e:ed:14:a5:a4:e7:fd:39:77:ca:64:60:
1a:46:ea:83:af:fc:6a:29:1b:7b:e7:fc:d2:06:45:
8e:d4:40:9e:68:27:d6:f8:b5:f0:60:15:23:46:03:
5e:fb:d5:3a:4d:67:7a:3c:b3:41:a2:6c:07:eb:d1:
cc:3c:e2:10:bb:d6:be:d3:29:2c:5c:b8:c8:a0:1f:
2f:5c:47:6b:3f:67:90:de:fd:c6:83:8e:22:c9:2c:
28:97:03:36:e4:b3:a5:79:a7:54:33:dc:5e:77:b5:
05:bf:6c:63:01:f8:5d:2d:5b:f7:f1:1d:42:f0:a8:
a7:d1:6b:13:77:97:a0:cb:2d:c4:1d:6f:cc:ca:52:
d9:49:3d:13:91:51:94:13:71:92:81:91:ed:a9:ee:
21:3b:c4:e8:60:f0:ae:35:d0:a3:aa:70:68:a2:c3:
4a:ff:8b:1c:40:60:7a:71:0a:10:15:d1:00:c9:4f:
6b:67:57:81:54:63:7e:0f:12:38:23:8f:5c:70:7c:
57:8c:76:a5:7e:7b:80:6d:bf:8d:90:45:11:e0:f6:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4D:F5:06:77:ED:05:41:9C:F4:45:CD:51:3C:B6:8D:18:AE:DA:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j031BnftBUGc9EXNUTy2jRiu2sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:4b:21:08:3f:a3:68:68:d5:97:9a:e0:cf:63:bb:66:cb:6b:
f0:a3:62:fd:46:3d:de:99:23:d3:d1:0b:cf:b8:93:e2:54:ec:
e9:e0:cc:aa:40:04:28:be:2f:73:67:fb:83:cb:3a:54:11:96:
65:63:65:c1:89:0c:b3:36:97:c6:ea:0a:a5:ba:5f:32:5b:7a:
4d:9d:2b:00:53:1f:59:2c:19:f0:12:12:cd:1d:9e:0b:8d:04:
64:3d:52:5a:cb:7b:c9:df:39:f2:51:00:2f:eb:4b:71:af:42:
a1:43:4c:b5:89:70:47:88:7b:8b:20:49:11:35:8a:72:86:37:
dc:61:19:2c:b3:71:9c:db:23:91:fd:87:aa:4b:ef:5a:1f:97:
c8:c4:4a:4f:c3:f7:10:c9:0b:26:d0:21:eb:d0:ec:3d:75:93:
9b:9a:70:f4:71:5f:dc:4d:55:66:0b:11:84:e8:ee:f6:98:26:
2e:f6:10:6f:fd:09:ef:7b:b4:b3:d4:b1:b0:77:9a:60:eb:6b:
05:54:7e:67:ad:0d:83:63:e1:33:41:35:3d:42:df:85:07:83:
01:0e:a0:9b:68:e6:c8:d8:08:59:89:fd:db:6d:2a:56:df:5b:
7c:24:36:97:e9:f9:39:4e:a3:6f:61:23:a9:03:e6:e2:59:4c:
c3:87:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:12:03 2025 by rpki-client