Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j26S9pyFLrU0x_9uGj7aKePxtIM.roa
File: j26S9pyFLrU0x_9uGj7aKePxtIM.roa (raw, json)
Hash identifier: 0yQtic0WQPjA4lmLEgwZs0JlNGuCVpGH+rSX3r7y2bQ=
Subject key identifier: 8F:6E:92:F6:9C:85:2E:B5:34:C7:FF:6E:1A:3E:DA:29:E3:F1:B4:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018469CE10053A2426790931A0B9CCB0EFB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j26S9pyFLrU0x_9uGj7aKePxtIM.roa
Signing time: Sat 12 Nov 2022 03:07:02 +0000
ROA not before: Sat 12 Nov 2022 03:07:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:69cd:25e5/128 maxlen: 128
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:69:ce:10:05:3a:24:26:79:09:31:a0:b9:cc:b0:ef:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 12 03:07:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f6e92f69c852eb534c7ff6e1a3eda29e3f1b483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:84:46:b6:30:7c:ef:c3:a8:83:28:d2:3a:41:
bc:bc:bb:c0:56:2d:4b:74:e1:c6:83:0b:cf:c4:21:
ef:31:4e:2e:bd:a9:27:ed:86:1c:14:5a:95:00:95:
24:0e:ab:ea:6f:eb:72:06:0e:45:77:42:4c:b0:15:
24:ed:7c:64:97:5e:77:a4:fe:9b:38:c0:e6:e3:21:
f1:c1:42:92:19:a2:34:0b:22:f0:bf:c1:1a:23:1e:
ee:4d:48:cf:07:90:2c:2d:7b:8d:fe:58:33:84:ef:
cb:04:36:72:bc:82:41:b6:de:91:e0:0d:3f:fc:6c:
7c:9d:c9:e4:26:5f:27:5a:42:d7:ff:b9:68:87:21:
01:59:ff:d5:f1:42:cf:d1:e8:0d:f7:ff:c8:be:a1:
04:14:31:98:9a:7a:23:cc:a7:f0:0f:82:c0:c7:2c:
57:95:47:1b:24:cb:f8:76:b5:74:8d:01:a7:42:20:
11:6a:16:3b:99:be:54:58:98:d9:8c:6f:c2:64:05:
37:03:0d:7e:4e:9e:0f:0f:16:04:1d:15:fb:0b:6a:
73:23:0b:1e:2c:16:58:0c:2a:97:66:ce:f7:72:ff:
46:af:51:a9:97:18:a2:be:ac:4c:90:e0:6d:ff:19:
49:73:dc:29:95:d4:30:66:fe:58:fe:04:d2:a3:42:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:92:F6:9C:85:2E:B5:34:C7:FF:6E:1A:3E:DA:29:E3:F1:B4:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j26S9pyFLrU0x_9uGj7aKePxtIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:9c:d1:d3:39:12:20:14:45:37:2b:ba:77:15:b8:46:d7:44:
9c:fc:c1:b1:33:2f:20:7f:50:1f:b3:8b:73:10:d1:3d:75:52:
78:b4:bd:a5:fb:01:f3:14:41:2c:f4:62:f5:0e:f8:7e:3b:e1:
f5:1b:72:d1:55:c6:70:de:c4:36:b9:1a:e7:10:26:6f:01:7b:
da:88:4a:1f:bf:62:33:a4:85:0a:6d:20:ee:3e:83:cb:b1:02:
80:03:a4:b7:f2:65:f5:bb:6c:11:ba:5e:2b:71:b2:18:b5:4b:
cb:0a:98:a7:82:f3:7d:d4:ff:48:53:e6:ca:d4:50:4b:01:18:
d1:5f:31:79:1b:14:b8:d8:74:2c:92:63:59:ec:49:b1:37:3b:
12:11:b3:95:fd:c8:62:8f:03:46:05:ec:62:0a:2b:4e:37:4e:
63:43:72:31:eb:b9:69:6e:24:00:a5:13:e2:ff:c1:75:75:14:
68:87:a9:cb:ce:4d:0a:7b:81:fd:4c:07:cb:11:85:41:77:80:
5b:b8:11:da:7a:38:51:50:9c:7e:fe:b7:2a:3e:46:3e:ec:b8:
5c:cf:a1:52:b5:63:a2:2d:9f:45:af:12:3b:15:56:49:24:b6:
94:79:2a:d2:89:ca:82:d5:2f:56:18:c7:8c:9b:71:51:36:30:
15:32:29:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:41:30 2025 by rpki-client