Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j5nLn4ahzGWCmuI-kXzMcKBgBIU.roa
File: j5nLn4ahzGWCmuI-kXzMcKBgBIU.roa (raw, json)
Hash identifier: qK45Cf9347O49Q7JwiFwnt320G477bU/ta9AuBvPTas=
Subject key identifier: 8F:99:CB:9F:86:A1:CC:65:82:9A:E2:3E:91:7C:CC:70:A0:60:04:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018961A0247439AD046E439E8F88C1EEF3F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j5nLn4ahzGWCmuI-kXzMcKBgBIU.roa
Signing time: Mon 17 Jul 2023 02:13:52 +0000
ROA not before: Mon 17 Jul 2023 02:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:61:a0:24:74:39:ad:04:6e:43:9e:8f:88:c1:ee:f3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 02:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f99cb9f86a1cc65829ae23e917ccc70a0600485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:aa:99:d6:2f:fb:9c:36:5e:b3:73:43:f3:
db:21:54:b2:a2:e1:be:66:be:a1:bc:4c:ad:f3:64:
06:55:c8:9e:3a:73:29:37:de:5e:e8:e1:49:16:d9:
b6:7b:8e:14:f6:c1:94:06:c3:83:0a:56:a1:6a:78:
43:b5:30:35:1d:11:2a:a0:8f:c7:01:31:1b:5c:49:
9a:a2:c5:6c:97:98:e7:20:4f:e6:10:96:a5:97:96:
10:20:cc:98:4c:38:e3:71:5d:e8:c0:f7:ab:c1:da:
55:11:17:0c:c8:95:d4:57:10:b3:32:af:30:25:5a:
47:95:f3:00:f1:ee:3a:76:42:76:bc:ff:57:84:b8:
d8:a0:5d:2f:ac:73:ea:0e:35:55:2a:ec:18:b3:07:
cb:62:e4:26:c6:d1:d3:25:17:ea:a9:a2:6e:9e:f0:
c4:4a:69:ba:58:d7:35:da:19:6a:d2:ac:34:4c:56:
16:6f:40:7c:e1:ec:14:ad:a0:bb:5b:2c:86:93:3c:
63:8f:c8:c0:7c:84:47:4e:82:88:ea:88:ef:47:df:
35:d6:d2:33:f0:e9:5a:97:4f:23:82:98:87:c0:3f:
e1:22:b0:ad:41:24:80:e6:ad:35:76:af:26:5a:a6:
e1:6a:9d:9d:9e:cc:13:fa:4a:cc:e4:4f:e7:be:cb:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:99:CB:9F:86:A1:CC:65:82:9A:E2:3E:91:7C:CC:70:A0:60:04:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j5nLn4ahzGWCmuI-kXzMcKBgBIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:09:2c:f1:b9:67:f0:e0:db:e6:28:c2:ff:b1:95:37:30:1f:
fa:d8:08:54:a8:de:2b:a0:78:da:d6:f8:d9:77:43:b0:53:e0:
f6:85:ca:56:ef:2d:f5:bf:d5:43:3e:d6:12:ce:54:4b:bf:16:
da:31:c9:73:b5:6e:a3:17:de:26:bd:80:0d:f5:cc:b0:c8:a6:
e2:2b:89:d0:71:ed:1b:44:64:80:3f:00:81:11:0c:12:10:d3:
31:a5:83:ca:08:8e:93:8e:b8:9d:55:eb:23:50:ac:14:5f:f3:
f9:5c:16:ff:83:2b:39:79:e5:7c:6e:1a:6c:72:a1:8e:31:ab:
23:e4:c9:e4:8d:e7:60:d8:3b:db:f8:78:6e:8b:89:a6:fe:76:
7d:c2:b7:ba:31:fc:a2:45:68:59:15:d7:24:82:84:ab:ce:cf:
c4:f9:f7:77:bf:4c:be:bf:b9:19:84:c8:7c:9b:7e:8f:cf:b4:
18:3f:3a:66:8e:3f:8d:f6:ed:64:79:11:50:41:be:b2:a4:91:
63:aa:8d:c4:87:77:16:6f:2a:4e:d1:af:55:84:98:22:86:fe:
97:3f:6f:27:3f:01:ca:48:af:56:17:77:f3:4c:ec:5f:6d:1a:
b9:bc:83:8b:41:0c:8f:43:ee:02:29:a0:c9:f3:32:70:58:56:
ff:18:a4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:35:52 2025 by rpki-client