Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j7GuyoqFyz5sgrRfci1B3UIum-8.roa
File: j7GuyoqFyz5sgrRfci1B3UIum-8.roa (raw, json)
Hash identifier: an+gb6dPv7xOiWlOKcqzXW7HscsVB6AL1leud1oSW1I=
Subject key identifier: 8F:B1:AE:CA:8A:85:CB:3E:6C:82:B4:5F:72:2D:41:DD:42:2E:9B:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D85151D8F5836C35761E0B3738EC9E39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j7GuyoqFyz5sgrRfci1B3UIum-8.roa
Signing time: Mon 13 Mar 2023 00:14:13 +0000
ROA not before: Mon 13 Mar 2023 00:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d8:51:51:d8:f5:83:6c:35:76:1e:0b:37:38:ec:9e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 00:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fb1aeca8a85cb3e6c82b45f722d41dd422e9bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:8f:fe:7e:7c:56:f5:b6:3b:3d:71:3d:07:
de:c2:b5:51:0e:ff:a0:07:fe:25:3b:83:65:ba:3a:
87:78:9e:c0:17:aa:9b:0a:ad:75:d1:b4:41:50:30:
84:14:f6:02:d2:4a:73:45:14:9e:a5:90:3c:31:e1:
29:34:8e:df:a9:c8:ef:9b:49:b1:42:36:0a:e4:e5:
7a:5f:d6:1b:3d:41:c6:c6:24:c4:44:c8:25:dd:97:
76:31:d5:c1:96:61:31:00:55:51:04:61:64:25:ce:
f7:39:5c:e8:40:49:9c:3d:8a:d2:cf:b7:bb:44:95:
25:db:35:b5:73:f9:11:01:c6:39:bd:f3:c4:6a:03:
90:42:95:45:84:2b:c8:b0:f6:4c:9b:19:4c:8b:d0:
12:b2:2a:e8:a1:d3:ed:e3:1b:d0:34:ed:54:43:90:
48:d4:30:c1:b7:17:5b:48:7e:e6:bf:e3:ba:e5:ae:
3d:6b:8c:17:d5:86:42:d4:0e:c7:02:ad:fa:ac:60:
4c:6d:1f:f6:6a:04:9b:9d:6a:fd:8b:da:ee:e2:db:
e4:1f:49:f4:05:77:13:76:0b:53:4a:ff:04:21:4d:
ec:50:52:14:7d:a3:fc:d9:d4:3d:dd:0c:26:24:2d:
f4:15:6c:19:09:68:be:72:bd:5f:0a:7f:b6:d6:4a:
e7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:AE:CA:8A:85:CB:3E:6C:82:B4:5F:72:2D:41:DD:42:2E:9B:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j7GuyoqFyz5sgrRfci1B3UIum-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:36:de:97:54:83:33:6d:cd:d8:74:65:e5:8d:4e:e2:7a:25:
ed:7f:31:5f:8b:12:97:91:f7:63:b8:87:a1:e0:e0:ed:5f:0f:
ae:8f:22:93:6e:bf:fe:72:cf:8f:f7:b2:db:61:8c:a2:a7:d8:
f4:7a:48:af:38:f8:4b:94:be:bf:12:67:25:b7:00:6d:cd:ac:
3b:3f:bd:1a:af:9a:73:f0:14:63:04:76:19:9a:69:f5:77:5b:
4f:bf:32:bc:97:cd:f0:f9:3a:ed:ef:94:a1:10:9d:c9:30:b4:
86:0f:ba:a4:ad:1d:ce:18:38:3d:95:2c:84:0b:ad:63:d2:f9:
d4:c9:52:99:e7:0c:d5:60:9c:e7:f4:60:68:b5:38:40:cd:4d:
74:b0:a1:d6:bd:74:b4:10:f0:78:23:2e:70:34:ac:08:c8:d9:
65:4a:f1:4c:c1:0f:5f:8d:e6:02:71:73:53:90:52:b8:62:96:
a8:63:5e:eb:de:8a:a8:28:50:2f:6e:1c:71:82:ff:c7:6c:d0:
e1:26:9c:d0:c4:ea:fd:51:c7:14:29:8f:36:26:59:8b:3c:8e:
0c:15:be:b8:83:75:64:2b:a9:ce:82:a9:ce:bc:7b:3f:ed:93:
a3:03:de:69:73:6a:6c:97:11:c7:c9:0f:a0:6e:8d:fb:59:f3:
3a:cd:57:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:11:45 2025 by rpki-client