Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jAA-4xdL_kPkRsvKcY6BTIMcj80.roa
File: jAA-4xdL_kPkRsvKcY6BTIMcj80.roa (raw, json)
Hash identifier: 4FnmrDgzN65RpFgLeygp02fiJMqf8dtMbNHBIMijoVg=
Subject key identifier: 8C:00:3E:E3:17:4B:FE:43:E4:46:CB:CA:71:8E:81:4C:83:1C:8F:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B404F42219435F68C46F17024AB138C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jAA-4xdL_kPkRsvKcY6BTIMcj80.roa
Signing time: Tue 13 Jun 2023 09:10:03 +0000
ROA not before: Tue 13 Jun 2023 09:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:04:f4:22:19:43:5f:68:c4:6f:17:02:4a:b1:38:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 09:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c003ee3174bfe43e446cbca718e814c831c8fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:bd:19:54:7f:26:e0:c4:35:78:20:ab:79:
4c:0b:32:e0:46:fc:ee:af:84:c0:9a:b4:47:7a:64:
e2:bb:0e:e9:c9:fe:21:95:6e:a0:ce:04:1f:0c:79:
30:8a:80:cb:b8:6a:b9:f4:43:f0:1b:13:ed:dc:96:
aa:a6:93:57:32:d5:3d:48:3c:39:2e:de:46:54:84:
76:da:83:74:f7:bc:8b:ec:8d:56:d0:cb:62:f3:32:
bd:0c:1f:a6:be:e6:59:d8:8b:d5:f3:a9:a2:56:b6:
48:77:06:86:5e:dd:41:96:fc:ae:ec:3e:f1:8e:51:
a6:e5:dd:6c:32:54:29:fc:2a:8a:a4:bc:09:78:8b:
ca:51:1b:19:e5:af:c8:d1:14:b4:6b:27:b6:3a:29:
b4:4a:73:aa:10:e5:b7:b1:02:57:00:3c:fe:df:f7:
2c:54:33:f4:b1:2c:94:49:4e:dc:bb:b2:36:ef:00:
3a:90:dc:34:aa:13:45:d4:5c:fd:a1:b9:ce:54:c1:
99:2e:f6:0d:de:93:37:49:e2:ac:04:1a:53:0c:56:
4e:d8:7f:e3:6c:75:62:f0:25:c6:cc:fe:81:ba:37:
e9:40:6e:9e:3e:88:a7:73:5d:81:4d:73:5d:40:0f:
76:57:e8:13:1f:20:b0:24:03:20:10:94:cd:07:11:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:3E:E3:17:4B:FE:43:E4:46:CB:CA:71:8E:81:4C:83:1C:8F:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jAA-4xdL_kPkRsvKcY6BTIMcj80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:9d:d0:69:77:a8:5f:5d:13:08:f3:b2:39:9c:dd:b0:b7:88:
25:4f:02:bc:4a:7a:8a:ff:99:03:f9:52:be:14:95:d2:c6:79:
cd:68:8c:66:9b:3e:c8:30:dc:9f:63:25:72:da:29:14:8b:87:
3d:6e:4c:76:ee:5f:c8:88:90:48:27:c7:5e:df:b1:44:0f:f0:
d6:32:df:d2:e8:ea:ab:f3:70:36:c7:34:c9:c0:ec:36:91:10:
02:62:36:72:5b:20:74:ad:45:75:da:6e:40:11:5e:30:90:cf:
d5:43:82:29:38:d3:25:a3:f5:ab:a3:d8:59:04:ca:42:70:84:
d5:c6:1c:54:f7:73:1c:26:c0:a8:cf:5a:1d:ec:94:95:17:18:
92:17:78:30:c3:fd:1a:82:9f:0c:0b:7d:68:1b:ed:45:be:39:
37:d9:16:40:74:b5:02:76:bf:12:9d:b5:09:50:25:49:ec:66:
7d:e7:35:39:7f:df:aa:83:ed:75:94:80:9b:ff:78:89:e4:a7:
e0:78:89:d2:17:fd:bc:c0:67:6d:b8:74:dc:01:09:92:f9:e2:
95:fa:37:c2:2e:4b:73:a3:46:b9:07:96:e8:25:e1:b2:b2:ed:
c5:71:ba:05:91:de:34:0d:fe:5c:08:2f:12:d2:06:25:4f:50:
8b:45:2b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:06:15 2025 by rpki-client