Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jAHXSy9Qlb3IgUG7Pexc_rBBxUM.roa
File: jAHXSy9Qlb3IgUG7Pexc_rBBxUM.roa (raw, json)
Hash identifier: WHLWPyzgBUrlhgIp+xBBbYb56JeKXhVhC+LEJASYGNk=
Subject key identifier: 8C:01:D7:4B:2F:50:95:BD:C8:81:41:BB:3D:EC:5C:FE:B0:41:C5:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E071C1C1FC8A0CC6024F300776E90C20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jAHXSy9Qlb3IgUG7Pexc_rBBxUM.roa
Signing time: Wed 03 May 2023 07:09:24 +0000
ROA not before: Wed 03 May 2023 07:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:71:c1:c1:fc:8a:0c:c6:02:4f:30:07:76:e9:0c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 07:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c01d74b2f5095bdc88141bb3dec5cfeb041c543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:fc:80:95:62:82:9e:f9:f0:69:67:ae:aa:
44:fa:5a:30:14:b6:2b:5f:c0:01:53:18:05:ff:9d:
fc:d9:8f:c8:d6:6f:b5:a0:fe:4e:78:8f:34:bc:ed:
fc:bc:10:76:11:5a:fc:aa:be:f5:bf:e8:27:eb:97:
70:ad:b2:f7:87:a2:91:84:29:a1:23:9e:e6:84:55:
a7:cf:6b:93:72:72:1a:dc:f4:07:2a:c0:dc:30:a7:
30:72:b6:08:83:8a:f7:b5:71:36:81:0b:d1:b9:1b:
02:68:2e:0c:b3:94:06:a4:cb:48:14:76:d2:dc:02:
49:6c:30:27:8b:b7:86:e7:46:56:69:11:92:dc:ae:
78:e7:95:68:92:83:a8:40:d1:fb:c1:21:6f:48:79:
5c:e6:8f:8c:3e:e5:ac:65:9e:fe:bc:d2:ca:9c:fc:
a6:af:bc:a6:94:95:34:e6:36:4b:d6:79:c4:d8:8b:
ac:85:da:08:60:2a:95:54:17:f6:0e:70:f5:34:33:
14:87:d2:e9:5c:26:b6:a6:3f:e2:1a:83:8c:8a:69:
8b:96:de:10:9f:c3:1e:06:e3:8a:9b:d5:75:9e:56:
12:82:56:70:90:f8:12:68:45:39:07:26:c3:7d:d5:
70:e8:6c:03:02:aa:2f:18:a3:78:30:13:82:76:a8:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:01:D7:4B:2F:50:95:BD:C8:81:41:BB:3D:EC:5C:FE:B0:41:C5:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jAHXSy9Qlb3IgUG7Pexc_rBBxUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:00:b8:c9:d2:a3:98:1f:0b:44:8a:83:b8:b9:94:95:10:7b:
b1:f4:52:5f:e7:bf:f7:e6:5e:5a:cb:15:ee:6a:32:63:7e:6a:
4d:b4:de:ac:b0:63:9f:f7:5e:ef:6c:f8:93:41:9a:41:8e:bc:
13:03:8f:31:22:3e:92:7f:d6:20:5c:a7:97:8a:3b:73:1b:52:
2a:80:10:e4:38:61:ce:1f:4d:9a:d0:d5:45:ea:07:a1:34:46:
80:d1:6c:0d:19:3a:6c:89:b4:1f:02:a0:71:54:34:86:de:b0:
d8:af:62:61:cc:f1:cb:b9:e8:e7:0e:f5:c2:f4:b4:a8:e1:84:
4a:9f:ec:c4:7a:70:b7:bb:ff:9a:a6:2c:6c:bc:85:a1:fe:f1:
24:08:36:c6:3c:7d:cd:c1:05:1b:57:85:eb:ef:ce:67:63:9c:
32:ff:de:16:3b:01:c1:5d:d9:5e:0d:1b:a5:7a:5d:10:52:f0:
96:7e:2e:72:cb:7e:45:04:15:02:e6:ee:c0:b6:cb:c6:cc:a4:
ad:b6:ff:ed:81:78:07:8c:ab:a7:82:ee:74:3a:08:4b:7d:3f:
86:f3:55:32:ff:86:af:b4:82:d7:9e:e3:06:61:b5:7d:88:33:
1f:f1:98:5b:f3:f8:de:0f:c1:dc:c6:9c:7f:cf:8b:c4:c0:43:
58:46:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:00 2025 by rpki-client