Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jCGZj8RgPPpmSUwqJVadQj4r9Tc.roa
File: jCGZj8RgPPpmSUwqJVadQj4r9Tc.roa (raw, json)
Hash identifier: CzapOHywg7wiClpBKVwIcL2Jt4HU2CN1/dF/U4sIetQ=
Subject key identifier: 8C:21:99:8F:C4:60:3C:FA:66:49:4C:2A:25:56:9D:42:3E:2B:F5:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01847B399FB4913F22651106A4404F72B3CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jCGZj8RgPPpmSUwqJVadQj4r9Tc.roa
Signing time: Tue 15 Nov 2022 12:18:04 +0000
ROA not before: Tue 15 Nov 2022 12:18:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:39:9f:b4:91:3f:22:65:11:06:a4:40:4f:72:b3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 15 12:18:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c21998fc4603cfa66494c2a25569d423e2bf537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:0d:3f:e8:33:5c:a4:21:cb:50:b6:ec:9f:
eb:98:5e:98:b6:50:70:2e:66:a4:93:32:fd:f8:dd:
a6:c4:b7:98:fe:13:72:9a:89:26:53:40:9e:13:0b:
91:0a:5d:99:64:91:83:2e:eb:58:1c:9d:15:5b:78:
9b:60:e1:f2:b5:92:be:67:54:6d:56:17:a4:65:54:
fa:91:4c:96:f5:58:73:c7:2e:d9:20:32:22:69:5f:
67:5e:b9:46:2e:e8:66:4e:cf:db:c0:25:7f:3e:ab:
ff:91:5c:da:ff:11:ce:46:5f:24:09:cb:2e:7f:2c:
42:ce:f6:3f:a9:d5:c0:37:98:bc:9a:01:ec:76:09:
68:13:05:06:40:a8:4f:2e:d4:d0:35:ae:d0:24:9f:
26:bb:55:f6:f3:de:da:dc:57:00:e1:c8:b2:69:bc:
2a:5e:a2:7c:8e:03:51:69:2b:7c:94:33:fe:97:43:
46:5d:da:bb:f7:e3:1c:12:cc:92:85:9a:74:a6:97:
be:5a:29:7f:9e:a5:2a:f0:31:39:e1:ce:7b:62:97:
44:77:35:ba:4e:61:95:07:9b:81:c3:8f:bf:0f:11:
bc:74:0e:9b:c6:7a:5d:d5:fd:3a:ac:95:a3:01:5e:
3f:34:88:04:72:d1:ce:d8:69:bf:1f:78:2d:56:cf:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:99:8F:C4:60:3C:FA:66:49:4C:2A:25:56:9D:42:3E:2B:F5:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jCGZj8RgPPpmSUwqJVadQj4r9Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:ba:e9:2b:7b:6d:6e:c4:96:40:30:75:cc:55:69:1d:19:84:
c2:04:02:62:8b:29:f8:fb:d6:75:5a:c6:97:d2:47:dd:9d:37:
e5:d3:ed:9c:9d:42:a2:9a:c9:31:3d:b5:f5:ce:24:63:36:6b:
1d:f0:4b:47:50:c9:91:4b:5f:89:6e:32:7b:42:35:e7:8d:71:
55:28:f0:9f:3e:47:2f:6c:55:08:97:0d:f3:90:8f:49:3c:71:
3b:fd:c3:e8:f2:31:bc:14:16:93:24:ff:10:db:0b:13:96:0b:
52:d7:38:d0:38:d0:13:89:25:80:0e:10:ad:3b:84:f5:5a:01:
b4:8d:b7:62:4a:91:0d:e3:9d:98:fd:34:57:99:91:0f:dd:35:
a4:50:fe:9e:6f:8a:c3:b1:95:3e:c7:df:06:a1:c3:0a:a0:50:
5c:f1:31:72:8c:c5:9a:69:e5:8e:08:07:15:c5:8a:d1:4a:92:
8d:90:15:ad:f6:ce:b6:91:90:f2:fe:fb:80:4b:b5:56:93:4d:
e7:c8:62:bf:12:3a:99:d1:ec:e2:22:9f:0d:0f:88:67:9c:dc:
95:26:88:76:fe:c5:63:c9:29:6e:95:41:22:cc:2e:13:28:a8:
26:ac:02:33:d1:46:19:1f:cc:34:05:88:86:b6:c8:fe:70:8c:
3b:95:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:45:35 2025 by rpki-client