Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jDiEHCXwd05N10dy0mm3_GyNlnc.roa
File: jDiEHCXwd05N10dy0mm3_GyNlnc.roa (raw, json)
Hash identifier: +ElrqILVlNjCrKwuMU5HV9HhLssch9Qhn17bYqXShik=
Subject key identifier: 8C:38:84:1C:25:F0:77:4E:4D:D7:47:72:D2:69:B7:FC:6C:8D:96:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F8EF24EA2918BE65190C094E2E330B02
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jDiEHCXwd05N10dy0mm3_GyNlnc.roa
Signing time: Sun 19 Mar 2023 08:14:27 +0000
ROA not before: Sun 19 Mar 2023 08:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f8:ef:24:ea:29:18:be:65:19:0c:09:4e:2e:33:0b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 08:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c38841c25f0774e4dd74772d269b7fc6c8d9677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:5b:61:ce:28:1d:a9:34:7a:e9:99:ff:5b:
d0:1d:25:0d:43:9a:6c:20:92:70:ca:14:20:f7:3b:
0b:16:37:b0:ce:6b:63:61:50:8b:87:5c:8e:13:41:
78:1a:4e:dc:57:06:91:51:9b:f0:31:78:e2:7e:04:
61:b5:47:dc:95:f8:ea:d9:53:78:12:88:44:e1:55:
12:e3:70:19:60:de:3e:f4:96:25:76:c7:ac:af:7c:
54:a7:c1:5a:64:50:98:03:0d:58:d8:e5:b6:1c:cb:
d2:0d:8e:b9:d5:e0:6f:62:ea:81:f4:98:2b:21:2c:
9b:19:ae:2c:90:64:55:d2:88:24:ba:b4:7e:96:67:
ef:75:13:ae:4b:01:89:4f:8a:58:e3:d9:32:3e:43:
5a:bf:de:cd:eb:10:9e:97:7e:9c:db:2e:79:79:ce:
ce:c5:4a:e2:6c:20:06:16:aa:4e:67:73:77:c5:3c:
59:92:c6:40:ed:26:d0:c5:df:74:50:1b:27:9d:11:
36:4a:6c:7f:f3:29:73:f9:5e:8e:53:c1:84:34:d7:
dc:9d:bf:ee:42:90:86:91:fa:5e:56:5e:bc:1b:f8:
ed:dc:db:7a:43:e5:c0:14:9b:47:70:6a:11:97:23:
80:b7:b6:4c:6b:fc:8d:11:b0:22:aa:e5:d9:9a:05:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:84:1C:25:F0:77:4E:4D:D7:47:72:D2:69:B7:FC:6C:8D:96:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jDiEHCXwd05N10dy0mm3_GyNlnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:d7:22:95:22:76:b3:61:d0:67:5f:e2:92:ac:09:fd:7c:2f:
ac:b1:88:ae:a3:bb:f6:4c:5d:bc:9a:97:d0:56:4f:cc:01:db:
df:72:23:2a:30:5a:f1:a5:fd:0f:83:c3:ba:9c:40:11:0d:f1:
01:9a:e0:d9:d6:b9:52:91:07:db:83:dc:df:01:30:1b:f5:ce:
68:89:2e:52:bb:4c:0f:40:18:49:0d:c5:f5:0b:3b:24:2f:17:
e9:78:b5:3c:2b:78:ad:bd:57:14:06:02:47:98:ec:5f:28:c0:
47:67:a5:a6:70:45:e8:8d:81:91:2d:b9:30:4f:bf:94:97:f1:
55:bb:02:f9:32:c3:08:ac:ee:55:ce:80:51:e0:e3:98:c5:1d:
c4:e1:40:22:3a:f9:40:e1:5b:7b:df:9b:b0:e2:fc:ee:d8:7a:
1d:85:ea:d9:be:e0:92:47:d6:6e:ca:98:b3:6d:3e:35:a5:21:
24:5d:34:ac:95:fb:6b:73:34:5c:85:d9:d0:fc:3d:6f:a6:4b:
2c:57:71:55:14:04:bc:2c:a8:19:89:f2:16:a0:8e:8b:f8:21:
a7:c5:14:af:aa:6a:b5:a2:ac:00:a1:11:15:30:97:e8:e5:27:
24:1d:23:60:c4:0d:8f:15:18:4b:57:6a:04:54:fe:b9:1a:d5:
73:e5:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:23:19 2025 by rpki-client