Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jHLa2-u5Yk6I86lWV6sFk-8WMVA.roa
File: jHLa2-u5Yk6I86lWV6sFk-8WMVA.roa (raw, json)
Hash identifier: W9lsLauvHbUuypzudPUImU0DF08LmpsBhZ3BFemg3/I=
Subject key identifier: 8C:72:DA:DB:EB:B9:62:4E:88:F3:A9:56:57:AB:05:93:EF:16:31:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018724B556D1F773D7114A81A8242DEF5DAE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jHLa2-u5Yk6I86lWV6sFk-8WMVA.roa
Signing time: Mon 27 Mar 2023 20:14:36 +0000
ROA not before: Mon 27 Mar 2023 20:14:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:24:b5:56:d1:f7:73:d7:11:4a:81:a8:24:2d:ef:5d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 20:14:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c72dadbebb9624e88f3a95657ab0593ef163150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:81:f7:91:6b:d4:a0:75:87:eb:0d:a1:88:91:
87:30:8c:b0:24:50:57:40:17:f8:26:24:4e:f1:b8:
d6:e3:47:d9:ad:fa:e5:d8:9e:c6:dc:30:80:03:25:
b0:14:f3:eb:a6:d9:e2:cd:c5:06:5b:dc:a5:c2:63:
d0:b6:48:35:20:d8:df:a4:1e:f0:57:50:ca:c0:0c:
9a:c1:52:ac:c5:66:9f:ef:a6:09:44:17:bb:33:50:
38:92:d9:0c:1c:d3:a9:91:70:9a:55:07:f8:5b:6b:
9b:09:96:ae:2d:a8:28:8b:bf:ce:aa:e8:03:1e:45:
60:d0:61:c5:b0:2f:42:56:72:4b:0a:99:ea:ac:8c:
a1:3e:ec:1a:2d:8a:12:cd:08:88:bc:07:1a:56:27:
34:fd:1d:18:95:b9:26:57:53:d6:e7:3a:c1:88:26:
27:e9:da:2e:cf:1d:75:87:fd:9a:3e:fb:ec:cd:94:
d4:d6:c8:07:00:52:2b:32:57:b2:12:57:7c:59:d4:
6f:e7:fd:ad:f5:e9:2a:02:e2:05:e4:a0:1a:37:d4:
58:82:e1:25:8a:8f:32:49:54:6d:78:aa:71:79:f2:
7a:34:fc:a0:19:46:24:e5:22:39:a2:65:ce:e8:cc:
b0:90:f1:23:ac:17:f4:8d:8a:0e:7c:9c:90:94:c7:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:72:DA:DB:EB:B9:62:4E:88:F3:A9:56:57:AB:05:93:EF:16:31:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jHLa2-u5Yk6I86lWV6sFk-8WMVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:3e:bb:37:b1:7d:0b:25:95:8a:af:4e:21:61:17:aa:99:f1:
86:2c:ca:1e:c0:cc:00:0d:7a:34:70:9d:4e:05:3f:8e:64:36:
a3:13:50:8e:bf:5a:e3:fe:ae:45:d2:10:34:74:fc:b6:bf:39:
6d:bc:bc:b0:b3:1a:b5:8e:03:e9:00:a1:48:35:08:1c:ec:4a:
53:00:eb:e4:15:44:38:3e:99:6b:9c:67:ed:b7:ee:2b:e8:aa:
af:3a:7f:19:fe:90:ec:f3:e0:ae:6d:27:45:bd:26:16:94:e5:
2d:3f:99:0a:de:87:f2:41:fb:4d:d5:c3:79:30:75:34:9c:41:
3c:22:e7:2b:c2:bb:32:f0:34:39:77:b5:4d:55:a5:93:29:4d:
a9:20:d4:ea:1e:47:0b:95:82:ce:da:b6:7e:ca:09:1b:82:32:
9f:ad:12:06:de:5e:c8:40:bb:ad:33:d9:18:b6:16:d1:a8:e6:
70:6a:98:1b:85:5e:74:cf:71:8e:96:ba:1d:cc:4e:f7:28:58:
8f:01:32:8f:7e:ab:b8:da:e5:e6:98:75:96:6e:cf:2c:ee:40:
9d:5b:9a:89:ae:de:86:95:27:f3:75:47:df:9a:ac:de:94:01:
f1:a1:32:7c:81:59:97:9c:4e:9a:cc:ac:1e:6c:8a:a7:ad:95:
68:24:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:57:40 2025 by rpki-client