Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jLS0W8OxHag7LRYVldKLfIgvCVA.roa
File: jLS0W8OxHag7LRYVldKLfIgvCVA.roa (raw, json)
Hash identifier: KNW+C08LwQACNoLxPqA0dewL4p5C5vyRKjRsFIf5VsE=
Subject key identifier: 8C:B4:B4:5B:C3:B1:1D:A8:3B:2D:16:15:95:D2:8B:7C:88:2F:09:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866D06A63FECC604A298AD42EF87636ADC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jLS0W8OxHag7LRYVldKLfIgvCVA.roa
Signing time: Mon 20 Feb 2023 04:13:17 +0000
ROA not before: Mon 20 Feb 2023 04:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:06:a6:3f:ec:c6:04:a2:98:ad:42:ef:87:63:6a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 04:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cb4b45bc3b11da83b2d161595d28b7c882f0950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:c2:53:43:cc:87:8a:b0:cf:c2:53:2d:df:
0a:30:1f:d2:3b:63:5b:d8:e2:2d:02:5a:b0:8e:82:
bd:41:a2:a4:ff:b6:1f:2c:53:e4:a4:a7:75:ae:de:
ec:f5:28:cb:d8:37:e6:6e:2e:90:43:f6:f1:ac:9c:
10:fd:00:67:4d:86:98:73:7c:be:d3:ed:ba:43:f3:
a4:05:d7:d7:66:e2:e8:e9:e5:c3:42:43:02:33:08:
94:70:66:fb:de:61:53:08:e6:3f:df:21:d7:a6:6e:
2d:c2:77:24:27:1c:93:34:1b:b1:14:49:69:05:ed:
78:3c:c7:88:4e:9a:42:e2:46:af:00:5d:39:cc:ee:
01:fb:ed:c1:1c:4d:14:9d:ee:fe:9f:41:b1:4e:c3:
46:4f:5a:75:19:3c:f6:62:0b:60:2e:c5:54:c2:89:
72:95:cc:5d:17:37:e6:a4:c9:84:a2:10:8e:6c:68:
f7:de:3a:c3:f3:6d:b8:ee:54:31:a4:3e:dc:6b:f6:
6e:d1:e4:9e:3e:14:c8:5e:4a:fa:4f:8f:4e:03:40:
72:88:e4:1f:0d:e6:86:d9:02:b2:b5:f2:80:91:56:
96:fa:83:1a:55:69:1d:1d:6e:76:6a:a2:38:5b:5f:
17:67:ca:30:64:de:b2:d4:e3:60:0d:85:77:37:86:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B4:B4:5B:C3:B1:1D:A8:3B:2D:16:15:95:D2:8B:7C:88:2F:09:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jLS0W8OxHag7LRYVldKLfIgvCVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:7a:4b:be:4a:eb:bb:7a:51:c6:36:a3:f7:51:ee:0e:32:c9:
03:18:1a:ed:23:a2:71:b4:b4:97:78:e7:57:e0:d3:e7:5d:13:
43:34:4d:5f:66:f3:2f:46:91:8f:2b:60:8b:7a:47:b1:22:00:
29:12:d6:0a:bd:b7:74:31:3d:08:a9:29:14:88:80:6e:2c:87:
c9:65:b2:b4:4d:1c:c1:54:ed:56:60:5c:ab:51:c7:2a:41:06:
8a:ed:cb:8b:91:39:ae:ba:3e:56:59:ea:cb:da:2e:f2:9f:bb:
ff:39:56:3b:ba:16:06:3b:b9:0f:5e:16:4b:1b:05:a4:ea:04:
03:03:e4:ff:52:7e:67:b7:3f:cc:bb:4b:da:9b:cc:5c:e4:78:
9d:17:fb:37:e3:07:1e:2e:ef:d6:e0:dc:7c:e6:37:a4:86:9e:
10:28:97:88:5c:d1:c0:4b:75:d8:44:1a:a3:4f:60:ac:77:90:
ee:6a:21:fa:23:30:3f:35:53:45:39:bf:00:15:c0:1d:3d:e7:
07:e8:f6:86:63:9c:db:81:3e:ba:dd:02:14:7a:6e:e3:00:20:
2f:69:1c:15:0d:9e:f9:5b:32:22:b8:0f:4f:5d:aa:b0:a9:e2:
37:61:7b:6c:7e:eb:d8:5b:20:3a:80:b4:fa:6d:90:d5:72:d9:
79:d8:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:52 2025 by rpki-client