Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jLfVCxOgrL_-zONqbayp3gGLzjU.roa
File: jLfVCxOgrL_-zONqbayp3gGLzjU.roa (raw, json)
Hash identifier: dUIsrctbaiKaBnj3Ia4yE/iSzXVXZ+IMmfdavBm+9ag=
Subject key identifier: 8C:B7:D5:0B:13:A0:AC:BF:FE:CC:E3:6A:6D:AC:A9:DE:01:8B:CE:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878BAB71F0232C724BD12BF07624756B0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jLfVCxOgrL_-zONqbayp3gGLzjU.roa
Signing time: Sun 16 Apr 2023 20:04:41 +0000
ROA not before: Sun 16 Apr 2023 20:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:8bab:623/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8b:ab:71:f0:23:2c:72:4b:d1:2b:f0:76:24:75:6b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 20:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cb7d50b13a0acbffecce36a6daca9de018bce35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:35:d3:7f:b1:38:fa:12:d2:cb:81:83:b6:
35:16:e4:b6:57:19:bc:9f:0b:65:59:e6:86:52:13:
54:95:ad:44:bc:f8:f3:92:ec:b9:32:d8:c9:1b:d6:
3a:78:ec:03:07:2c:32:6d:19:85:0b:36:d4:53:b4:
34:6c:cf:e0:88:d5:19:f6:5a:b6:6a:56:9c:1a:aa:
87:9e:ee:22:12:9d:e2:94:7b:a6:0d:86:e1:50:37:
fd:25:f3:4e:e3:a5:8e:a1:26:90:c6:0d:28:c2:c8:
71:a5:20:17:5a:4f:43:6c:44:7c:5e:fc:2f:e0:ba:
46:2d:b5:47:eb:9a:41:e9:2c:19:b7:a5:e2:a4:e7:
cf:15:3c:19:c8:95:f0:29:d5:95:56:74:1f:b2:6e:
f6:59:4e:e4:9f:c1:79:c3:91:37:03:f7:37:7a:46:
39:72:a6:d7:fc:8b:90:25:70:2e:29:3e:d8:9b:d3:
26:41:d4:64:b2:16:35:6f:5f:9c:4f:42:71:22:20:
51:42:65:10:83:58:76:af:97:2a:24:99:5c:48:12:
ca:51:6d:21:6d:cc:3f:b0:06:e1:c8:aa:17:cd:8f:
73:7b:8f:aa:2e:02:7f:a2:aa:47:e5:21:15:2e:b2:
70:4f:74:7c:6e:16:60:4f:e1:3a:5b:bf:c6:ae:b4:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:D5:0B:13:A0:AC:BF:FE:CC:E3:6A:6D:AC:A9:DE:01:8B:CE:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jLfVCxOgrL_-zONqbayp3gGLzjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:7b:f0:62:25:01:06:58:42:ea:c5:81:3c:5b:a9:b9:e1:da:
e6:14:cb:8c:71:55:61:c1:19:23:c4:1a:08:b1:5b:97:4a:70:
a3:9b:fc:4e:23:62:b4:28:36:e4:af:9e:df:08:a5:f0:58:41:
35:3f:6b:bb:6f:7b:e1:1e:eb:a2:2d:de:ca:b0:71:c7:40:be:
57:80:e3:4a:8a:4c:03:9d:67:71:43:40:5f:b5:27:4a:23:4f:
7a:d1:fa:d6:5f:84:41:0e:46:8f:63:61:97:62:94:e5:be:5d:
55:5f:b0:2e:8b:a9:ae:ef:3d:97:c9:23:f3:e9:fe:b4:66:a4:
55:e6:e7:e8:ef:bb:de:ba:8a:b8:a7:76:e3:f2:3c:5e:44:fc:
8c:ee:b8:4e:ee:8f:4c:50:93:94:a6:d0:70:dd:d3:d6:a9:f9:
2b:19:19:26:27:f0:26:b8:ad:e3:39:7e:da:9c:db:ea:b9:b3:
69:fe:54:36:4d:bf:82:42:c7:16:9e:44:21:c0:d0:8a:fb:05:
ef:77:36:60:29:ed:4d:db:ac:7e:00:2c:59:c0:1d:eb:ea:c4:
9a:93:57:9c:e2:e8:fe:62:02:51:a0:35:ac:2e:e5:86:15:cc:
e1:2a:4d:e6:49:b0:a6:56:40:4f:4d:6c:f5:60:a7:27:8b:29:
99:62:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:37:51 2025 by rpki-client